Static task
static1
General
-
Target
391afb718c2ded528e624100cdc9eda3_JaffaCakes118
-
Size
92KB
-
MD5
391afb718c2ded528e624100cdc9eda3
-
SHA1
02e8b75105f1cf511382eb20fdcc6dc84708785e
-
SHA256
8319187d869863b52b3ed990a347e24b3c2a018c51d54712d56c064e2e508680
-
SHA512
bad3593ec13726e802b3bcc974a38e078d6c32a46a16b240d47bc73aff1755d3ce6cf24a088f20f7552e8a6802b48f62fbff890806cad5e908dec704480c2a64
-
SSDEEP
1536:6P9Q1dKCUKPQKrRryNxp8pcczNoA+v7GaFu70032cREFluB:uO3TUKtVyd8lofjFG00gQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 391afb718c2ded528e624100cdc9eda3_JaffaCakes118
Files
-
391afb718c2ded528e624100cdc9eda3_JaffaCakes118.sys windows:5 windows x86 arch:x86
a20b439394359433d4aa8c125612228c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hal
ExReleaseFastMutex
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 128B - Virtual size: 78B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ