Static task
static1
General
-
Target
063efd48d7de69336484cc50a303b428_JaffaCakes118
-
Size
30KB
-
MD5
063efd48d7de69336484cc50a303b428
-
SHA1
0a08068524119506ff695fcf8efb48147b624369
-
SHA256
600a8fcc8b1832f26187247d21af7b385f5672e69a17325f26efb4aa55060091
-
SHA512
d9de02bb8a967957d053f0e6d0804b111be1ab6546b55686b900d2497434c6d096075ffed5c623d6deec1b9822d7c04519f686eb4f12d778cbb4b4acd8aad702
-
SSDEEP
384:EjftkKY5UNvocwuUCJfBj4AdYl7hceS01yq96+mp+yH+bd9EtIHhhvuB5r:ELtlNQaj2hDSRq8+fEaj2zr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 063efd48d7de69336484cc50a303b428_JaffaCakes118
Files
-
063efd48d7de69336484cc50a303b428_JaffaCakes118.sys windows:4 windows x86 arch:x86
caed740047327835987440169debea21
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
PsGetCurrentProcessId
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64B - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 96B - Virtual size: 86B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 64B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ