Static task
static1
General
-
Target
ad107d9a2ce12bc2aaa54dd4702e90a9_JaffaCakes118
-
Size
22KB
-
MD5
ad107d9a2ce12bc2aaa54dd4702e90a9
-
SHA1
210537f94be240d83c570a2bddf710f31d1b1e15
-
SHA256
7119198192f0560f8b5659f3e037ab827d51ba72b96af07418e2893d098a51b0
-
SHA512
c9c40b50b8fb9ece95ad55b98204e123c9d1ff92a6f25316b5bef8ecd7b7eee7cbcf129a126d24a7afdb01c1738a9093e825bcff7c221399a9adec0eed5e7db8
-
SSDEEP
384:Y3LrHhsVQ2RXN0tqsgxDR1hdPBGRfB6VlLgnEbzOrczJwDU32bRaI4l:Y3+RXYg71hZBy2lLJOrcpORN4l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad107d9a2ce12bc2aaa54dd4702e90a9_JaffaCakes118
Files
-
ad107d9a2ce12bc2aaa54dd4702e90a9_JaffaCakes118.sys windows:5 windows x86 arch:x86
4b4b2e939a18de3d0af388405f867e5e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeInitializeDpc
RtlAnsiStringToUnicodeString
MmGetSystemRoutineAddress
ExAllocatePoolWithTag
RtlInitAnsiString
RtlValidRelativeSecurityDescriptor
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 239B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ