Static task
static1
Behavioral task
behavioral1
Sample
2024-02-18_5390a354a30f255d3118c26477cb0bfd_icedid.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-18_5390a354a30f255d3118c26477cb0bfd_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-18_5390a354a30f255d3118c26477cb0bfd_icedid
-
Size
2.3MB
-
MD5
5390a354a30f255d3118c26477cb0bfd
-
SHA1
1456ca2b95c5d9a2f967e2976b8b9031a6e5190f
-
SHA256
b7f59c134f4cfb06534e0ead54975a619c529f0508d9783e65f2aa1f4234da20
-
SHA512
4da60209e6730cd1f3018833dd2388daa38d9ad80fde0e12c3dbc9e4e26c29e82743a9da65e679abed257b5c87133c3803e0ecfc6a9ea674b039a6388790b867
-
SSDEEP
49152:9N58uJk0SWnctBU0asX+pDBfnNbo5iDnJLCbtQt7lRp/nd:9N5MS8MsX+pDVnNSceQtpR
Malware Config
Signatures
-
Detects Windows executables referencing non-Windows User-Agents 1 IoCs
resource yara_rule sample INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-18_5390a354a30f255d3118c26477cb0bfd_icedid
Files
-
2024-02-18_5390a354a30f255d3118c26477cb0bfd_icedid.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ