Static task
static1
General
-
Target
fe0f6d7042f799b8882c3e2c2f4be48d_JaffaCakes118
-
Size
21KB
-
MD5
fe0f6d7042f799b8882c3e2c2f4be48d
-
SHA1
cc122006cddb04ca28c5367fa5e4747fc7ff347c
-
SHA256
2ebd69b5df4e4c708c774ab976390cbea8619d35717c812c56f84a5e973b1596
-
SHA512
46c2ee88e94f362959aaeea3029c7e5bd74625c41a805a2b537300061faebd9d976b8daaf1e7a9361a0beba35969948aec498d0ae9323870e74fd63aca792d4f
-
SSDEEP
384:5We+wqLdCXcqHy8VDxEIKLOpI674YFO9Oa+M7J2bPU:5J+vZCdHDluXYFOwoU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe0f6d7042f799b8882c3e2c2f4be48d_JaffaCakes118
Files
-
fe0f6d7042f799b8882c3e2c2f4be48d_JaffaCakes118.sys windows:5 windows x86 arch:x86
d633a51c9cfd48778789fac108ac2e14
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeCancelTimer
ExAllocatePoolWithTag
SeSetSecurityDescriptorInfo
wcslen
MmIsNonPagedSystemAddressValid
MmGetSystemRoutineAddress
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 221B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ