ccdecode.pdb
Static task
static1
General
-
Target
b286ef26a33949b54be5cc4cf7c2c93a_JaffaCakes118
-
Size
22KB
-
MD5
b286ef26a33949b54be5cc4cf7c2c93a
-
SHA1
ea99a400d5a28cf3bcae64cad7c4558988e0296d
-
SHA256
13e2ec757b32f922ee14255c5d6461e2e94ef84b4b3d434d6baa7ae553002b6a
-
SHA512
8e7bdd63fe895d28c5b502d6631c1174bda7ae0d0fda5cecde01aac46eeb96008b8f0a114f52cc9ab880f140c6372d669ce72fe4ef49ce9dd49988d8c294553e
-
SSDEEP
384:uHDBKGO3FkamSr/y7s7sGrQq9Mnpn2BHpgQWg8nsWoYjcT+lJjeYS3tWg8nsW:uHDBiVESr/y72Mq92gBinnbjcTijevqn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b286ef26a33949b54be5cc4cf7c2c93a_JaffaCakes118
Files
-
b286ef26a33949b54be5cc4cf7c2c93a_JaffaCakes118.sys windows:5 windows x86 arch:x86
d5977c633dbdac9c68f7e446e09a0a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
KefReleaseSpinLockFromDpcLevel
KeInitializeSpinLock
ExFreePool
KeInitializeEvent
ExAllocatePoolWithTag
KeTickCount
KefAcquireSpinLockAtDpcLevel
hal
ExAcquireFastMutex
KeQueryPerformanceCounter
ExReleaseFastMutex
KfReleaseSpinLock
KfAcquireSpinLock
stream.sys
StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 768B - Virtual size: 713B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGECONS Size: 256B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 640B - Virtual size: 554B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kzdi Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 454B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ