Static task
static1
General
-
Target
884fbc330ad61965d37b27a6fb49e1f3_JaffaCakes118
-
Size
42KB
-
MD5
884fbc330ad61965d37b27a6fb49e1f3
-
SHA1
18bde2b187caf594778a12c470640f3d85bfa935
-
SHA256
5e3175df47db06f9d1f256ddb35fe41858c756be8a203587c2186e51ab8b6776
-
SHA512
4cf1fe3362d3118d5209c351ca498604b53db04d9d16adcfdbe13c9935335b017d7aa6f6d8f9c02ad28bdf6f0f4210c08410cb314aca486a28cdc5e8bea4b980
-
SSDEEP
768:e30cVGgYvypdRd11rsiPtxG10qfF+GaAUlo/lAISZddel:wGgAypTNsiVxG7fF+GtUl8AIidsl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 884fbc330ad61965d37b27a6fb49e1f3_JaffaCakes118
Files
-
884fbc330ad61965d37b27a6fb49e1f3_JaffaCakes118.sys windows:5 windows x86 arch:x86
d539ea2c15fdb2111fe240a6a8c893c9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoWMISetNotificationCallback
RtlInitUnicodeString
KeGetRecommendedSharedDataAlignment
ExAllocatePoolWithTag
MmGetSystemRoutineAddress
PsChargeProcessPoolQuota
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 252B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ