viaide.pdb
Static task
static1
General
-
Target
88608e910d394467b5c228eb12804745_JaffaCakes118
-
Size
5KB
-
MD5
88608e910d394467b5c228eb12804745
-
SHA1
dcde28891440be880af0ec33713aaf9785e5c77a
-
SHA256
4e845f40c337e85a474c38cad25cdd12a2c95bbc56e511e015d1f727d83a20bc
-
SHA512
32ee7b049c13aad86142cbb473d53d120b574c1281baf13f9085eb6940332fb064257586e348a5e907c7f35ae5a46e7f7111ba865b776e62bd5aef160324df41
-
SSDEEP
96:4/Qtre4c/bva2ia8YxW/VvVgDT9DV+j5w12md2FoFurf:48RwbS2P8YQdvqTxVCOEmha
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88608e910d394467b5c228eb12804745_JaffaCakes118
Files
-
88608e910d394467b5c228eb12804745_JaffaCakes118.sys windows:5 windows x86 arch:x86
a53ad5063c464018b23c816559e6feb4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
KeBugCheckEx
KeTickCount
hal
WRITE_PORT_ULONG
READ_PORT_ULONG
pciidex.sys
PciIdeXGetBusData
PciIdeXInitialize
PciIdeXSetBusData
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 111B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 358B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 128B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ