Static task
static1
General
-
Target
04593ebf18c62ea928453ad3e1723bd7_JaffaCakes118
-
Size
21KB
-
MD5
04593ebf18c62ea928453ad3e1723bd7
-
SHA1
c7363cb438054a8c0dce9d5f2aaf07c2c0e3dd03
-
SHA256
e61a379773504100406e47ace5a7a28d6c68c93ca72edf5eeb72289002f6011d
-
SHA512
5f957f158a4397b704c4f117f3bef9633ba74f6034eeb0943e48a962062dd8b52cc381ccf82a5060e4af90ed3098850a0191c9316cfb794713091f6f53bc3a00
-
SSDEEP
384:OCG0MIKc2OJLShwiD0+KpmDenVGnVLAG1sRyodUU9A080l0QPv:OCGt9c2OJmZD9CYVr1sueDv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04593ebf18c62ea928453ad3e1723bd7_JaffaCakes118
Files
-
04593ebf18c62ea928453ad3e1723bd7_JaffaCakes118.sys windows:5 windows x86 arch:x86
e8a3fa5c5da02be9df1788bc24481eb4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
wcslen
_snwprintf
ExAllocatePoolWithTag
MmIsNonPagedSystemAddressValid
MmGetSystemRoutineAddress
IoCreateFile
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 203B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ