Static task
static1
General
-
Target
0043a1bf97bcf151ad1859017da2772a_JaffaCakes118
-
Size
21KB
-
MD5
0043a1bf97bcf151ad1859017da2772a
-
SHA1
7d742c90df4e89dd834e36c43948c54661fe5aa1
-
SHA256
06467c89532dc894d1262223f56e1549a24aef4f3581095445eb5869f2783e9c
-
SHA512
02c352a8402c441d4f970d906dc87c078000bcd61c6f5105b6dee633ae8be2db71ffa2feccc87b013725eb351a402dc096fe31bf4a8ede2b26579ff7bfd82a6a
-
SSDEEP
384:sLvakINdbSgFZYPvsb7FqzKdC62x+l/wAT2+j1hILHbkf:sLvoOYYPe6xac+j1hJf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0043a1bf97bcf151ad1859017da2772a_JaffaCakes118
Files
-
0043a1bf97bcf151ad1859017da2772a_JaffaCakes118.sys windows:5 windows x86 arch:x86
adf45bb04e20e4e3a03c0f6fa32cb5dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlValidRelativeSecurityDescriptor
ObfDereferenceObject
RtlInitAnsiString
MmGetSystemRoutineAddress
RtlAnsiStringToUnicodeString
ExAllocatePoolWithTag
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 244B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ