E:\passthru\siglow\driver\objfre\i386\sumpod.pdb
Static task
static1
1 signatures
General
-
Target
8852fa3ae02754f8bf7f78fd8457e9f0_JaffaCakes118
-
Size
14KB
-
MD5
8852fa3ae02754f8bf7f78fd8457e9f0
-
SHA1
bb685c9b0a8df5d7c57baf7b40070620207bbc96
-
SHA256
2ccb99065e64ac2ea0d19d576dcf1db58c9dd0d940857e0cd3f3414a98bcfa3a
-
SHA512
68e23ff0cfc13d8e808c41cc2f36443b81cd671728f87091b2db3349a35625f7a289b8c03a026bdc08c7a0ef18031c99addde86154977f5ec18018f5c564c6f3
-
SSDEEP
192:PPInM8J0Rv5vHIlIivfj8fY4lmZcdeIPwZaiqzW2hCG+bUcn5igNik6Q6YYKcj:PwPkxvH+Iab8f5e3p24bn9kYYxj
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8852fa3ae02754f8bf7f78fd8457e9f0_JaffaCakes118
Files
-
8852fa3ae02754f8bf7f78fd8457e9f0_JaffaCakes118.sys windows:5 windows x86 arch:x86
614828d0052c9be2ced97ed36d8a59d1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
IofCompleteRequest
strstr
ndis.sys
NdisIMDeInitializeDeviceInstance
NdisQueryPendingIOCount
NdisReEnumerateProtocolBindings
NdisIMCancelInitializeDeviceInstance
NdisGetReceivedPacket
NdisDprAllocatePacket
NdisDprFreePacket
NdisOpenProtocolConfiguration
NdisIMNotifyPnPEvent
NdisFreePacketPool
NdisSetEvent
NdisReleaseSpinLock
NdisAcquireSpinLock
NdisMSetAttributesEx
NdisIMGetDeviceContext
NdisFreePacket
NdisIMCopySendCompletePerPacketInfo
NdisIMCopySendPerPacketInfo
NdisAllocatePacket
NdisSend
NdisIMGetCurrentPacketStack
NdisFreeMemory
NdisQueryBufferSafe
NdisAllocateMemory
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBufferOffset
NdisRequest
NdisReturnPackets
NdisGetPoolFromPacket
NdisTransferData
NdisCancelSendPackets
NdisWaitEvent
NdisCloseAdapter
NdisResetEvent
NdisMDeregisterDevice
NdisDeregisterProtocol
NdisTerminateWrapper
NdisIMAssociateMiniport
NdisIMDeregisterLayeredMiniport
NdisRegisterProtocol
NdisInitUnicodeString
NdisMRegisterUnloadHandler
NdisIMRegisterLayeredMiniport
NdisInitializeWrapper
NdisAllocateSpinLock
NdisMRegisterDevice
NdisMSleep
NdisCloseConfiguration
NdisIMInitializeDeviceInstanceEx
NdisOpenAdapter
NdisAllocatePacketPoolEx
NdisInitializeEvent
NdisAllocateMemoryWithTag
NdisReadConfiguration
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 341B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 640B - Virtual size: 602B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ