b2b554a5cd61cfb071aa57f34b86710b_JaffaCakes118 | Triage

Sharing

General

Target

b2b554a5cd61cfb071aa57f34b86710b_JaffaCakes118
Size

50KB
MD5

b2b554a5cd61cfb071aa57f34b86710b
SHA1

1aae443ee4f7c9b0edd039c05c1677c1cb28d95d
SHA256

c458e05b88da7f494923cf17352562c47f4d0092b43ec24359c8805d1728487e
SHA512

149b8e8285bb42512a620abf85165e6c11624b0459b2a7a9ecd4815baae664f1f7339244df4bac4d45a293931bbb928fcca7cdc821f0c140ed6d77c9318f59ed
SSDEEP

1536:qQj6L8qFwxpFZ2Rhy4eAnerxlbbkkVuNa:lpFZsg4A3bbkkVu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b2b554a5cd61cfb071aa57f34b86710b_JaffaCakes118

Files

b2b554a5cd61cfb071aa57f34b86710b_JaffaCakes118
.sys windows:4 windows x86 arch:x86

4963c4dac86081132cc2586d0b9905dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

tdi.sys

TdiInitialize
TdiRegisterNetAddress
TdiRegisterProvider

hal

HalProcessorIdle
KeRaiseIrql
KfLowerIrql

ntoskrnl.exe

IoPageRead
isdigit
ZwClose

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.321
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.123oc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ