2024-01-26_ba91cc2af8b92de6114ee778d6148586_icedid | Triage

Sharing

General

Target

2024-01-26_ba91cc2af8b92de6114ee778d6148586_icedid
Size

2.3MB
MD5

ba91cc2af8b92de6114ee778d6148586
SHA1

53b177c3de17f0f3d5bcc7b7c8deb0f963f7aec7
SHA256

0b549defe7d6ccba36c45b26db7ae8abe78c58047912262a650612b009319505
SHA512

f162898eb4ad74eca3984ce636b9026d773b1c8c2270f2728f0060568d2cb624f774efdef93e66671500df1dbc327fffa84967228766227d5aa4eaa10f1db652
SSDEEP

49152:dkivTNTpcr/rVtbKRRNfqu/lg7R0t8ihpQdD:d9TppQrnKRTfbgR0Oic1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-26_ba91cc2af8b92de6114ee778d6148586_icedid

Files

2024-01-26_ba91cc2af8b92de6114ee778d6148586_icedid
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newimp
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE