Static task
static1
General
-
Target
65b0fc47423b5d4d75426856914a729c_JaffaCakes118
-
Size
100KB
-
MD5
65b0fc47423b5d4d75426856914a729c
-
SHA1
0288f557e6aa1cc75dacaf5629576c7460718130
-
SHA256
fa8da2bed358c1a0406a209a2567dc6fdd1f07dbe890e27355b2bb5e8d2ba779
-
SHA512
30cb7cc905f0d52380bd9e625da48d928c54703f2d6c9872bcee53b5c1e710c6a206dec2c6f9f454b45b549a7af7675a14b91ba9169beadc41f54e9b731634b0
-
SSDEEP
1536:RxpsgqtcA8YIdggY2kk5ezax/yGuRVmXgaDPBy4L/ElXgczRbbWG/:3GgkB8YIWUkRux/yDvmRDZy4LIrz1F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65b0fc47423b5d4d75426856914a729c_JaffaCakes118
Files
-
65b0fc47423b5d4d75426856914a729c_JaffaCakes118.sys windows:5 windows x86 arch:x86
a7e82f9f1ca3397aa3638ac59ca109b6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExFreePoolWithTag
IoAttachDevice
IoFreeMdl
KeInitializeDpc
KeInitializeEvent
IoAllocateIrp
memcpy
KeInitializeMutex
IofCallDriver
DbgPrint
KeSetEvent
hal
ExReleaseFastMutex
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 336B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 210B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ