Static task
static1
Behavioral task
behavioral1
Sample
2024-09-02_6b96dfe49e93a621e7d055ad4d86c451_anydesk_icedid_zxxz.exe
Resource
win7-20240705-en
General
-
Target
2024-09-02_6b96dfe49e93a621e7d055ad4d86c451_anydesk_icedid_zxxz
-
Size
3.0MB
-
MD5
6b96dfe49e93a621e7d055ad4d86c451
-
SHA1
18caeef89541807f33718be9c251950da3bbb60a
-
SHA256
c4a294b56049308f665f9e1ab4fc45f82deb1ac8e8eef8d7df4cdd58f4a4b2f3
-
SHA512
c8549f9ba75d8b10685eb00a4946e09fb80897114233a1a19f62d19a5605e40af1f703138651906347084d5fcc912c8865e2a0cf62fcaabb5abef6fdb40270c5
-
SSDEEP
49152:6aKNdE1A8uKPV6RPyAd2cPzMs6Oyif3pYl5c6gipZg5druIitZ:rKNdN8uK96R97PoXqClVJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-02_6b96dfe49e93a621e7d055ad4d86c451_anydesk_icedid_zxxz
Files
-
2024-09-02_6b96dfe49e93a621e7d055ad4d86c451_anydesk_icedid_zxxz.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 852KB - Virtual size: 851KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ