Static task
static1
General
-
Target
eb51755cf702bbd1b8d5d5e7a94fa676_JaffaCakes118
-
Size
697KB
-
MD5
eb51755cf702bbd1b8d5d5e7a94fa676
-
SHA1
ba21e9eb221155974e8e4325b1bb7fb4a8fd5e36
-
SHA256
5ed3e858f98e54a5566f6f35b85789a5bb292afd375d548f046c21d0d12c1911
-
SHA512
e3ee5663e117b60164e8237f283f2acc7f73756aba1b82be90f32040ae59b457b03a51801a958db8ecbc342cb4d0a4440185c40ffff1fec8de30248bab92c430
-
SSDEEP
12288:8gwXPxQT6LcwBcUy70cOptxHk+LZJoq9JP5mb/4jdpL:hw/xQT6LcnUy70cOpHrboqn5mC/L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb51755cf702bbd1b8d5d5e7a94fa676_JaffaCakes118
Files
-
eb51755cf702bbd1b8d5d5e7a94fa676_JaffaCakes118.sys windows:6 windows x86 arch:x86
1451b7d40a3a086bf4092b5e2dc0e196
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
ObReferenceObjectByHandle
IoAllocateMdl
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
MmUnlockPages
IoFreeMdl
ExAllocatePool
ExFreePool
NtQuerySystemInformation
hal
KeRaiseIrqlToDpcLevel
HalMakeBeep
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmm0 Size: 433KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmm1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ