adpahci.pdb
Static task
static1
General
-
Target
2ac98a19bcb4d9e1061b6e683f59c490_JaffaCakes118
-
Size
324KB
-
MD5
2ac98a19bcb4d9e1061b6e683f59c490
-
SHA1
5258471ed80dfee32830ddd979ac7954ea92320f
-
SHA256
7c77aad390fde87d0b8a8a4c3a2d5e2c15d890189003312f75a8a444ad47fa40
-
SHA512
b05404affd0cee4bb6bd77896376b09a3e234f6d879f6c02d597a0bccbeb7fb03cfaaa70a2196f271a7c489667421f8da6a0028b4e0c47a9b654f6979a95e558
-
SSDEEP
6144:+fXl/CgWJTeGbx+48U1cxf3Db4+kzc+/1zVHNMv1qqL:+921rp+xa1mq2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ac98a19bcb4d9e1061b6e683f59c490_JaffaCakes118
Files
-
2ac98a19bcb4d9e1061b6e683f59c490_JaffaCakes118.sys windows:6 windows x64 arch:x64
90fccaccb58b0601aeeaa8c4563fd4f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
storport.sys
StorPortGetLogicalUnit
StorPortStallExecution
StorPortInitialize
StorPortNotification
StorPortGetBusData
StorPortReady
StorPortLogError
StorPortPauseDevice
StorPortGetDeviceBase
StorPortSetDeviceQueueDepth
StorPortBusy
StorPortSetBusDataByOffset
StorPortGetPhysicalAddress
StorPortGetScatterGatherList
StorPortGetUncachedExtension
StorPortDebugPrint
ntoskrnl.exe
KeBugCheckEx
Sections
.text Size: 302KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 1024B - Virtual size: 750B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ