2026-08-03_e3121c910ba8b0ef23b5cbdf17ee63dc_icedid

General

Target
2026-08-03_e3121c910ba8b0ef23b5cbdf17ee63dc_icedid
Size 2.4MB
Sample260804-k73m7swfmd
SHA256 454659e20879720fb831cb8302dd9df37f3c64c6cf6051a99d380aff56dd843e
MD5 e3121c910ba8b0ef23b5cbdf17ee63dc
SHA1 8df69c4bf57fefdf955e377ce3b51cfb2468395f
SHA512 606e19346a7595dcb783b1ee4fc4767875617e0bf20840a44cebd24dc9746a8ffbd4e90e0da4575f579df9edd52d5cb0443613871591a46978c9173ba85a8b63
SSDEEP 24576:6R/VNqRHW77X8FKSQhvl+qcEV3A0JsbFwkH4zQwuQKm69pjyGMdF3aQImEJojtEK:6NnSQhvvhgwWu9wU/ImEJgEwuyAGA4
TLSH
T16CC523027EBA2CFCC668863CE06F492957B07AB15598EBEF17C541D76E47B900C2F924
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_e3121c910ba8b0ef23b5cbdf17ee63dc_icedid

File Explorer

2026-08-03_e3121c910ba8b0ef23b5cbdf17ee63dc_icedid

.exe 2.4MB

2026-08-03_e3121c910ba8b0ef23b5cbdf17ee63dc_icedid

IMPHASH 7cc4a68525c4a177661da6da1df169e0
SHA256 454659e20879720fb831cb8302dd9df37f3c64c6cf6051a99d380aff56dd843e
MD5 e3121c910ba8b0ef23b5cbdf17ee63dc
SHA1 8df69c4bf57fefdf955e377ce3b51cfb2468395f
SHA512 606e19346a7595dcb783b1ee4fc4767875617e0bf20840a44cebd24dc9746a8ffbd4e90e0da4575f579df9edd52d5cb0443613871591a46978c9173ba85a8b63
SSDEEP 24576:6R/VNqRHW77X8FKSQhvl+qcEV3A0JsbFwkH4zQwuQKm69pjyGMdF3aQImEJojtEK:6NnSQhvvhgwWu9wU/ImEJgEwuyAGA4
TLSH
T16CC523027EBA2CFCC668863CE06F492957B07AB15598EBEF17C541D76E47B900C2F924
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

12992

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FindResourceA LoadLibraryA SizeofResource LockResource LoadResource GetProcAddress WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapSize GetProcessHeap QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW HeapFree HeapAlloc HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW

advapi32

CryptDecrypt CryptImportKey CryptSetKeyParam CryptDestroyKey CryptReleaseContext CryptAcquireContextW

ole32

CoInitializeEx

oleaut32

VariantInit SafeArrayCreateVector SafeArrayPutElement VariantClear SafeArrayAccessData SafeArrayDestroy SysFreeString SysAllocString SafeArrayUnaccessData

Name

.text

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_e3121c910ba8b0ef23b5cbdf17ee63dc_icedid

kernel32

advapi32

ole32

oleaut32

generic