2026-08-19_3decaf8b565e47de1540962b03e834a1_icedid_vidar

General

Target
2026-08-19_3decaf8b565e47de1540962b03e834a1_icedid_vidar
Size 689KB
Sample260820-b9dmesxgrf
SHA256 2251b2217aee40e2c16ceb7476153cce46d934acc8691b13c4515755a002c1ac
MD5 3decaf8b565e47de1540962b03e834a1
SHA1 dacd5f8dcb7f4331be4a38dbc2284bfae812963d
SHA512 1fa2b33883dc27debeca0191358f0ee87e4947732394e16324639491978a3cca7b126ce30902f4ec699cdb98de8831e51a4c4102b89c8f48f84297c7a780fa6c
SSDEEP 12288:DYHqfShxeGeDLdcY2XPXxvB4mn/l5SmAGbzLHucc/3P/9G:sl9ePSfPFB9nLSb6LOD/f/o
TLSH
T104E4125BA38532F9E2A3963885B5511E9333B8760A318B4F5B68065E0F377D18E36F31
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-19_3decaf8b565e47de1540962b03e834a1_icedid_vidar

File Explorer

2026-08-19_3decaf8b565e47de1540962b03e834a1_icedid_vidar

.exe 689KB

2026-08-19_3decaf8b565e47de1540962b03e834a1_icedid_vidar

IMPHASH 709a1ec6ee131d12dbb95ff48e68a6d5
SHA256 2251b2217aee40e2c16ceb7476153cce46d934acc8691b13c4515755a002c1ac
MD5 3decaf8b565e47de1540962b03e834a1
SHA1 dacd5f8dcb7f4331be4a38dbc2284bfae812963d
SHA512 1fa2b33883dc27debeca0191358f0ee87e4947732394e16324639491978a3cca7b126ce30902f4ec699cdb98de8831e51a4c4102b89c8f48f84297c7a780fa6c
SSDEEP 12288:DYHqfShxeGeDLdcY2XPXxvB4mn/l5SmAGbzLHucc/3P/9G:sl9ePSfPFB9nLSb6LOD/f/o
TLSH
T104E4125BA38532F9E2A3963885B5511E9333B8760A318B4F5B68065E0F377D18E36F31
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6768

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\DCB\CBT_Main\BuildResults\bin\Release\chrome_wow_helper.pdb

Name

.text

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

591KB

Virtual Size

592KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

2026-08-19_3decaf8b565e47de1540962b03e834a1_icedid_vidar

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-19_3decaf8b565e47de1540962b03e834a1_icedid_vidar

kernel32

generic