2024-02-14_13b10738eddba983d5c197a5063ca91e_icedid | Triage

Sharing

General

Target

2024-02-14_13b10738eddba983d5c197a5063ca91e_icedid
Size

25KB
MD5

13b10738eddba983d5c197a5063ca91e
SHA1

6f02bdd76aab7caa85d4317b7de81df58952e7f6
SHA256

26dfbda1c3df3bae6459e9474fb72a2a876f72029dbbded7cc153ab97d433964
SHA512

67ff50bbd189b17dcb18d5570dcca89d7b879472c1029afe126701f21f21fb1bffaf8b5658dfa8f1976c40f4d1cb77c65855a63858b1a371e8dc3b151fcc2347
SSDEEP

384:HT05kPC/C5RXmg0BB+ctWXbG0Wv7xvYs+NhKtFZVFe92MPNLQDR6EVOPLbIF1dBx:z05kPPRXEB+Xk7+NhKtPVFmE8M1d5l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-14_13b10738eddba983d5c197a5063ca91e_icedid

Files

2024-02-14_13b10738eddba983d5c197a5063ca91e_icedid
.exe windows:5 windows x86 arch:x86

9b4cd19c433daac3189847df26d6aff6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
SetCurrentDirectoryW
OutputDebugStringA
Sleep
ExitProcess
CreateProcessW
GetSystemDirectoryW
lstrcatW
GetNativeSystemInfo
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
HeapAlloc
HeapFree
GetProcessHeap

shlwapi

StrToIntA
StrStrIA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE