2026-08-09_3989e0f00fbc8b5de73475a29f9d2532_icedid

General

Target
2026-08-09_3989e0f00fbc8b5de73475a29f9d2532_icedid
Size 1.6MB
Sample260809-pvcy8ser81
SHA256 d2aa2514610c25d60689ad63762ea87ebb2d1b1c6cacf1392f609ccc2adc7b1f
MD5 3989e0f00fbc8b5de73475a29f9d2532
SHA1 ed2384642b743543947e40de3f0682ed06d3da15
SHA512 dacfc0aab50a3988174e229bcdb1b852881699516a836c7b754414658bde3b1e6dff0fe7a89b416323e37771139a367d23ea1d721a97fcb03a0e2b9edb46c922
SSDEEP 12288:PnOS7NKACOaMtyXGLy4KaghH35S6ga08mGl9/4gN85mRx5c+oqS:PcACOaMkXMy4KaUH34XaBwV5mNc+o
TLSH
T17F751257B3F930F9E17A8638C1514605E371BCB607A4AB7F0AA4A6861F372D08D39E61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-09_3989e0f00fbc8b5de73475a29f9d2532_icedid

File Explorer

2026-08-09_3989e0f00fbc8b5de73475a29f9d2532_icedid

.exe 1.6MB

2026-08-09_3989e0f00fbc8b5de73475a29f9d2532_icedid

IMPHASH 1c6e154be5af36e414f92289a70dc28d
SHA256 d2aa2514610c25d60689ad63762ea87ebb2d1b1c6cacf1392f609ccc2adc7b1f
MD5 3989e0f00fbc8b5de73475a29f9d2532
SHA1 ed2384642b743543947e40de3f0682ed06d3da15
SHA512 dacfc0aab50a3988174e229bcdb1b852881699516a836c7b754414658bde3b1e6dff0fe7a89b416323e37771139a367d23ea1d721a97fcb03a0e2b9edb46c922
SSDEEP 12288:PnOS7NKACOaMtyXGLy4KaghH35S6ga08mGl9/4gN85mRx5c+oqS:PcACOaMkXMy4KaUH34XaBwV5mNc+o
TLSH
T17F751257B3F930F9E17A8638C1514605E371BCB607A4AB7F0AA4A6861F372D08D39E61
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4780

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\jenkins\home\workspace\sonic_mission_2878142\u3player\r2\sdk-cxx\build\windows\release\x86_64\dist\apollocmd.pdb

libapolloffmpeg

register_exit ffmpeg_main

kernel32

HeapFree WriteConsoleW CloseHandle QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW GetCommandLineA GetCommandLineW HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect CompareStringW LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Name

.text

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

600B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-09_3989e0f00fbc8b5de73475a29f9d2532_icedid

libapolloffmpeg

kernel32

generic