l:\ressdt\i386\RESSDT.pdb
Static task
static1
General
-
Target
78261eac0e8003bcc1fc1b1db1ea0474_JaffaCakes118
-
Size
3KB
-
MD5
78261eac0e8003bcc1fc1b1db1ea0474
-
SHA1
a436df6b4d29bfa3ee094a86238189277ae3ce7d
-
SHA256
7d03e16fb58fce25fa358c99414545f0ff611ff0d6930d19af5661fcf19481bd
-
SHA512
f04637b40bf65066e0398f23cd43be6f0c4dc5049a18587a94d514a54db835da6afc28a38840f3d38c27ba8cb78ca6e3e5f2db78c5f77e7cf84794b1da6f89ee
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 78261eac0e8003bcc1fc1b1db1ea0474_JaffaCakes118
Files
-
78261eac0e8003bcc1fc1b1db1ea0474_JaffaCakes118.sys windows:5 windows x86 arch:x86
1e484aa476e511cfea3b69315ca5ad42
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
IofCompleteRequest
DbgPrint
IoDeleteDevice
IoDeleteSymbolicLink
KeServiceDescriptorTable
ProbeForWrite
ProbeForRead
_except_handler3
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
KeTickCount
Sections
.text Size: 896B - Virtual size: 836B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 418B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 114B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ