D:\test2\objfre\i386\MayaSYS.pdb
Static task
static1
General
-
Target
d0f3900b65a8b0992f9897247b5d08ea_JaffaCakes118
-
Size
3KB
-
MD5
d0f3900b65a8b0992f9897247b5d08ea
-
SHA1
eb16f9ce2fd4593e48bc12c53e85647cfcfc5a0c
-
SHA256
484dff64826d2f5c8a23030268cba7f4ef1c93648d86994f6cc6489bb1afc258
-
SHA512
345728a954a7ee72bb70b66395efcda492811e940d65dbea7325f5833f94e551e06126100f2782651c59f0a0b6f29f8f33431e669b748b5a5c182a86668b7dcf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0f3900b65a8b0992f9897247b5d08ea_JaffaCakes118
Files
-
d0f3900b65a8b0992f9897247b5d08ea_JaffaCakes118.sys windows:5 windows x86 arch:x86
92be5d1c24fa4d391a75f2f61b951a53
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
KeServiceDescriptorTable
ZwQueryDirectoryFile
IoDeleteDevice
IoDeleteSymbolicLink
IofCompleteRequest
RtlFreeAnsiString
DbgPrint
RtlCompareMemory
RtlUpperString
RtlUnicodeStringToAnsiString
RtlInitUnicodeString
RtlInitAnsiString
ProbeForWrite
ProbeForRead
_except_handler3
IoCreateSymbolicLink
IoCreateDevice
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 193B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ