2024-01-29_a80ed5f6a11fba387a49c0b0973d5f1c_icedid | Triage

Sharing

General

Target

2024-01-29_a80ed5f6a11fba387a49c0b0973d5f1c_icedid
Size

3.1MB
MD5

a80ed5f6a11fba387a49c0b0973d5f1c
SHA1

fd3f38f7671739daccf31278c84ebf87e054289e
SHA256

e8a418154f7d88558c9c03a67ef7df2055bb7eefbe089a50c0b9c244a4469eb2
SHA512

f1244da7fd1bedf08e2259fe6fb31c411ff42cccee7a0e21534ef07c4e5c53ec7738e94b71b4b0c2d513d079b7333ab7e2ece8099a41b60da5a8f7e878e21563
SSDEEP

49152:QVNXVSVhM1rCZNu5kgqyfIW2dzzZjxzq0jt:Q7XV2C1rCZNu51qyfqx2Wt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-29_a80ed5f6a11fba387a49c0b0973d5f1c_icedid

Files

2024-01-29_a80ed5f6a11fba387a49c0b0973d5f1c_icedid
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NewIT
Size: 4KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE