11111111111111111111111111111111111111111111111111111111111111111
Static task
static1
General
-
Target
3ce8be14a9ad6c2b689aac058aef4f18_JaffaCakes118
-
Size
4KB
-
MD5
3ce8be14a9ad6c2b689aac058aef4f18
-
SHA1
78652f219101d6b4a9e525f674ca09e929a189cc
-
SHA256
7cdea50ad5d739332ce0a63b21d7aab735986dd941c3f11867030f0fdc92a7ab
-
SHA512
2a5662c8b48e76bda98f98500e53c1bb2d001d8cff6ac93dcd6e8a30664344ddbb98f5efb8cdbec844657e0c68f5bbeaba1123c4d71ac834f04005bc29c79f9c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ce8be14a9ad6c2b689aac058aef4f18_JaffaCakes118
Files
-
3ce8be14a9ad6c2b689aac058aef4f18_JaffaCakes118.sys windows:5 windows x86 arch:x86
d0d0a7ad563cd4d27e2dd5c7de5ad3b3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
KeWaitForSingleObject
KeSetTimer
KeInitializeTimerEx
_allmul
ExFreePoolWithTag
_stricmp
ExAllocatePoolWithTag
ZwQuerySystemInformation
_wcsicmp
KeStackAttachProcess
KeUnstackDetachProcess
KeServiceDescriptorTable
PsTerminateSystemThread
ZwClose
ZwReadFile
ZwWriteFile
ZwCreateFile
RtlAnsiStringToUnicodeString
RtlInitAnsiString
PsCreateSystemThread
KeTickCount
KeBugCheckEx
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 214B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 128B - Virtual size: 26B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 768B - Virtual size: 712B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ