Static task
static1
General
-
Target
8c9a653c5eb71b291de44cdf9a736267_JaffaCakes118
-
Size
41KB
-
MD5
8c9a653c5eb71b291de44cdf9a736267
-
SHA1
1e9d053b240b41812cd91eba199ac004a6d11a87
-
SHA256
52a329704aa99287788839735eeb551a1b3aaedf64ee78db53824252f18fcecc
-
SHA512
dc8e6b70faff5a43a5732b641f966f7dee76311ddd076d666fb7712838458ccd1d5062d5265a6fd5cd87b23710e6a44320252c5117cfb7284378372cdaeee4da
-
SSDEEP
768:jWDaW38wyUdMgb+OVdDZr/Ck/ETk6RabXe:493+QMwv0kMIO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c9a653c5eb71b291de44cdf9a736267_JaffaCakes118
Files
-
8c9a653c5eb71b291de44cdf9a736267_JaffaCakes118.sys windows:5 windows x86 arch:x86
04ee5eeab72fe6cf35e30e22b7a159d3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmIsNonPagedSystemAddressValid
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlAppendUnicodeToString
ExAllocatePoolWithTag
MmGetSystemRoutineAddress
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 248B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ