icedid | 1700-54-0x0000000180000000-0x0000000180009000-memory[.]dmp

General

Target
1700-54-0x0000000180000000-0x0000000180009000-memory.dmp
Size 36KB
Sample240303-2vet2sbe67
SHA256 1fcaa015d5a9826587e882a65a304b6b00cdf4cc52cfd321541de4a4500e9bce
MD5 eca86688a26809a9e152ebf65e59a707
SHA1 1bdf7829570721d2de601aa1781f2949331f96f7
SHA512 904c22e920ceb25ea28b711fcf33d09f227993c89937512b0109697e37df9fa6782c6737d3ccfce8a99b96122a461259cdd3f0ff59c25f1e21b3e3ecea896e2e
SSDEEP 384:h1Mf0gJSix2AA56RCiZVQX3GQYnq/6bl:zZeS6AIoiHQHCqi
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

loader 1023645195 icedid

Malware Config

Extracted

Family

icedid

Campaign

1023645195

C2

trallfasterinf.com

Signatures

Icedid family
icedid

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1700-54-0x0000000180000000-0x0000000180009000-memory.dmp

File Explorer

1700-54-0x0000000180000000-0x0000000180009000-memory.dmp

.dll 36KB

1700-54-0x0000000180000000-0x0000000180009000-memory.dmp

SHA256 1fcaa015d5a9826587e882a65a304b6b00cdf4cc52cfd321541de4a4500e9bce
MD5 eca86688a26809a9e152ebf65e59a707
SHA1 1bdf7829570721d2de601aa1781f2949331f96f7
SHA512 904c22e920ceb25ea28b711fcf33d09f227993c89937512b0109697e37df9fa6782c6737d3ccfce8a99b96122a461259cdd3f0ff59c25f1e21b3e3ecea896e2e
SSDEEP 384:h1Mf0gJSix2AA56RCiZVQX3GQYnq/6bl:zZeS6AIoiHQHCqi
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

9292

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.c

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text

Size

512B

Virtual Size

6B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

420B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.r

Size

512B

Virtual Size

418B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.d

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

1700-54-0x0000000180000000-0x0000000180009000-memory.dmp

generic