adpahci.pdb
Static task
static1
General
-
Target
d277417d04f5e8377b6d211679772364_JaffaCakes118
-
Size
324KB
-
MD5
d277417d04f5e8377b6d211679772364
-
SHA1
663863108f7fe9090ac78a2ff1d42f2b232c2f33
-
SHA256
b1aae702bb095a17fa479fdfb66fa1168619638fe4f070de441a3297976be2d4
-
SHA512
33a790ea4291a83b4937ef316ab409f4883dbbc6e4eb4e1d42c16548bf31b48b291b8b7c5b49f5110e7a9a94b306239f32557d41095ba2b24197233fd65b64ea
-
SSDEEP
6144:4fXl/CgWJTeGbx+48U1cxf3Db4+kzc+/1zVHNMv1qq:4921rp+xa1mq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d277417d04f5e8377b6d211679772364_JaffaCakes118
Files
-
d277417d04f5e8377b6d211679772364_JaffaCakes118.sys windows:6 windows x64 arch:x64
90fccaccb58b0601aeeaa8c4563fd4f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
storport.sys
StorPortGetLogicalUnit
StorPortStallExecution
StorPortInitialize
StorPortNotification
StorPortGetBusData
StorPortReady
StorPortLogError
StorPortPauseDevice
StorPortGetDeviceBase
StorPortSetDeviceQueueDepth
StorPortBusy
StorPortSetBusDataByOffset
StorPortGetPhysicalAddress
StorPortGetScatterGatherList
StorPortGetUncachedExtension
StorPortDebugPrint
ntoskrnl.exe
KeBugCheckEx
Sections
.text Size: 302KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 1024B - Virtual size: 750B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ