General

  • Target
    2024-06-12_db135e2a0bb8e8d67a7bdf3f70e1c0cb_icedid
  • Size 3.1MB
  • Sample240612-e2y5ya1bpc
  • SHA256 461248848917830b3dbe62ee2a25171a6f3b8edc20e07189dbb4e899ca04201b
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 2024-06-12_db135e2a0bb8e8d67a7bdf3f70e1c0cb_icedid
    .exe 3.1MB

2024-06-12_db135e2a0bb8e8d67a7bdf3f70e1c0cb_icedid

  • IMPHASH 289215bd0bbbf3eeab600a551191b30a
  • SHA256 461248848917830b3dbe62ee2a25171a6f3b8edc20e07189dbb4e899ca04201b
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
6e:ea:95:02:aa:30:d3:86:21:6b:e0:f8:c4:f8:87:86:d2:8f:c1:c5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Dream Hands Co.\,Ltd,OU=IT Team,O=Dream Hands Co.\,Ltd,L=Haewoondae-gu,ST=Busan,C=KR
Chains

May 16, 2016

Minor OS version
0
Major OS version
5
Entry point
333312
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\WORK\MAIN\Platform\Mfile\mfile_20140324_mureka_fileham\backup\MULTI\expressClient\Bin\MfileDown.pdb