Static task
static1
General
-
Target
2e183ff205b75819d731ea0eaeb44ed7_JaffaCakes118
-
Size
109KB
-
MD5
2e183ff205b75819d731ea0eaeb44ed7
-
SHA1
30a9337fb0acdf754f10c6b7fffdc229b0163a47
-
SHA256
0bdf6086e5249e3b935ffc4c8aa3c235e2cab72212fcf6b8fcaeceb9b843ab44
-
SHA512
c283695d25b57f68fa44c2ea62d5bcb66a7cf2d56da7dd116cc5dc1c1bbca653a2d12a2cac94a144921e9924999d344ddd98af8283408cad27ba711397c87c97
-
SSDEEP
1536:HyVGiJdkFDvhTIReGHlLuMXbOp57SegSrEP6emvl3YDiFW2GzIik:SMgkFvh4eSlq01Co1zBk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e183ff205b75819d731ea0eaeb44ed7_JaffaCakes118
Files
-
2e183ff205b75819d731ea0eaeb44ed7_JaffaCakes118.sys windows:5 windows x86 arch:x86
f12c4623a1873238c7544fbd58ad775b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoFreeIrp
memcpy
IoFreeWorkItem
ObfDereferenceObject
ObfReferenceObject
KeSetEvent
ZwClose
IoAllocateMdl
IoFreeMdl
KeInitializeMutex
memset
IofCallDriver
IoAttachDevice
DbgPrint
hal
ExReleaseFastMutex
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 386B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ