General

  • Target
    2024-06-11_cf9cf49bca3d28cc6f1e0752dc08c30c_darpapox_icedid_nymaim
  • Size 20.1MB
  • Sample240611-lynclasfmg
  • SHA256 323a54146ffd06f5630f2c40d015600ebc779c029d5f75ff09d65b5da5c8561a
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 2024-06-11_cf9cf49bca3d28cc6f1e0752dc08c30c_darpapox_icedid_nymaim
    .exe 20.1MB

2024-06-11_cf9cf49bca3d28cc6f1e0752dc08c30c_darpapox_icedid_nymaim

  • IMPHASH 730073214094cd328547bf1f72289752
  • SHA256 323a54146ffd06f5630f2c40d015600ebc779c029d5f75ff09d65b5da5c8561a
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
f4:1c:c2:df:47:19:db:13:ac:e7:be:f6:36:11:4b:db:23:66:cf:28
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=U40100TN2010PTC075961,CN=ZOHO CORPORATION PRIVATE LIMITED,O=ZOHO CORPORATION PRIVATE LIMITED,L=Chennai,ST=Tamil Nadu,C=IN,1.2.840.113549.1.9.1=#0c1470726162687570407a6f686f636f72702e636f6d,1.3.6.1.4.1.311.60.2.1.2=#130a54616d696c204e616475,1.3.6.1.4.1.311.60.2.1.3=#1302494e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
4
Entry point
5759
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths