Static task
static1
General
-
Target
53a7e4f3a481f4b43e7484ff14afe1bb_JaffaCakes118
-
Size
20KB
-
MD5
53a7e4f3a481f4b43e7484ff14afe1bb
-
SHA1
344c5314e86769e36b967a4c9cec457fdf60a5a5
-
SHA256
1e54706bf610552ff761cc05956f3ba9f95ba6a06dc8cb5327432f15b701c417
-
SHA512
e5d2c1a95c6845169985d7148e7b93c382dc6603620c5c598cd0c4b684c749e8d78a65af1f41487701e927d89f343aef1068b05a29d57882a026473164340f13
-
SSDEEP
384:5SK08ZxOvBi3xPm+fXT5XpZIpa5AGMwdLR+V5bgOb:sYOvsHfXTPZaa5ZR+4Ob
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53a7e4f3a481f4b43e7484ff14afe1bb_JaffaCakes118
Files
-
53a7e4f3a481f4b43e7484ff14afe1bb_JaffaCakes118.sys windows:5 windows x86 arch:x86
25d4b6e2620c17da8db939b972b489d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExAllocatePoolWithTag
SeAssignSecurity
RtlValidRelativeSecurityDescriptor
MmGetSystemRoutineAddress
RtlInitAnsiString
RtlAnsiStringToUnicodeString
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 240B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 30B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ