Static task
static1
General
-
Target
fcd83be9b94259cd1ffcffcc068aba3d_JaffaCakes118
-
Size
55KB
-
MD5
fcd83be9b94259cd1ffcffcc068aba3d
-
SHA1
e774f325995ce4d79d9f00a32530e57348aa8ac6
-
SHA256
c7d6df010ffaf465e092924d5f6e6726272b051bc5dc4193c3b182a816defd8a
-
SHA512
bc57246b2c7dac711671d342b43d46503ccbf43bb9b604002c88900e0da989fd2d0391e79d7a0ff11cbd58ee4ed1f76b208595fbfcadeb08eafe7b0c3c774731
-
SSDEEP
768:zt29VATfAKFoguQavGRYVAnj2GNzYticax3jVXWmRgPkdveLZPkW+y3vrLf8ywC:zS/ghNRKUCGNyitx3jVmmRCqGZ8cT2C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcd83be9b94259cd1ffcffcc068aba3d_JaffaCakes118
Files
-
fcd83be9b94259cd1ffcffcc068aba3d_JaffaCakes118.sys windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.v-lizer Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE