Static task
static1
General
-
Target
eec484a33879c31c99b079e3bd3df11d_JaffaCakes118
-
Size
51KB
-
MD5
eec484a33879c31c99b079e3bd3df11d
-
SHA1
a8daf00538a8ce524535f940102511f868c088aa
-
SHA256
90371122d86d45680067da46506beb1dda4d82ced8b55f0a461bd7a986002f16
-
SHA512
cd1d063fb21c699eea468cbee7089a1577ec06948655c2cc00ca70db2e82eec8abf9f1f1284eb238d200442a1c0bdfbaa20130e9da793848696afdff260216f6
-
SSDEEP
768:LWTf/r4WFbGRP2RnvG5XRUCAUgPueKXF1V9KXhTlC+4Ae8Nhb7yexA9o3I+ZDe:qTXEWFqRP2gAbE9KXhZrZ548D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eec484a33879c31c99b079e3bd3df11d_JaffaCakes118
Files
-
eec484a33879c31c99b079e3bd3df11d_JaffaCakes118.sys windows:5 windows x86 arch:x86
255166120636f8d841ad5ab089a6b65b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmGetSystemRoutineAddress
RtlInitUnicodeString
ExAllocatePoolWithTag
ExFreePoolWithTag
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 170B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ