acpiec.pdb
Static task
static1
1 signatures
General
-
Target
1177cb8291c2c87d78455cd7712fd130_JaffaCakes118
-
Size
11KB
-
MD5
1177cb8291c2c87d78455cd7712fd130
-
SHA1
6c672c7f5298c632d2b37da4f0077b279058bb0d
-
SHA256
bbad26263fc78d21a04ad4094298112c6d79551201191402179a3d57de3b6a15
-
SHA512
fd22d288377f39ba2db072884bb955e6b0d7e3ebc53b5dda33931c91ec73a8458b6a9d342ee5fdfb8d9be7a657382d40803b7056f1c8975c87d97513be629700
-
SSDEEP
192:0lxS2tUZl301DjseUq1GBChRZEw6pCTO4IygTOhjLLXG4XW/56:J2UHStUxaEwjq4zNLxW/Y
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1177cb8291c2c87d78455cd7712fd130_JaffaCakes118
Files
-
1177cb8291c2c87d78455cd7712fd130_JaffaCakes118.sys windows:5 windows x86 arch:x86
fbf038c46ef3b61675974fced48f77f3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
IoBuildSynchronousFsdRequest
KeInitializeEvent
IoBuildDeviceIoControlRequest
KeSetEvent
KeInitializeSpinLock
IoCreateDevice
RtlInitUnicodeString
KeInitializeDpc
KeInitializeTimer
IofCallDriver
IoAllocateIrp
IoAttachDeviceToDeviceStack
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeCancelTimer
KeSetTimer
ExfInterlockedRemoveHeadList
ExAllocatePoolWithTag
PoStartNextPowerIrp
PoCallDriver
IofCompleteRequest
MmLockPagableDataSection
IoFreeIrp
KeWaitForSingleObject
ExFreePool
IoDeleteDevice
InterlockedExchange
MmUnlockPagableImageSection
hal
KeStallExecutionProcessor
KfAcquireSpinLock
WRITE_PORT_UCHAR
KfReleaseSpinLock
READ_PORT_UCHAR
KeQueryPerformanceCounter
oprghdlr.sys
RegisterOpRegionHandler
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 399B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 402B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ