Static task
static1
Behavioral task
behavioral1
Sample
2024-03-15_974c5e9ffaca69fa16569c0f4752f961_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-15_974c5e9ffaca69fa16569c0f4752f961_icedid.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-15_974c5e9ffaca69fa16569c0f4752f961_icedid
-
Size
1.7MB
-
MD5
974c5e9ffaca69fa16569c0f4752f961
-
SHA1
428c8d9fe3caaa04703030a057d66420aade858e
-
SHA256
b9f6a2c85662c50e22008ff9604be19b7fdbb0c32a0fb4f16806532608111171
-
SHA512
f442d3295148b79b1df5d90500dbc8bf9889039ddf5c7007614526f17446ca743193f38fd2bc6e28df28f822e8e3886b8162d7938e538796baa89cec19c6325a
-
SSDEEP
24576:tSKyJQtLVp9YiacwSkfy2odt2sqadn/JatVWeEmKqsOG6B0d1VATFEiegS8I9DM7:kcBSgUsq3XWeEz2u1mTFEieAQM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-15_974c5e9ffaca69fa16569c0f4752f961_icedid
Files
-
2024-03-15_974c5e9ffaca69fa16569c0f4752f961_icedid.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ