Static task
static1
General
-
Target
de88399a4fc4ba692571746c97322631_JaffaCakes118
-
Size
2KB
-
MD5
de88399a4fc4ba692571746c97322631
-
SHA1
cf13d16d5602941d657cc95d4e07845d8c94f8ea
-
SHA256
fa38fc50dbf3e739facdab3b8dd110efbf2380fee172d275372390aca011492d
-
SHA512
8942f9666af7ddf7fa62e11cb28f395722bebccc925248a503709b7a9d036a57ae6c8eee943a4606306621a033ac8dbb17fff2e4c4e071671ab47a27680f7851
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de88399a4fc4ba692571746c97322631_JaffaCakes118
Files
-
de88399a4fc4ba692571746c97322631_JaffaCakes118.sys windows:5 windows x86 arch:x86
d24c432078fe6596702e8bc864ce9ba3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
KeServiceDescriptorTable
ProbeForWrite
ProbeForRead
_except_handler3
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
Sections
.text Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 308B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ