Static task
static1
Behavioral task
behavioral1
Sample
2024-05-06_c8edc8f3f25acd5aa0311494ebf49f4a_icedid.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-06_c8edc8f3f25acd5aa0311494ebf49f4a_icedid.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-05-06_c8edc8f3f25acd5aa0311494ebf49f4a_icedid
-
Size
1020KB
-
MD5
c8edc8f3f25acd5aa0311494ebf49f4a
-
SHA1
e2ae0beb436594007dadcccfeb44e062fb03fdd5
-
SHA256
c3a121d85073399d657dbef73bd77fdb806d45a022dfe9f9ee4babcb2bc60899
-
SHA512
4e23f8028089e8e148c29a5aa46472b95f3cf27cb265e0635086f790a242c2e69838a4f6e22a0a243ee2164c4c12a5ef3eb2e471618a32e338c1bab3ada89147
-
SSDEEP
24576:5nndbmV9QToaqMsQGuL51azTt9fyIXhKjuj7loLRWlpB:nbmGy2Uzx9fyIXAjUhplpB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-06_c8edc8f3f25acd5aa0311494ebf49f4a_icedid
Files
-
2024-05-06_c8edc8f3f25acd5aa0311494ebf49f4a_icedid.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 712KB - Virtual size: 708KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 160KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ