E:\JUSTKIT\JUST\JUST\JUST.JUST
Static task
static1
General
-
Target
2ec3dfc5b68cd6e6743d79d317d4b14d_JaffaCakes118
-
Size
8KB
-
MD5
2ec3dfc5b68cd6e6743d79d317d4b14d
-
SHA1
eb51080bfafe5c20796b08002bf006f95a2f5f47
-
SHA256
bfc30c2407224fd7f4ddf90f99aea4ff37bd91e1e45493612da07140ffdc18d3
-
SHA512
407579d42c7fbe4592261062a415a9fd870674a315979b9d3cb7df8294ac4b23c132f03663982ecc4599be8b850d07e2a8d258aa24665ac23cf6aed9fdf5b86f
-
SSDEEP
96:2jS6FfF3wWwzGvTBI6c6fIdh1TfA+uQ+JAmQMKAxugFbmPFaP9qgkxbJ3YI1AJ:2jpIGHlmTfA+uwAggFmMPQgk/oL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ec3dfc5b68cd6e6743d79d317d4b14d_JaffaCakes118
Files
-
2ec3dfc5b68cd6e6743d79d317d4b14d_JaffaCakes118.sys windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 896B - Virtual size: 787B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 640B - Virtual size: 604B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 896B - Virtual size: 892B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 384B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ