Behavioral task
behavioral1
Sample
ed9b8cd84af92116736585037de88466_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed9b8cd84af92116736585037de88466_JaffaCakes118.dll
Resource
win10v2004-20240226-en
General
-
Target
ed9b8cd84af92116736585037de88466_JaffaCakes118
-
Size
20KB
-
MD5
ed9b8cd84af92116736585037de88466
-
SHA1
72fcd894f3f719946342b8d8691539e186baf39b
-
SHA256
836939382786e0de879e62a635f81da59c9a44285ebe28e7cb977db765937283
-
SHA512
481db5492ca2902adeabd5d55f88b5f543304fadc2b41db5ab798c70c1c4004f9db90a8a37bcf42ce58483110a4150a75bccf0537e5bffbdeb43a8c19d5a5acb
-
SSDEEP
96:SYyMOrMXZov7OhJ6w7Rr5spIx5jfFP1c4f310Qz6Jlr/B51:vjOrMX2jQAmvRxFNP+m310Q+Jl/b1
Malware Config
Extracted
icedid
Signatures
-
Icedid family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed9b8cd84af92116736585037de88466_JaffaCakes118
Files
-
ed9b8cd84af92116736585037de88466_JaffaCakes118.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ