Static task
static1
General
-
Target
b56067daa5634e98cf3d2983f20f50d3_JaffaCakes118
-
Size
18KB
-
MD5
b56067daa5634e98cf3d2983f20f50d3
-
SHA1
5c651fa0b9d03b7608dd1ef9c77ed4d304af61ae
-
SHA256
ee4e0a8483f9d1a74d3c12d709fadf4ac182fcf671a58939eaa99735d104be4e
-
SHA512
b096b0aea018505e5a060e3521398a1db1efd5aeadab03a2020db9999274395d068e53f7259d00a4ca2d1ae6ce9128b7d10db68df33b37c40efdeb6ba70f2ef5
-
SSDEEP
48:6jNqyJru9kb1EdJi+aG0SxAuZ83tz+TJdn+90d71P500a9RXZNTDY:EQyVP+Ji+RitKVC6PS7XjY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b56067daa5634e98cf3d2983f20f50d3_JaffaCakes118
Files
-
b56067daa5634e98cf3d2983f20f50d3_JaffaCakes118.sys windows:5 windows x86 arch:x86
9195552aaab9c0cf05ebc7215fb54da9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoGetCurrentProcess
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 96B - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 96B - Virtual size: 84B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 96B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ