2023-01-31_98092c47da18f577c8c088d93f02fd72_icedid_ipamor | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2023-01-31_98092c47da18f577c8c088d93f02fd72_icedid_ipamor
Size

5.5MB
MD5

98092c47da18f577c8c088d93f02fd72
SHA1

50c5a175c0b9b454a1e5c149be784d0f1d5fbcf9
SHA256

8c4efa4d384b9078f3f2ee6d822cf3c71dec9521f44008b97c7b67e38bdff41a
SHA512

355bdbc64d47b392f227ac78139cd79cfb749bf72b0f9fbe3ace92e7be659930e2b4335ad918a5984801df0f8a35245d7587c5ed1ad088b24cfb97f73c93ef34
SSDEEP

49152:OecS4neiOmge2QZVGAKjZ1niizCouK9TOi91khWPOmisGZ1niizCouK9TOi91kh5:ODS4ne42QZI98+Y98+CTk8J

Score

8^/10

aspackv2

Malware Config

Signatures

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

resource	yara_rule
sample	aspack_v212_v242

Files

2023-01-31_98092c47da18f577c8c088d93f02fd72_icedid_ipamor
.exe windows

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE