Static task
static1
General
-
Target
244f88dac834a33fc1c3cbaeb773ea90_JaffaCakes118
-
Size
26KB
-
MD5
244f88dac834a33fc1c3cbaeb773ea90
-
SHA1
95e4eeff22c818852fdc0dc3a172bfb0aa8e8fe0
-
SHA256
cc92916721dc48962d20c66fc5b1718b5a500e4bf1b062424b71dfb3161811fb
-
SHA512
b036ad33bf7264220f49d77d48ae0341ebe1a466854da13c736803ca202de1a831e094af7a5a93e5af7d90f939d7ec7b19f7627e5ff1bad198184aa9928d0bfc
-
SSDEEP
384:JC/Eu+WeTYZtnPxCqSlFJXPo8gAOiv99e6yelQPTL7ncsGsrfd:qEu+WeTw2BJXPohA/99kPTfcsz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 244f88dac834a33fc1c3cbaeb773ea90_JaffaCakes118
Files
-
244f88dac834a33fc1c3cbaeb773ea90_JaffaCakes118.sys windows:5 windows x86 arch:x86
9734f7f111d4ab74c3a7a36af96bbefb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
NtSetSecurityObject
ExAllocatePool
IoGetDeviceInterfaceAlias
memset
ExRaiseAccessViolation
IoWMIQueryAllDataMultiple
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 210B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ