Static task
static1
General
-
Target
ebd7874126f8dacb71687405be7cd054_JaffaCakes118
-
Size
100KB
-
MD5
ebd7874126f8dacb71687405be7cd054
-
SHA1
2e7e1d6bf5d2d6ec98332900ced23a5f6e6b290b
-
SHA256
78c1e6eb45b828bf3ba38af2194c3fd65a14f6de3f931341b8fb6dd81d1e8927
-
SHA512
a286decf2c1d24cdab27a060a0fb1db9d7b4d2188029d15b34b678021dcdfa773d4112334b70c13da794b3f208ddc581f3d169d02430d06ac8f34e4d03b8bbf3
-
SSDEEP
3072:acteBkLE3trpeauj2g9zC0crnKPW+/jD5+yHdG:az4E3eFx9+K7D5DU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ebd7874126f8dacb71687405be7cd054_JaffaCakes118
Files
-
ebd7874126f8dacb71687405be7cd054_JaffaCakes118.sys windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.srsrc1 Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ