vga.pdb
Static task
static1
1 signatures
General
-
Target
5f555a4ea8d40dd7f472ed9a3741405d_JaffaCakes118
-
Size
22KB
-
MD5
5f555a4ea8d40dd7f472ed9a3741405d
-
SHA1
49d5e6dadd486c98ab3bf0e7ce1f759466e27a91
-
SHA256
5612fc4e9e3fdc3c9864887766f78b0528d349c6f2d6f40cc45253dc3be55da9
-
SHA512
c1c5e6ebfc1531aacdf03059f45f24f48ab5708af01b9cb82f0df4c8ff6b895488c93c7fc0bd5c692154257bd0bdccf4de8f1fcdb282997b37acade8ae345246
-
SSDEEP
384:Ubi0WOL9YxOozhWqddnX+T/j4IIqwtUNiRxhoqAmcj4UdWkD8DLwWXeBXV9y6XWS:Ubi0P9YoozYQdnX+T/j3I7tUNiR+muqE
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f555a4ea8d40dd7f472ed9a3741405d_JaffaCakes118
Files
-
5f555a4ea8d40dd7f472ed9a3741405d_JaffaCakes118.sys windows:5 windows x86 arch:x86
2f9f63c86fa68645ec31c9297d383a27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
KeBugCheckEx
KeTickCount
memmove
_except_handler3
videoprt.sys
VideoPortFreePool
VideoPortQueryServices
VideoPortFreeDeviceBase
VideoPortInitialize
VideoPortReadPortUshort
VideoPortWritePortBufferUshort
VideoPortWritePortUshort
VideoPortWritePortUchar
VideoPortReadPortUchar
VideoPortZeroDeviceMemory
VideoPortStallExecution
VideoPortInt10
VideoPortZeroMemory
VideoPortCompareMemory
VideoPortVerifyAccessRanges
VideoPortWriteRegisterBufferUchar
VideoPortAllocatePool
VideoPortSetTrappedEmulatorPorts
VideoPortMoveMemory
VideoPortReadRegisterUchar
VideoPortWriteRegisterUchar
VideoPortWritePortUlong
VideoPortGetDeviceBase
VideoPortGetDeviceData
VideoPortUnmapMemory
VideoPortMapMemory
VideoPortSynchronizeExecution
VideoPortReadPortUlong
Sections
.text Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 308B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PAGE_DAT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jnyi Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 768B - Virtual size: 698B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ