adpahci.pdb
Static task
static1
General
-
Target
da906889ec48dd94ba4cd2bc0f94b3b5_JaffaCakes118
-
Size
324KB
-
MD5
da906889ec48dd94ba4cd2bc0f94b3b5
-
SHA1
3290a1bcc4d81de5f6ff4cf3bfe0bb228e499c00
-
SHA256
d45e0b77ce387170298c6adff9097cfdb68ed5a38529cecf5a51b6b642ccba36
-
SHA512
2171a1a9ace3883fcc3a1a4863cdb4d0ca23c407b02964a8668e9ac7b6bc541640d09a1c2a7d58abfecaf50547a83cdd30cedfbbfd4ec966967e17bcc2fca02f
-
SSDEEP
6144:KfXl/CgWJTeGbx+48U1cxf3Db4+kzc+/1zVHNMv1qqs:K921rp+xa1mqR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da906889ec48dd94ba4cd2bc0f94b3b5_JaffaCakes118
Files
-
da906889ec48dd94ba4cd2bc0f94b3b5_JaffaCakes118.sys windows:6 windows x64 arch:x64
90fccaccb58b0601aeeaa8c4563fd4f6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
storport.sys
StorPortGetLogicalUnit
StorPortStallExecution
StorPortInitialize
StorPortNotification
StorPortGetBusData
StorPortReady
StorPortLogError
StorPortPauseDevice
StorPortGetDeviceBase
StorPortSetDeviceQueueDepth
StorPortBusy
StorPortSetBusDataByOffset
StorPortGetPhysicalAddress
StorPortGetScatterGatherList
StorPortGetUncachedExtension
StorPortDebugPrint
ntoskrnl.exe
KeBugCheckEx
Sections
.text Size: 302KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 1024B - Virtual size: 750B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ