2024-08-17_6d6c96635f32b94c917eaeb7cb0386b1_icedid | Triage

Sharing

General

Target

2024-08-17_6d6c96635f32b94c917eaeb7cb0386b1_icedid
Size

3.1MB
MD5

6d6c96635f32b94c917eaeb7cb0386b1
SHA1

1710d1e7cdbaf72eddefe102a300d0d61f2f9199
SHA256

4960cf51b71fb5330ae985980ea557b5d8ef6362b3fe8848a98ca8a9d6aeff86
SHA512

1fdb40eb310fb0045de60b27e8fb4b7cb85f78a942a85dfe8cdc4b2a6dc37db15c39ff2a1b2670fba6f4018ef525537273b1b081242c8181531c53cc17d2df5e
SSDEEP

49152:+v38gH6VUHcCKcl5QjDtNUjeuB6+Lv/GqwQETg4TYAzD1H+qoQ9i:0YEHQvtkzG7YAz1UC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-17_6d6c96635f32b94c917eaeb7cb0386b1_icedid

Files

2024-08-17_6d6c96635f32b94c917eaeb7cb0386b1_icedid
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\GunzWorks\Publish_Brazil\Gunz\Runtime\theduel.pdb

Exports

Exports

fcEXP

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 392KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 26.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 200KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE