2024-05-09_f627ee2b80dde5118039051065afdc6e_hacktools_icedid | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-09_f627ee2b80dde5118039051065afdc6e_hacktools_icedid
Size

4.8MB
MD5

f627ee2b80dde5118039051065afdc6e
SHA1

fdeb549a3ed7a40a61646f6b5aed821886d59bbe
SHA256

10cda94bdde5efc6d14a8c519f0d3378777d254f0bd40f3762d48726f5eb57dc
SHA512

3875d52984d92d9604c511d268fb2ae4c09f69e92c0286181fc2b5023fe020ab05168e28fda2a7d7f889fdd55b179f060848ec688c90813e3e8c54f969b5e644
SSDEEP

98304:N/pOcLyrLc8/soibRksbYvYAumC10cygWEaoeMiQG0KYO8m:NULcoMRks+C1e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-09_f627ee2b80dde5118039051065afdc6e_hacktools_icedid

Files

2024-05-09_f627ee2b80dde5118039051065afdc6e_hacktools_icedid
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 654KB - Virtual size: 653KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ