C:\sys\i386\RESSDT.pdb
Static task
static1
General
-
Target
8753f053f18a022e1eb8c6b0f39634b9_JaffaCakes118
-
Size
2KB
-
MD5
8753f053f18a022e1eb8c6b0f39634b9
-
SHA1
8cd9e4873fdee2784cd23315a160c031759a0f6f
-
SHA256
ed8deea673f9607c0a6169457047b6f42855eecf9e99c3e1535e3f9053080da8
-
SHA512
3691aff9faa2ee73436fd3b4cbae257630f7b7777dea81cdd57ef3e19aedf8890477742a1de20c3fa75ddefb8b309458e8cb00cacbfdf9c2e9693a8de1cf8fa7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8753f053f18a022e1eb8c6b0f39634b9_JaffaCakes118
Files
-
8753f053f18a022e1eb8c6b0f39634b9_JaffaCakes118.sys windows:5 windows x86 arch:x86
d6443f31376f0df2b407e0920f0958da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
IofCompleteRequest
DbgPrint
KeServiceDescriptorTable
ProbeForWrite
ProbeForRead
IoDeleteDevice
IoDeleteSymbolicLink
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
_except_handler3
Sections
.text Size: 768B - Virtual size: 704B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 139B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 324B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ