General

  • Target
    e37afb63e7a14a525aa13f4fdf89e698c114c35193ddc183b1db4991500f6c2dN
  • Size 8KB
  • Sample240928-sr3bhasemm
  • SHA256 e37afb63e7a14a525aa13f4fdf89e698c114c35193ddc183b1db4991500f6c2d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • icedid

Signatures

  • IcedID Second Stage Loader 1 IoCs
  • Icedid family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • e37afb63e7a14a525aa13f4fdf89e698c114c35193ddc183b1db4991500f6c2dN
    .exe 8KB

e37afb63e7a14a525aa13f4fdf89e698c114c35193ddc183b1db4991500f6c2dN

  • IMPHASH 5bb99df5d066cfc2a2e8eba6c4771204
  • SHA256 e37afb63e7a14a525aa13f4fdf89e698c114c35193ddc183b1db4991500f6c2d
  • MD5 SHA1 SHA512 SSDEEP
  • IcedID Second Stage Loader

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
6812
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths