2024-04-15_c07106294cd0d29a5000074bb9c8901d_icedid | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-15_c07106294cd0d29a5000074bb9c8901d_icedid
Size

2.3MB
MD5

c07106294cd0d29a5000074bb9c8901d
SHA1

c0c921de34a56706e154002176e770734ed98f26
SHA256

c4b6afd5e5eda1d86f5921d69fa57a7211e2feb1bbe4ad381954d283a9892600
SHA512

8b2a9d35e4fe5357d03785c4cced242df85ec1c63bfd0d1a383f7efcd4ec54c7ddd11ef43d9900ca151ceb5db751ddf4114478f561fa1a1b9840dfc6155ba214
SSDEEP

49152:YH2BHlLfYcpvmE0SukeNfiAD03yy/cP7jjwV/YnDnHW/I8E6mp1aLcD:YAFLYcv0vfD03yy/cP/FnHW/I8EtaLu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-15_c07106294cd0d29a5000074bb9c8901d_icedid

Files

2024-04-15_c07106294cd0d29a5000074bb9c8901d_icedid
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newimp
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE