Static task
static1
General
-
Target
1a2e26f23957fbedede3af4cab42d669_JaffaCakes118
-
Size
18KB
-
MD5
1a2e26f23957fbedede3af4cab42d669
-
SHA1
412510cce6ea3a2c4ea787c8bb08b7c806d04f5f
-
SHA256
948925fadc6f9f0dca0cb8e8abf7e58c378ba177e903c6a73b8f436d2bf2f132
-
SHA512
a404ec6a2d2c7bf3ec922284842d74aefcf2afcb7aed95a4975df70a491eb1ec7eae2c3fa8606342d32e405f28a62ff24c3ebb4233b247a1c295b3739bcf5ac8
-
SSDEEP
48:qjebn7Dflxjwyfmrael8EWQswaK/aLHkLGKFGdgeOF8Qlfd5XuSdy:8UnNxkyfwXyEVkEjUp0rXu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a2e26f23957fbedede3af4cab42d669_JaffaCakes118
Files
-
1a2e26f23957fbedede3af4cab42d669_JaffaCakes118.sys windows:5 windows x86 arch:x86
d39f7af3490c67e24ae5f6b1fcc21e86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoGetCurrentProcess
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlFreeUnicodeString
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 480B - Virtual size: 465B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 96B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 192B - Virtual size: 172B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 64B - Virtual size: 46B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ