Static task
static1
General
-
Target
134f5328ddb274155200cf2388295b04_JaffaCakes118
-
Size
101KB
-
MD5
134f5328ddb274155200cf2388295b04
-
SHA1
f95f6007f81003d42e78e8f3a9df0e4609d51bdd
-
SHA256
edcb54addca0c922632f040f98314956c7657a249c5e2c9688afc99dac882244
-
SHA512
3b4793c65fc06293d4a3a9a5def6f663592766761b92a8a5dd04aaa40c023e7a428b352e131782bde087297ff647839657c1a7cf4f55c034a58dc05e787a4651
-
SSDEEP
1536:tsK0B/46QXTxCiTiBv+XWRXoLnOZRul4OaiB7VQJgEl491RMz+xOgvKfCwirRvE:W46o4v+XWRYLIRuAIOJXK99xKfCwih
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 134f5328ddb274155200cf2388295b04_JaffaCakes118
Files
-
134f5328ddb274155200cf2388295b04_JaffaCakes118.sys windows:5 windows x86 arch:x86
2fb9d2802cf19bc1e0a3bef2916ea894
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoFreeMdl
IoGetRelatedDeviceObject
DbgPrint
IoAllocateMdl
IoFreeWorkItem
hal
ExAcquireFastMutex
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 222B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ