D:\sys\Driver2\objfre\i386\HelloDDK.pdb
Static task
static1
General
-
Target
bad07eaa9b85dbeac332232ed8b04cbb_JaffaCakes118
-
Size
4KB
-
MD5
bad07eaa9b85dbeac332232ed8b04cbb
-
SHA1
44cbbf8f5d757aec85b80a01f731943196107a53
-
SHA256
426c2dd00b85884d0bf6b7eba1f389acca1a4802b3d54de69f160afdb2b0529b
-
SHA512
92507d95b73875a3b47b102a07697908994e79d5f1a3d9680dce6dc6aecb8a7135ab0adfb9c32249199f37ab990afcc5e23178f3e956ab1d0b650fa6cf9e1cc8
-
SSDEEP
48:i/AARWxyhjg+uDEe5afSQz2R8Y0wX3GV8bV3FFjJ8lcx:+RMugpDf5afSQz8ke3GV8bjFjel6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bad07eaa9b85dbeac332232ed8b04cbb_JaffaCakes118
Files
-
bad07eaa9b85dbeac332232ed8b04cbb_JaffaCakes118.sys windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 128B - Virtual size: 34B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 34B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ