Static task
static1
General
-
Target
193c72c84c4227551ae5b7c378fded7c_JaffaCakes118
-
Size
165KB
-
MD5
193c72c84c4227551ae5b7c378fded7c
-
SHA1
4d4769f34cc20657a2befc7c823323324ed798bf
-
SHA256
74fc4b4572be12daae05b6cab1b02c4f2f8a6498aa88e9a64db97cad785ae83c
-
SHA512
125f6e1407d2de62afc50f45c63bba8d24a6e39d739d4afdd469a33580ad8c6029796d8fcfee0c0d6a9b5a28b6a41bcc5f32da7030b4ce38943f49e66c04033a
-
SSDEEP
3072:JRvk/U6ju0M3lyXyI+q4mruKMwR3G3o8vjtDBAn8llhrn4hnA0CK3q74MunM:urMVyXyI+qNuKPRmntDBAn8fhT4hnABL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 193c72c84c4227551ae5b7c378fded7c_JaffaCakes118
Files
-
193c72c84c4227551ae5b7c378fded7c_JaffaCakes118.sys windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nsp0 Size: 295B - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 165KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE