Static task
static1
General
-
Target
cf07219bd8e5707c291d1fab6d550e7d_JaffaCakes118
-
Size
27KB
-
MD5
cf07219bd8e5707c291d1fab6d550e7d
-
SHA1
3d36c6bcad52a205f2d9ec48283207fe76d6cf2e
-
SHA256
d934de3d4200243818913e79da07b1fcb80e95291848d116aa33cef78f49d794
-
SHA512
22b2f669e5149b88942c53b0eadb666dad826320fdb2f566c3958c04896f607be7f900a5345833e9a494c6e9aa014553391ed5979d3cd8ddf0d14174a3f3b965
-
SSDEEP
384:5W/aZRUYxAPi6f44602u6Cd3aCb+E0ROBHIqWUB/1yL3LSbDf/87BLKrfgu:ikRUeAPiQ4NGam+EOcHIoBNyniDcLw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf07219bd8e5707c291d1fab6d550e7d_JaffaCakes118
Files
-
cf07219bd8e5707c291d1fab6d550e7d_JaffaCakes118.sys windows:5 windows x86 arch:x86
1065ec0ed9ea4fb6b178f93b67862692
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExAllocatePool
memset
IoWMIQuerySingleInstanceMultiple
KeQueryTimeIncrement
IoGetDeviceInterfaceAlias
IoWMIQueryAllDataMultiple
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 226B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ