Static task
static1
General
-
Target
263298b39f8e7ff9c3b850e02e24b0aa_JaffaCakes118
-
Size
188KB
-
MD5
263298b39f8e7ff9c3b850e02e24b0aa
-
SHA1
99509d75b1ed4b9d3741bc91450202193b312940
-
SHA256
4d3403fea8173c7315410f854c17aa7b5e238dff584dcef8a84e366e2738899e
-
SHA512
e78c84b962b202c5ef69c9d0daa8f506083e48be58c818235551bb032b40815050f777fa31d277a507135f189446431788322f74d692cd27cf00096951e66f30
-
SSDEEP
3072:ZQdlffI4GZVd15BMA0KTzTMC3aKiODX4r9tj4LvKEQxVRtm7ngiLFCpm719lcxuz:ZQdlffI/BIA0KnF3nxL09q1Q/zm7rumT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 263298b39f8e7ff9c3b850e02e24b0aa_JaffaCakes118
Files
-
263298b39f8e7ff9c3b850e02e24b0aa_JaffaCakes118.sys windows:5 windows x86 arch:x86
2815a26316831738d3675416954567f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExAllocatePoolWithTag
ExFreePoolWithTag
ZwQuerySystemInformation
RtlImageDirectoryEntryToData
memcpy
memset
_except_handler3
Sections
mvxK_QVS Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
torUT7]P Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
E03C34 ? Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_]??6T01 Size: 1024B - Virtual size: 722B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
C)5a_;6h Size: 512B - Virtual size: 360B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
GSi 9Q+E Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
w,foGv6C Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ