2026-08-02_b52da89614eaec6ac5fbcac9a4f26c29_icedid

General

Target
2026-08-02_b52da89614eaec6ac5fbcac9a4f26c29_icedid
Size 14.7MB
Sample260802-3t5vhstfqa
SHA256 5ddebc86729bade8ec25b789110f1f1fb5f67e9efed914d5436b72c19b30832b
MD5 b52da89614eaec6ac5fbcac9a4f26c29
SHA1 0b4bc799e019f60e9ff6f4ab7485dbf7fde1e56a
SHA512 156878e29d665da11c5297a32442171402d6f36d6b943491761d453d221c97e58271f9d2288e84ddceb32943ea6a606f70f5bf57c6131c47a74d7d6ec4bf9bae
SSDEEP 393216:sXg629x6K9zEPzgMEhD1ypXucRLkYCFclmd:ZRb/zEPzl3FXq5
TLSH
T10CF6335AD20661F4C5C302BA945000B1F760B866C661ABDF37D49BB76F03B811DAFFA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_b52da89614eaec6ac5fbcac9a4f26c29_icedid

File Explorer

2026-08-02_b52da89614eaec6ac5fbcac9a4f26c29_icedid

.exe 14.7MB

2026-08-02_b52da89614eaec6ac5fbcac9a4f26c29_icedid

IMPHASH c0be67fb1ec56c6f19a5ba9d0572b2e3
SHA256 5ddebc86729bade8ec25b789110f1f1fb5f67e9efed914d5436b72c19b30832b
MD5 b52da89614eaec6ac5fbcac9a4f26c29
SHA1 0b4bc799e019f60e9ff6f4ab7485dbf7fde1e56a
SHA512 156878e29d665da11c5297a32442171402d6f36d6b943491761d453d221c97e58271f9d2288e84ddceb32943ea6a606f70f5bf57c6131c47a74d7d6ec4bf9bae
SSDEEP 393216:sXg629x6K9zEPzgMEhD1ypXucRLkYCFclmd:ZRb/zEPzl3FXq5
TLSH
T10CF6335AD20661F4C5C302BA945000B1F760B866C661ABDF37D49BB76F03B811DAFFA6
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5472

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

Sleep GetModuleFileNameA GetModuleHandleA GetProcAddress RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW WriteConsoleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader ReadFile GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapFree HeapAlloc CloseHandle GetConsoleMode ReadConsoleW SetFilePointerEx GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW GetProcessHeap FlushFileBuffers GetConsoleOutputCP CreateFileW HeapSize HeapReAlloc SetEndOfFile

Name

.text

Size

69KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-02_b52da89614eaec6ac5fbcac9a4f26c29_icedid

kernel32

generic