Static task
static1
General
-
Target
041931e55cf588947146bedb8e9406f0_JaffaCakes118
-
Size
44KB
-
MD5
041931e55cf588947146bedb8e9406f0
-
SHA1
57f064f4b7e59b6389c616d57972beb58a80a947
-
SHA256
d0f618a8f264ea2c4e3e7ca8066be32fba6163b2c23be30f8a67a2001922c96d
-
SHA512
abb63fb6a70598aef0c8ef13d835d00ea10f27ce8de6970dcaeed803b0aad26e719eb495983ec8510c7eb37cd4dde603dc91f64e740b57ab7a6581f91fe8b4a7
-
SSDEEP
768:RKbh9f4ViRoE2cFKIKhUDGzmF8rkPOoS2U0GzMygOy4L69UbAzRIp:MbhiAOcciDcm6rkPrS2/GeWAzR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 041931e55cf588947146bedb8e9406f0_JaffaCakes118
Files
-
041931e55cf588947146bedb8e9406f0_JaffaCakes118.sys windows:6 windows x86 arch:x86
412fcf4cf9f1c17cd827de7375acb45a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoAttachDevice
MmIsAddressValid
PsGetCurrentProcessId
ExAllocatePoolWithTag
KeTickCount
ExFreePoolWithTag
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 282B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 384B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ