Static task
static1
General
-
Target
310378ed477b7760dfcf2db58a8b33df_JaffaCakes118
-
Size
8KB
-
MD5
310378ed477b7760dfcf2db58a8b33df
-
SHA1
f3fb4a9e4f87da232ac590bb2472a4dcd249ceca
-
SHA256
97b40b1e0f62e39906592de7120d3688deb6eab3f477e2649cc7465b5a929286
-
SHA512
67fcbc700053fc1f98904ef2a6c5416aa87b5236f4d4fd2c982a0398cade42bed7ca20d4e9206f15992d12daed7ee38432ff55e4551216ea65ab1d3211629099
-
SSDEEP
192:zIvq2oeB8WRSSFSSXAV0QdCvT+qJAY+Y9gM6fDgh2VmYmsu:cvqiBcaQdCvT+qHE8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 310378ed477b7760dfcf2db58a8b33df_JaffaCakes118
Files
-
310378ed477b7760dfcf2db58a8b33df_JaffaCakes118.sys windows:4 windows x86 arch:x86
694756f952ec45c76cb3c11f2d22aee1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ndis.sys
NdisGetCurrentSystemTime
NdisRegisterProtocol
ntoskrnl.exe
IoCreateDevice
IoCreateSymbolicLink
IofCompleteRequest
KeServiceDescriptorTable
MmIsAddressValid
IoGetCurrentProcess
ObDereferenceObject
IoGetDeviceObjectPointer
IoCreateFile
IofCallDriver
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 192B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 592B - Virtual size: 584B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 720B - Virtual size: 706B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ