Static task
static1
General
-
Target
5ceed515e5a8e122db11b0af26bb4879_JaffaCakes118
-
Size
3KB
-
MD5
5ceed515e5a8e122db11b0af26bb4879
-
SHA1
75353f5c799603ae7bc309240bb7ef2fa1e89457
-
SHA256
724962a1fa90753eb739fa45f22bceacdf9d16acc30f2d6e935b49c0aaafb7c3
-
SHA512
0013490586d621ae44f358694b513b0277465c3308c1ba52edc157d8951410dd15a0bf8f1e1a74022dd87ff1ebc23705995b04c0648201010674bb23e15d0779
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ceed515e5a8e122db11b0af26bb4879_JaffaCakes118
Files
-
5ceed515e5a8e122db11b0af26bb4879_JaffaCakes118.sys windows:5 windows x86 arch:x86
5836458181fe23eebbb739c261e84c97
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
strncmp
IoGetCurrentProcess
strncpy
RtlCompareMemory
DbgPrint
memcpy
KeServiceDescriptorTable
ZwQueryDirectoryFile
KeBugCheckEx
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 246B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 192B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ