2024-10-09_19ae09fcd0b5f25f9c7706ff572ff736_icedid | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-09_19ae09fcd0b5f25f9c7706ff572ff736_icedid
Size

2.7MB
MD5

19ae09fcd0b5f25f9c7706ff572ff736
SHA1

9356d16439c0d04d1b2ab71519156f71d0d0bec5
SHA256

5353b8b76505a6baf3b967357a62faf00864d964b79140b28623c4bdcadcbde1
SHA512

a4db46b0e8d97f39532d668e513c45215a9b1006ce6bd7f8c7db22228ded46db51b062cf29c4aac8070274aec69d752a64b5503206467d682a64b6357ab04a46
SSDEEP

49152:CH2BPlLfYcpWmE0SukemfiAD03yy/cTCjjwV/YnDnHW/I8E6OhQaLObZRvFDh:CANLYcU0wfD03yy/cTAFnHW/I8EkaL2X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-09_19ae09fcd0b5f25f9c7706ff572ff736_icedid

Files

2024-10-09_19ae09fcd0b5f25f9c7706ff572ff736_icedid
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.newimp
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma1
Size: 116KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE