Static task
static1
General
-
Target
396e898fc52d706e0d18f37d785c46be_JaffaCakes118
-
Size
20KB
-
MD5
396e898fc52d706e0d18f37d785c46be
-
SHA1
d6a5d1de110eec5882dc456ac03b3b9e70f19cda
-
SHA256
1dcf184b16e2a7fab25a4a7df5c4b8a1d1de2e80c44f0d1c4cfe973bba773ec6
-
SHA512
5b9bee5a3763ac0035a9fc63c24196e6ad7f46505c24829891b75a3f77fb807521f9026ff6b6815940bbbb575553ebfe5decca852c523184acbe3e09f47f6576
-
SSDEEP
384:knC9o5C6sqFWmJQmhQ1V03Ue/CyugTsJQEqS3qSCg6NpI+wp:kyo5CUFpJQmOa3Ue/jBYJQz7g6NpLg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 396e898fc52d706e0d18f37d785c46be_JaffaCakes118
Files
-
396e898fc52d706e0d18f37d785c46be_JaffaCakes118.sys windows:5 windows x86 arch:x86
6bb11f1599a1ffbabaf4622053c97890
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExAllocatePoolWithTag
RtlInitUnicodeString
ExFreePoolWithTag
MmGetSystemRoutineAddress
ExRaiseStatus
_except_handler3
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 214B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ