General

  • Target

    f01d3419a4c2a7e3aab1e392c4c415d4_JaffaCakes118

  • Size

    36KB

  • MD5

    f01d3419a4c2a7e3aab1e392c4c415d4

  • SHA1

    44cd7bd3d51f32419a807b510f73beadfe1340a8

  • SHA256

    b382d0e1a2144d519e9dfff537474d314b68872665a3c773a56a14e1b2ea271f

  • SHA512

    0e0e6b26c7bb31a58696180c6075f15f557ba87664bc7c20d6fe0fdef0bbbb95ce089f8cd3dd2c1b1b321ee8413e61055e5ff40a4f4369d7b3eb01364f80207b

  • SSDEEP

    192:mfb+RrL+/gKTPY3S6/l8mOaxbdToAGImkeZOizZEcF9r:mfb+Rr6/gKbkS6//OO/mkeZhz1Fl

Malware Config

Extracted

Family

icedid

Campaign

3183125126

C2

tiplifid.top

Signatures

  • Icedid family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f01d3419a4c2a7e3aab1e392c4c415d4_JaffaCakes118
    .dll regsvr32 windows:6 windows x64 arch:x64

    302670fa6280530d095990145000dc98


    Headers

    Imports

    Exports

    Sections