Static task
static1
General
-
Target
7677e94d8d1091eddd45f42ca6eecacf_JaffaCakes118
-
Size
55KB
-
MD5
7677e94d8d1091eddd45f42ca6eecacf
-
SHA1
e99622d4bfa25d9f5c6ee782944a55109dbe3b08
-
SHA256
0bf438df385db30434a5c4e2ce2c40040805c01c4e8dbcb55e19931fa7a4dfbb
-
SHA512
18b6ff14d198f20ba02bac89531108c34adbdeacdf21332f0c928fe1574f00a404a95cab646f8b0b10240c7a87e81fe3eb2bcc77b986949a8e620e8a62093a37
-
SSDEEP
1536:9x/kNuVtdhpWyoRpuF4ovCJAPgV/9QQvY4m+zmJc:n/aI/2ydWovLoQQA9FJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7677e94d8d1091eddd45f42ca6eecacf_JaffaCakes118
Files
-
7677e94d8d1091eddd45f42ca6eecacf_JaffaCakes118.sys windows:4 windows x86 arch:x86
e26c9968b701ec90d16e3647351ec6f0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hal
KeQueryPerformanceCounter
ntoskrnl.exe
PsGetCurrentThreadId
KeInitializeEvent
KeInitializeMutex
PsGetCurrentProcessId
KeInitializeTimer
KeTickCount
MmQuerySystemSize
PsGetVersion
KeInitializeSpinLock
KeQueryActiveProcessors
KeGetCurrentThread
IoGetCurrentProcess
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 422B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 384B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ