tdpipe.pdb
Static task
static1
1 signatures
General
-
Target
bbe7e64566c1e42bdefaac41e36fefa9_JaffaCakes118
-
Size
22KB
-
MD5
bbe7e64566c1e42bdefaac41e36fefa9
-
SHA1
8faec0c6ce4482cd54003da82e8312cbc373b86c
-
SHA256
38e6e49a80cfa4f6d918dcc9201d99b9377f55e206e9d2d68f7aa3050b3819fa
-
SHA512
2aac3c540a268d61a014c28827fe469f5222158e2caf0b6a8d711cb78abdb275906748cb29b61a9d584893b7f6d26ad1a95392542c3e8698da5a59cd7f3f7a41
-
SSDEEP
384:32vjtPwJkX2pPzd2m2vi2HWReQGhaWG8nIWCFCq6M3wd5Lt/1vaoW+p4AIObWG86:3Yjdf4zdgpHWRmnqCjdjRatgcnqJ
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbe7e64566c1e42bdefaac41e36fefa9_JaffaCakes118
Files
-
bbe7e64566c1e42bdefaac41e36fefa9_JaffaCakes118.sys windows:5 windows x86 arch:x86
be34ffb3683edbc99c5b6becf288cad2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
KeTickCount
ZwCreateFile
ZwFsControlFile
IoFileObjectType
ObReferenceObjectByPointer
IoGetCurrentProcess
IoGetRelatedDeviceObject
ObfDereferenceObject
ZwClose
wcslen
IofCallDriver
MmBuildMdlForNonPagedPool
_except_handler3
IoDeleteDevice
IofCompleteRequest
IoCreateDevice
RtlInitUnicodeString
wcscat
wcscpy
KeInitializeEvent
KeInitializeSpinLock
DbgPrint
KeGetCurrentThread
KeResetEvent
KeSetEvent
IoFreeMdl
MmUnlockPages
IoSetCompletionRoutineEx
IoInitializeIrp
MmSizeOfMdl
IoCancelIrp
KeClearEvent
ObfReferenceObject
ExfInterlockedInsertTailList
NtSetInformationThread
MmIsNonPagedSystemAddressValid
IoCreateFile
ObReferenceObjectByHandle
termdd.sys
IcaRawInput
IcaChannelInput
IcaBufferFree
IcaBufferError
IcaCreateThread
IcaAllocateWorkItem
IcaQueueWorkItemEx
IcaStackAllocatePool
IcaCloseHandle
IcaCreateHandle
IcaStackFreePool
IcaWaitForSingleObject
IcaStackAllocatePoolWithTag
hal
KfAcquireSpinLock
KfReleaseSpinLock
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tntv Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 384B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ