General

  • Target
    2024-12-29_cd7205e30bf9e1386ef87a75b09e9a20_floxif_hijackloader_icedid
  • Size 3.2MB
  • Sample241229-b82b4aymgn
  • SHA256 10781bfafae697d165e463c15421a85936bdb1511b91e8d5878487ffa3e66bd6
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 2024-12-29_cd7205e30bf9e1386ef87a75b09e9a20_floxif_hijackloader_icedid
    .exe 3.2MB

2024-12-29_cd7205e30bf9e1386ef87a75b09e9a20_floxif_hijackloader_icedid

  • IMPHASH 5e63cb76b9118002c068ba1e4d092898
  • SHA256 10781bfafae697d165e463c15421a85936bdb1511b91e8d5878487ffa3e66bd6
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
ac:11:db:3c:61:2d:ac:20:b9:b3:fa:bf:d0:99:b5:73:ed:6a:3d:a1:97:db:55:c4:29:78:4a:44:cb:f2:61:50
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=110111-1138985,CN=AhnLab\, Inc.,O=AhnLab\, Inc.,L=Seongnam-si,ST=Gyeonggi-do,C=KR,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130b53656f6e676e616d2d7369,1.3.6.1.4.1.311.60.2.1.2=#130b4779656f6e6767692d646f,1.3.6.1.4.1.311.60.2.1.3=#13024b52
Minor OS version
0
Major OS version
5
Entry point
2392055
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
u:\AhnLab\Common\AhnRestore\Trunk\Src\V3Restore\Release\V3Restore.pdb