2024-09-08_eadf5dab7fa6db055ea44248cdf72453_icedid | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-08_eadf5dab7fa6db055ea44248cdf72453_icedid
Size

1.1MB
MD5

eadf5dab7fa6db055ea44248cdf72453
SHA1

3e68423bf9efced0c956db242d298f40ad0bfdd2
SHA256

e88a523a7c08db0ef7fbc8e950fef712de5acb03786b4387a76bcdfe46860a3f
SHA512

c2a468fbc9b6b79a3a3a293313fb61d75e62013ac8aa86a6396f0039f1628ddd617a5651d97dff40f9828b35282daea62aa2ef7e2cca74449ccbd6af5d9a6f83
SSDEEP

24576:2y61hRh+/dxOZ1RWz+e4rd+TGx2vqgj25:2EQ04rd+y1gj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-08_eadf5dab7fa6db055ea44248cdf72453_icedid

Files

2024-09-08_eadf5dab7fa6db055ea44248cdf72453_icedid
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\svn team\DriveTheLife\trunk\UI\DriveTheLife\bin\release\DriveTheLife.pdb

Sections

.text
Size: 784KB - Virtual size: 783KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmj
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE