Static task
static1
General
-
Target
ce10c96f0461842bd8f6d308d15fd108_JaffaCakes118
-
Size
26KB
-
MD5
ce10c96f0461842bd8f6d308d15fd108
-
SHA1
55dfbe0e6dc35f96263b65f5acda20cbc32d1717
-
SHA256
a3a36e67e41cac486abf38d0121d9c1d2cf4005a0e9778de0e7f4e7384512e67
-
SHA512
ea9779d9197aece3a7aa33179b88a5f6ba9c9fecc8fafb8dcb00e2c3857603137d0677b1f3e505d0ab164574cef24fb3541768cada49b506e61540991f869637
-
SSDEEP
384:4k/gr2RgTr3FXARbLvA5O09fSnLLcdAgxvLc0U3pg/XuSXL8qel5UrfI0:4CgLSpLeewCCvA0fuiwrE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce10c96f0461842bd8f6d308d15fd108_JaffaCakes118
Files
-
ce10c96f0461842bd8f6d308d15fd108_JaffaCakes118.sys windows:5 windows x86 arch:x86
780cdb23a74826101d9a8ecdc36dfa5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoGetDeviceInterfaceAlias
IoWMIQueryAllDataMultiple
IoWMIQuerySingleInstanceMultiple
wcslen
IoWMIOpenBlock
KeQueryTimeIncrement
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 221B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 34B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ