Static task
static1
General
-
Target
bbc5b7e5a6ecde55ce23b78a3ce89b5d_JaffaCakes118
-
Size
27KB
-
MD5
bbc5b7e5a6ecde55ce23b78a3ce89b5d
-
SHA1
29d3fad55cad90f9e971e9c1c6cf51e4d3791f47
-
SHA256
986fe7f1be2e4d0374b5c05713966e14f5e0033e6e69f1b72f9ad31aac31fa8b
-
SHA512
11102e3e083be610b4bd4adb419cd1286e9e411be7be387e003c516e380b52a09f1a1783e089208913fe498ace0b137016468cce7490e4bb943ba3a19e5919d6
-
SSDEEP
384:bf/Tayt9niiKL58burBvcX74/voZJf5V12wWrfu:bXOo5itOiW7MSVEws
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbc5b7e5a6ecde55ce23b78a3ce89b5d_JaffaCakes118
Files
-
bbc5b7e5a6ecde55ce23b78a3ce89b5d_JaffaCakes118.sys windows:5 windows x86 arch:x86
67792538d020624bf17263cefa22b5d9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExAllocatePool
strchr
memset
IoGetDeviceInterfaceAlias
IoWMIQueryAllDataMultiple
ExDeleteNPagedLookasideList
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 202B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ