Static task
static1
Behavioral task
behavioral1
Sample
2024-02-03_d3d870ed3a50c0830d9b9d8182ec356a_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-03_d3d870ed3a50c0830d9b9d8182ec356a_icedid.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-03_d3d870ed3a50c0830d9b9d8182ec356a_icedid
-
Size
701KB
-
MD5
d3d870ed3a50c0830d9b9d8182ec356a
-
SHA1
795ffbfc04831e0fc71c4d0bf1675fa8b869bae8
-
SHA256
5ea5dac70707421fbaeb11a21fefc10531bbf14c6a79bc30fdba509ed2325464
-
SHA512
fb80895d347ac30d8199f08d072e66ebaebfefdc233eef078afb1752878ec2940011120bfa8143ee64fe47663691e3b51ffda6347f866fa9bf6e30394038b8c9
-
SSDEEP
12288:I7bSAcO9nmofU3f5JblvsXWhW3FPOlNTHlGvYPlP5IzC1fshUQCvLo2k:6HnmlJblvSdFP8THlhqe1kh7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-03_d3d870ed3a50c0830d9b9d8182ec356a_icedid
Files
-
2024-02-03_d3d870ed3a50c0830d9b9d8182ec356a_icedid.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 530KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ