Static task
static1
General
-
Target
82531a7bb29816dff2e17c42a220b3f1_JaffaCakes118
-
Size
801KB
-
MD5
82531a7bb29816dff2e17c42a220b3f1
-
SHA1
3dbfd6987343970d0aa889a09162f4841c616691
-
SHA256
3b77c21fe101bdb03c1f7e0bdf0f59697eb653097f9dbb5f24d7a648aac12354
-
SHA512
544d617e77e6d2b3d53097e270f29433ab3309bff9b5d29a9f07d8bf09275d2913343e168120894b00a0876749de75b8ee9f530c6c13f62c91ba9bac2f857a22
-
SSDEEP
24576:MdnvcY5sV0pqf6bGKcVLiqK9c0hsso4HQRVSjq14lf0G:invcvV4c6bSiycHgcq2lj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82531a7bb29816dff2e17c42a220b3f1_JaffaCakes118
Files
-
82531a7bb29816dff2e17c42a220b3f1_JaffaCakes118.sys windows:6 windows x86 arch:x86
504fb81b9d6a896013d0e5b7907da4fb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
IofCallDriver
IoAllocateMdl
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
MmUnlockPages
IoFreeMdl
ExAllocatePool
ExFreePool
NtQuerySystemInformation
hal
KfLowerIrql
HalMakeBeep
Sections
.text Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmm0 Size: 533KB - Virtual size: 533KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmm1 Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ