Static task
static1
General
-
Target
6746809c571afece2cb968288dca5fc0_JaffaCakes118
-
Size
49KB
-
MD5
6746809c571afece2cb968288dca5fc0
-
SHA1
e8df85eb573b792bd486b71e74aed68f183ee185
-
SHA256
5f2dd0180bf46a9df12483dfc977db34d9173078b74ed3208055bcac39d4d27f
-
SHA512
20c747426b6f41231d85f4a0c0f38beca8156f71bfbf072214cf660ad67a5e5b4146e765723e660f46b2d3298725c41575a5c5556ab737b8e50f239a4fbd3774
-
SSDEEP
1536:zfqV7+b6H4ogN4JcK56zyHW34/7ALZUgR:DqVM6VgjK562G4/7AV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6746809c571afece2cb968288dca5fc0_JaffaCakes118
Files
-
6746809c571afece2cb968288dca5fc0_JaffaCakes118.sys windows:4 windows x86 arch:x86
ced2203b2940cdbac4fbc41ab77a70a7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hal
KfLowerIrql
KfRaiseIrql
KfReleaseSpinLock
ntoskrnl.exe
strstr
ZwCreateFile
strcpy
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.unc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ