Static task
static1
General
-
Target
bad77709989e1abd417eb63f0311c898_JaffaCakes118
-
Size
40KB
-
MD5
bad77709989e1abd417eb63f0311c898
-
SHA1
dc1965c29d112a91876fddb9451ad5dbf5fa716c
-
SHA256
c073f74503ff763a402462a0b1839c364cef5f409a74330fff4cb3aaff19c01b
-
SHA512
c633fab45f7712769a85655a594b068bf86642dcf99f0b2280619dd3b006df24db0de91b6f7ff71070c76ae55a6f489327b398f454011b871e423fff5191bff3
-
SSDEEP
768:pUEIDt3mqF5tHPemrz9Sln7xw3iHQ1lM8U15T3PED3Vj2vlk:pUb3nF5NPrzin9w3iw19a5TPERSk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bad77709989e1abd417eb63f0311c898_JaffaCakes118
Files
-
bad77709989e1abd417eb63f0311c898_JaffaCakes118.sys windows:5 windows x86 arch:x86
1c7566f157ebdfc3283952909779a80b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlStringFromGUID
RtlInitUnicodeString
PsCreateSystemThread
MmIsNonPagedSystemAddressValid
_allmul
MmGetSystemRoutineAddress
ExAllocatePoolWithTag
SeReleaseSecurityDescriptor
ExUuidCreate
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 384B - Virtual size: 350B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ