Behavioral task
behavioral1
Sample
1184-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1184-54-0x0000000180000000-0x0000000180009000-memory.dll
Resource
win10v2004-20220812-en
General
-
Target
1184-54-0x0000000180000000-0x0000000180009000-memory.dmp
-
Size
36KB
-
MD5
6769d36845a0c12e02de9899983614b3
-
SHA1
6dc9556b89ba0e75abb7ab7e67a24afa8a099b69
-
SHA256
66de7ad066de6967a5df0ca088983c25bff8a8a5f190647e0730d1cc6d2d4fd1
-
SHA512
80cd77ecf372a112baa53fcf437039faee6295a9d751524cce8b3a1953c3f27d21f25e910fbf1ef4ebf045c7428ed4bde0be2c1c263c4356c183e80bd4e3a95b
-
SSDEEP
384:h1Mf0gJSix2AA56RCiZVDS3GQYnq/6bl:zZeS6AIoiHDS3Cqi
Malware Config
Extracted
icedid
1023645195
trallfasterinf.com
Signatures
-
Icedid family
Files
-
1184-54-0x0000000180000000-0x0000000180009000-memory.dmp.dll windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.c Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r Size: 512B - Virtual size: 418B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.d Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE