2024-05-10_e004fa932107917e13e9aa86a681b168_icedid | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-10_e004fa932107917e13e9aa86a681b168_icedid
Size

2.1MB
MD5

e004fa932107917e13e9aa86a681b168
SHA1

8af3cdf985c0bab9ba60e3f73f068b685c74a45a
SHA256

5cfe21d4d098451d993b6e86520399bbf0a43d9f681e3ebeea389f56129c5dfe
SHA512

ff92a82fc815776c4048269c9b0b0d7e1b34fd42c346df056ade10b8ecf5aeb7e3eddbfb0d87e6c7eb830b87430e3308bb48fa3f72a80452961c5d08c07453fe
SSDEEP

49152:Z5A2DjDN5c+pRg4v/5OffJrDRiiRZWfcoD:ZuYjB5jpRg9ffZoiHa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-10_e004fa932107917e13e9aa86a681b168_icedid

Files

2024-05-10_e004fa932107917e13e9aa86a681b168_icedid
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 472KB - Virtual size: 471KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Silvana
Size: 328B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE