Static task
static1
General
-
Target
96f48edfc4319ff51f147bad4e211c8c_JaffaCakes118
-
Size
43KB
-
MD5
96f48edfc4319ff51f147bad4e211c8c
-
SHA1
1772e247bb3f9dd6de2828b26dc8e5f7d8a47f8e
-
SHA256
1a813c23c6b9aa4d8016c47bf5ffd50be1e1d4c15fe467162a6253c4d56184cb
-
SHA512
8eba4f08ea4bba13ebf0b633e5b0bf64d1aaded99c5f556780a12d5f14f36b19531a4083b687f75ecb14635b541e4d7a14735321dc19be1421a517882f56db6e
-
SSDEEP
768:k3UIG9umGx367bqa4U+AtUQEdo/spuru5ai2NoNmhgNtHaowY8Sj:gaumGx8bH4U+AtUQEdQCtYb2kmNtHaoB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96f48edfc4319ff51f147bad4e211c8c_JaffaCakes118
Files
-
96f48edfc4319ff51f147bad4e211c8c_JaffaCakes118.sys windows:5 windows x86 arch:x86
11d33122beb1b867e37ff80c0e4d6856
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmIsNonPagedSystemAddressValid
KeInitializeSpinLock
MmGetSystemRoutineAddress
ExAllocatePoolWithTag
ExUuidCreate
_allmul
IoReleaseCancelSpinLock
RtlInitUnicodeString
RtlStringFromGUID
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 384B - Virtual size: 350B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ