Static task
static1
Behavioral task
behavioral1
Sample
2024-02-02_676d66435bbe899f7c53de8b4729c471_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-02_676d66435bbe899f7c53de8b4729c471_icedid.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-02_676d66435bbe899f7c53de8b4729c471_icedid
-
Size
701KB
-
MD5
676d66435bbe899f7c53de8b4729c471
-
SHA1
a1b2186b40c06d96633069c741dd2cf3fb6d35f3
-
SHA256
b12810726fbd344b28ad8906c84737c648e978d584e7d90e035dca070d2a1e06
-
SHA512
d2a57dcb2acf3f6ce2305230c1fa508c23e1535e34fd614145e9da4eb8d0b86a5f3dd7e0664bb562349630cc3295b6de0692d016d99ff6669e0729b74e5940b2
-
SSDEEP
12288:p7bSAcO9nmofU3f5JblvsXWhW3FPOlNTHlGvYPlP5IzC1fshUQCvLo2k:5HnmlJblvSdFP8THlhqe1kh7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-02_676d66435bbe899f7c53de8b4729c471_icedid
Files
-
2024-02-02_676d66435bbe899f7c53de8b4729c471_icedid.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 530KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ