Static task
static1
General
-
Target
7183161c55518932feedf6b7e681f12a_JaffaCakes118
-
Size
22KB
-
MD5
7183161c55518932feedf6b7e681f12a
-
SHA1
20a5557ed9926293289a1409ed00bd337cc65e54
-
SHA256
7ea4fb96102a36749fadcabdafbf8609bf7fa696052b9f1db04c8bdcc2824000
-
SHA512
a467d9d46c6263d12c7f25b972b501ec94cd4aed59e86a6217d4f4bee8fd36598ddf2c9fa462f1ef1df4ec401cf63d95b805775160c113c4a7d9ee5da33055c8
-
SSDEEP
384:NWpdvFpESf2cI62N4/FgQyJw9Jwbo/YLuhotMX5S8TaAkg:NWvvFGSecIJuyeuow/6XtGng
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7183161c55518932feedf6b7e681f12a_JaffaCakes118
Files
-
7183161c55518932feedf6b7e681f12a_JaffaCakes118.sys windows:5 windows x86 arch:x86
55f01a2f5037ec43ba55155ff660f25a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmGetSystemRoutineAddress
RtlInitAnsiString
ExAllocatePoolWithTag
RtlAnsiStringToUnicodeString
RtlValidRelativeSecurityDescriptor
IoBuildDeviceIoControlRequest
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 253B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ