Static task
static1
General
-
Target
19f252d04f3fe46b4d70b32bc834528b_JaffaCakes118
-
Size
22KB
-
MD5
19f252d04f3fe46b4d70b32bc834528b
-
SHA1
cea1cca82f978eaed22181eb97b94269054ad414
-
SHA256
d9a08edc7564a7c7632fbbf3343a81f724b72f2686532e4bbffcc4185823e325
-
SHA512
806c2fb462b2d3e670dd83f9bcfb216506b4b6f9912bd38e47d8899882ef7237b94811645941c81d14a05d04a6afcbb42487be4d1d19797429111cf23e5173ce
-
SSDEEP
384:h+N5Fl0sKjlXPHz81Ol6NVMeeLyV1V++Jg+XsXdmmO6xA:hGlvqPHIkl6EyVS+JXpzd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19f252d04f3fe46b4d70b32bc834528b_JaffaCakes118
Files
-
19f252d04f3fe46b4d70b32bc834528b_JaffaCakes118.sys windows:5 windows x86 arch:x86
58312395bcfb1f9ec09119eca4f886b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmGetSystemRoutineAddress
RtlInitUnicodeString
ExRaiseStatus
ExAllocatePoolWithTag
_except_handler3
ExFreePoolWithTag
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 214B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ