msahci.pdb
Static task
static1
General
-
Target
4cef2e575f765f9d2e847cee1af02b28_JaffaCakes118
-
Size
22KB
-
MD5
4cef2e575f765f9d2e847cee1af02b28
-
SHA1
04e69aaeea06c9a227d2cd5b5dc4aedfc4808c75
-
SHA256
4916a86b6c2b4b141a1b50635ac115c776274bc7b177e6a2d6585775b15514a5
-
SHA512
db856fe53e8db2b565407d37fdea46bcfd01535ce347f690a3de22a0586d5a156d9c3f2d33c9e32b9891c2dae474701933b392e64c26b1d161c582d9cf4d15d7
-
SSDEEP
384:hUHONEle2QmpE9Mh0bbedIoCbIVghduTrl/e2h/jtr1PEGC5OOvKcYLBAS6N3WPn:h76n2dkhCbIVgyTR/9L1PkpvKv9d6un
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cef2e575f765f9d2e847cee1af02b28_JaffaCakes118
Files
-
4cef2e575f765f9d2e847cee1af02b28_JaffaCakes118.sys windows:6 windows x64 arch:x64
048e0814d53b56f7105795deb0fc45d4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
pciidex.sys
AtaPortCopyMemory
AtaPortGetPhysicalAddress
AtaPortReadRegisterUlong
AtaPortInitializeEx
AtaPortDeviceStateChange
AtaPortEtwTraceLog
AtaPortRegistryFreeBuffer
AtaPortGetBusData
AtaPortRegistryRead
AtaPortRequestCallback
AtaPortStallExecution
AtaPortGetUnCachedExtension
AtaPortReadRegisterUchar
AtaPortBuildRequestSenseIrb
AtaPortReleaseRequestSenseIrb
AtaPortCompleteRequest
AtaPortNotification
AtaPortGetDeviceBase
AtaPortGetScatterGatherList
AtaPortRegistryAllocateBuffer
AtaPortWriteRegisterUlong
ntoskrnl.exe
KeBugCheckEx
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ