General

  • Target
    2024-06-07_261e1f92d8007c1366eca43846e3e99f_icedid_magniber_sakula
  • Size 25.5MB
  • Sample240607-yldc3sce5w
  • SHA256 24b3ec435d9111e33de512dd1f96f4e60088f8d50e63ffad6a849ada781d146f
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 1 IoCs

File Explorer

  • 2024-06-07_261e1f92d8007c1366eca43846e3e99f_icedid_magniber_sakula
    .exe 25.5MB

2024-06-07_261e1f92d8007c1366eca43846e3e99f_icedid_magniber_sakula

  • IMPHASH b600798dc0cba5e324813444b5969f90
  • SHA256 24b3ec435d9111e33de512dd1f96f4e60088f8d50e63ffad6a849ada781d146f
  • MD5 SHA1 SHA512 SSDEEP
  • UPX dump on OEP (original entry point)

PE Signature issue

Digest
38:19:ca:73:05:c2:98:3f:09:f7:93:f9:6f:d5:b6:c6:0a:bc:e7:31:53:93:0d:a1:c6:34:05:5e:36:d2:0d:48
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=C 86211,CN=JetBrains s.r.o.,O=JetBrains s.r.o.,L=Prague,C=CZ,1.3.6.1.4.1.311.60.2.1.3=#1302435a,1.3.6.1.4.1.311.60.2.1.2=#1306507261677565,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
4
Entry point
681290
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths