a3401abb11137b21272bf06b608254d9_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

a3401abb11137b21272bf06b608254d9_JaffaCakes118
Size

183KB
MD5

a3401abb11137b21272bf06b608254d9
SHA1

e703ba662dba2592efe8650da7e3687f3ff66db9
SHA256

fd54fcd4da556b1061c1aa62eee1c07013ee6a71f2c0cd5449d188e059d49fce
SHA512

0db16264435c96f577de72c923a294d0607fb34e53b26a60cf7b5d1a9c72f9701c579c84638e1bbb09cf9c43f5b86332c82edba658da868b6836394926ea11cc
SSDEEP

3072:eXZzIoDGtDOUW0egfexWlyK4yOTFO+HLJJedbVTQiJTfZl:yZzx+KU4gACyZTFOELDqTJr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3401abb11137b21272bf06b608254d9_JaffaCakes118

Files

a3401abb11137b21272bf06b608254d9_JaffaCakes118
.dll windows:5 windows x86 arch:x86

624cdedf163988fff0f1c209cfdd6e9d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

L:\iunDsln\fsjxzKznmTnvk\PHVebjotoui\nmxdYlmtAkmvl.pdb

Imports

ntoskrnl.exe

IoDisconnectInterrupt
ExLocalTimeToSystemTime
ExSystemTimeToLocalTime
RtlEqualString
ExVerifySuite
RtlInitAnsiString
ExAllocatePoolWithTag
MmBuildMdlForNonPagedPool
ExDeleteResourceLite
KeSetImportanceDpc
RtlDeleteRegistryValue
IoGetDmaAdapter
RtlFindLeastSignificantBit
KeInsertByKeyDeviceQueue
KeQuerySystemTime
IoAttachDeviceToDeviceStack
IoIsWdmVersionAvailable
RtlUnicodeToMultiByteN
RtlUnicodeStringToAnsiString

Sections

.text
Size: 42KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.i_txt
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.e_txt
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tele3
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tele1
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tele2
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tele4
Size: 1024B - Virtual size: 534B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

624cdedf163988fff0f1c209cfdd6e9d

Headers

File Characteristics

PDB Paths

Imports

ntoskrnl.exe

Sections

.text Size: 42KB - Virtual size: 45KB

.i_txt Size: 512B - Virtual size: 80B

.e_txt Size: 512B - Virtual size: 512B

.tele3 Size: 512B - Virtual size: 28B

.tele1 Size: 512B - Virtual size: 44B

.tele2 Size: 512B - Virtual size: 44B

.tele4 Size: 1024B - Virtual size: 534B

.data Size: 14KB - Virtual size: 42KB

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 1024B - Virtual size: 676B

.text
Size: 42KB - Virtual size: 45KB

.i_txt
Size: 512B - Virtual size: 80B

.e_txt
Size: 512B - Virtual size: 512B

.tele3
Size: 512B - Virtual size: 28B

.tele1
Size: 512B - Virtual size: 44B

.tele2
Size: 512B - Virtual size: 44B

.tele4
Size: 1024B - Virtual size: 534B

.data
Size: 14KB - Virtual size: 42KB

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 1024B - Virtual size: 676B