Static task
static1
General
-
Target
a0999381478db6eeb957b0edcc144491_JaffaCakes118
-
Size
20KB
-
MD5
a0999381478db6eeb957b0edcc144491
-
SHA1
68d56ddde271a3e8a76a4aa34bc2770238021528
-
SHA256
11fe5a36c29bbb35b916f8f8c9a1695b6d9b2a247be9644bacea60c72f45ae09
-
SHA512
9eb1cdc9b3f0cf255eb7b0d65203b0055110c98bbcd886b80ed4365b577c454ed34950516a9d7a80741ba67a19f15d3a289317da2737ad99d18d1c9409a10750
-
SSDEEP
192:xhAEznj3vekZo+zccDwR364w+om6qMFq0b:bAE773ZzccDwRSm6dq0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0999381478db6eeb957b0edcc144491_JaffaCakes118
Files
-
a0999381478db6eeb957b0edcc144491_JaffaCakes118.sys windows:5 windows x86 arch:x86
d9c9c4541168665f44917e3ddc4a00d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
DbgPrint
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 96B - Virtual size: 66B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 96B - Virtual size: 74B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 192B - Virtual size: 162B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ