Static task
static1
General
-
Target
ff565189a12c433b22a839951011502a_JaffaCakes118
-
Size
124KB
-
MD5
ff565189a12c433b22a839951011502a
-
SHA1
303c0c1d67552493166b715a22433645d6e82495
-
SHA256
a6427c488df3f7b06acdcd1a03032f41bfb5687b9c0f026c5f4acf8d24ffd77e
-
SHA512
5d995a0e04fccc93cfde00e68d86933d57680d3a3ffdaf125eb1361f8e1de2d45757842d7b273ec5f7bebe1b6456b5cf76e5300f659b15f1e63a300462c69fa2
-
SSDEEP
1536:z6OYZNu1rUwQDwY9G9otfzKWzUsJeKCbb8LJlxaZK5dALit:znYju1c0g/xzUsJetbb8LJ7aZK5dqm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff565189a12c433b22a839951011502a_JaffaCakes118
Files
-
ff565189a12c433b22a839951011502a_JaffaCakes118.sys windows:1 windows x86 arch:x86
b1e5970f002b46111279edc9face2acc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtClose
NtCreateKey
NtSetValueKey
NtTerminateProcess
RtlInitUnicodeString
Sections
AUTO Size: 1KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AUTO Size: 1024B - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ