2024-08-25_c4aa94bfb01e1620ce9bae8525ce2b9d_icedid | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-25_c4aa94bfb01e1620ce9bae8525ce2b9d_icedid
Size

5.0MB
MD5

c4aa94bfb01e1620ce9bae8525ce2b9d
SHA1

59e2afe0d2e26271def49597498f6c8831e7daea
SHA256

825da701cc3306e8ec43030d6f6f0f6d81a4b5a0dc05bbded59afba96226135e
SHA512

1532685f581ae47823bf642b67127228c93fc44316231670c9eccfdcea47cb0c6365d49f60e63f68fe7986e5cc9f6058da2273664d5270dec4656033db789511
SSDEEP

98304:SYB2qnhD6HBnpg5negdwSfeP6cBMGZ7lo+H3FtoqFZojP:Su3mpg9ASfeP6ceYH3FtoqFOT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-25_c4aa94bfb01e1620ce9bae8525ce2b9d_icedid

Files

2024-08-25_c4aa94bfb01e1620ce9bae8525ce2b9d_icedid
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ