Static task
static1
General
-
Target
02cd17174c55a8ddb59f916973afea18_JaffaCakes118
-
Size
33KB
-
MD5
02cd17174c55a8ddb59f916973afea18
-
SHA1
957f4c8769968bdd4419de36d05cb391e95adc80
-
SHA256
2708ca47c6822dbde95be45c39e52a4b3253c57adb5932121910617ceceb4ced
-
SHA512
39e4cac4f406777a8f6756feb690700643d7abec554fddb51da96ca6e46735723ed40b6ff9a02b214530698d0ccd7b6db11583694f83e8f17189272692c63ffb
-
SSDEEP
384:u9w9vrq2pZf/NqTI2TzHffNATADtCveCneEOKjU4AGi/2sUnWVRPJlLvcvOIGLVm:u+trlx/UU2TzHffekDJfTrU4sGLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02cd17174c55a8ddb59f916973afea18_JaffaCakes118
Files
-
02cd17174c55a8ddb59f916973afea18_JaffaCakes118.sys windows:3 windows x86 arch:x86
0fd92884f7e40bf192f5b159cf195c51
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
hal
READ_PORT_ULONG
KeStallExecutionProcessor
READ_PORT_UCHAR
WRITE_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_UCHAR
WRITE_PORT_USHORT
ndis.sys
NdisMFreeSharedMemory
NdisFreeMemory
NdisMFreeMapRegisters
NdisMDeregisterIoPortRange
NdisTerminateWrapper
NdisMRegisterMiniport
NdisInitializeWrapper
NdisMDeregisterInterrupt
NdisMDeregisterAdapterShutdownHandler
NdisMInitializeTimer
NdisMRegisterAdapterShutdownHandler
NdisWriteErrorLogEntry
NdisMRegisterInterrupt
NdisMSetAttributes
NdisCloseConfiguration
NdisReadNetworkAddress
NdisOpenConfiguration
NdisAllocateMemory
NdisSetTimer
NdisMResetComplete
NdisMStartBufferPhysicalMapping
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBuffer
NdisMSendResourcesAvailable
NdisMSendComplete
NdisMCompleteBufferPhysicalMapping
EthFilterDprIndicateReceiveComplete
EthFilterDprIndicateReceive
NdisMRegisterIoPortRange
NdisMAllocateSharedMemory
NdisMMapIoSpace
NdisMAllocateMapRegisters
NdisReadPciSlotInformation
NdisWritePciSlotInformation
NdisReadConfiguration
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 932B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 572B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ