2024-08-20_907d5b954d71930f41177b8729e38e9d_icedid | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-20_907d5b954d71930f41177b8729e38e9d_icedid
Size

2.7MB
MD5

907d5b954d71930f41177b8729e38e9d
SHA1

db41bf9c3f63d0058638bbc5a202fcaa2c6b7b70
SHA256

6302d95c7971a6957b0e415b25dbc4d59a8f3891bd10cdac4387d6d981448863
SHA512

597d46ba7b1d6e1397290dc85f71ce445149092e09e753b4fc1f174639b52c1f43b26c09f615487e7b4f60bfd512b60f5e056a42585990f64d620fac90e392bd
SSDEEP

49152:Gmx7gH6VUHDCF875QjDBNUieuB2+Lv/G6wQxTg4TYAzD:dFEDQvBFzGGYAz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-20_907d5b954d71930f41177b8729e38e9d_icedid

Files

2024-08-20_907d5b954d71930f41177b8729e38e9d_icedid
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\GunzWorks\Publish_Brazil\Gunz\Runtime\theduel.pdb

Exports

Exports

fcEXP

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 26.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newimp
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE