Static task
static1
General
-
Target
83eeda5046c1476d5d7b6bb221e7d1d7_JaffaCakes118
-
Size
40KB
-
MD5
83eeda5046c1476d5d7b6bb221e7d1d7
-
SHA1
13ec55281f7decadaac776450390232a1369875f
-
SHA256
48d3652158bc3406bbbbbfd223998af2b258466c5e77aa0c18e05c605395621d
-
SHA512
0d5d3b20dd4f6bb40d9109fd55a71d86ff7ddaacc286b86e9ad05a47b7948382b94ceb71884cf62ba8e41fe182f8389b1be7086b6fa322799f291b3fd64dca80
-
SSDEEP
768:F0LQSMuoqEmgic+46U2wysOIKkGp+fRtItiwv9HoSN3E95ooHhZN8jZO6DOGT:F0wfWiXSN3EIC8Y6D1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83eeda5046c1476d5d7b6bb221e7d1d7_JaffaCakes118
Files
-
83eeda5046c1476d5d7b6bb221e7d1d7_JaffaCakes118.sys windows:5 windows x86 arch:x86
255166120636f8d841ad5ab089a6b65b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmGetSystemRoutineAddress
RtlInitUnicodeString
ExAllocatePoolWithTag
ExFreePoolWithTag
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 170B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ