83adf83f98533bad987a6364125b77bf_icedid_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83adf83f98533bad987a6364125b77bf_icedid_JC.exe
Size

2.2MB
MD5

83adf83f98533bad987a6364125b77bf
SHA1

6fcf720e065f2bd6772b2847609327ef4b6c7cdb
SHA256

e035bb758fd6a5dce8a4cce70667cb37f14a3574f71ceb882895ba22f1af0c69
SHA512

00ea17beb6964019e1128eb7a52aaf47a24f94f8c3c8294af13d38aa0c00d9c16189d7a4b618d3189b050303f7337ad850985b18a1a7614dd6752a05ab4b810b
SSDEEP

49152:8kivT8TpcV/rVtbK5DNlPu/lg7R0t8i+pk:89TypyrnK5hlegR0Oib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83adf83f98533bad987a6364125b77bf_icedid_JC.exe

Files

83adf83f98533bad987a6364125b77bf_icedid_JC.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 500KB - Virtual size: 497KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.IIDKing
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE