sffp_sd.pdb
Static task
static1
1 signatures
General
-
Target
73e6833331d831111b524048969adb0d_JaffaCakes118
-
Size
22KB
-
MD5
73e6833331d831111b524048969adb0d
-
SHA1
76c9f57cd4dd2ee60baa5b189cd519032531c772
-
SHA256
391e79a3d4b6dfe016c5525927b1e2ae9fe3729affc69c099c6f174654401db5
-
SHA512
ca3ab986facb69846ce35e1cf669e27d44b242cbcde6ad0527901363c9db2f2c0c7d3439bd6b2715094cdf6262162c18e354e772650d1e1d1f93484b360d79c3
-
SSDEEP
384:jN4G9zvkPMRgBzdlNWAIefdDF8YLxOWNE2OEGgaAnl+Ai7Rq/52mpWS8l6W:j6G9xAz4BIf7x5NjOEGgrl+zRqh2mwl
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73e6833331d831111b524048969adb0d_JaffaCakes118
Files
-
73e6833331d831111b524048969adb0d_JaffaCakes118.sys windows:5 windows x86 arch:x86
39eb391024b9a67ac281ccaa605aaaf3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
IoAllocateMdl
ExAllocatePoolWithTag
_except_handler3
IofCompleteRequest
IofCallDriver
KeWaitForSingleObject
KeInitializeEvent
_allmul
_allshl
KeSetEvent
IoFreeIrp
IoDeleteDevice
MmBuildMdlForNonPagedPool
IoAttachDeviceToDeviceStack
IoCreateDevice
PoStartNextPowerIrp
IoAllocateIrp
RtlCompareMemory
PoCallDriver
ZwQueryValueKey
RtlInitUnicodeString
ZwClose
ZwOpenKey
KeTickCount
KeBugCheckEx
ExFreePoolWithTag
IoDetachDevice
IoFreeMdl
ObfDereferenceObject
IoBuildSynchronousFsdRequest
IoGetAttachedDeviceReference
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 768B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 640B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ankw Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 390B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ