2026-09-28_6bc634e0d58a071979d3fd7c6da80eaa_hijackloader_icedid_mespinoza

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-28_6bc634e0d58a071979d3fd7c6da80eaa_hijackloader_icedid_mespinoza
Size 788KB
Sample260928-sgccbswhrc
SHA256 7f6d8eaa337d20eeaa3a99bf7f95f7864917bd03e4530f87a17ccdddb9b45c43
MD5 6bc634e0d58a071979d3fd7c6da80eaa
SHA1 ce2fcf9d5a4d882bb09d1e0efa9865db875ab98f
SHA512 77d66efe6fb7507382bf21f2f3f72997660172f4bab4b66bfed436c846b876ca8206c3641de9b3686122b6cc18ed3a1b3a814e939f6b43d685d713ea6fc0664b
SSDEEP 6144:zgO/0rTI6Lw52cVh3OZ1tlhs9RqsPCDI4xznMohL5Lm8HiFhJ0PNs+duVkKHXU1a:zg40r8mwvh3cJSBiNxzMop5LmNE5GXU
TLSH
T18505F729AF6486E5F226E57D4676CE89F2727C050F20DBCB6155632E2F37AD04D3E220
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-28_6bc634e0d58a071979d3fd7c6da80eaa_hijackloader_icedid_mespinoza

File Explorer

2026-09-28_6bc634e0d58a071979d3fd7c6da80eaa_hijackloader_icedid_mespinoza

.exe 788KB

2026-09-28_6bc634e0d58a071979d3fd7c6da80eaa_hijackloader_icedid_mespinoza

IMPHASH 61759bb2ea83a104326608c71c469bfd
SHA256 7f6d8eaa337d20eeaa3a99bf7f95f7864917bd03e4530f87a17ccdddb9b45c43
MD5 6bc634e0d58a071979d3fd7c6da80eaa
SHA1 ce2fcf9d5a4d882bb09d1e0efa9865db875ab98f
SHA512 77d66efe6fb7507382bf21f2f3f72997660172f4bab4b66bfed436c846b876ca8206c3641de9b3686122b6cc18ed3a1b3a814e939f6b43d685d713ea6fc0664b
SSDEEP 6144:zgO/0rTI6Lw52cVh3OZ1tlhs9RqsPCDI4xznMohL5Lm8HiFhJ0PNs+duVkKHXU1a:zg40r8mwvh3cJSBiNxzMop5LmNE5GXU
TLSH
T18505F729AF6486E5F226E57D4676CE89F2727C050F20DBCB6155632E2F37AD04D3E220
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

692224

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

libcef

cef_string_multimap_alloc cef_string_multimap_free cef_string_multimap_append cef_string_multimap_value cef_string_multimap_key cef_string_multimap_size cef_string_map_append cef_string_map_value cef_string_map_key cef_string_map_size cef_string_list_append cef_string_list_value cef_string_list_size cef_v8value_create_function cef_v8value_create_string cef_v8value_create_int cef_v8value_create_bool cef_v8context_get_current_context cef_process_message_create cef_execute_process cef_post_task cef_api_hash cef_command_line_create cef_string_map_free cef_string_map_alloc cef_string_list_free cef_string_list_alloc cef_string_userfree_utf16_free cef_string_utf16_cmp cef_log cef_string_utf16_set cef_string_utf8_clear cef_string_utf8_to_utf16 cef_string_utf16_to_utf8 cef_string_utf16_clear

kernel32

CreateFileW FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetProcessHeap GetFileType GetACP GetModuleHandleExW ExitProcess GetModuleFileNameW WriteFile GetStdHandle HeapReAlloc HeapFree HeapAlloc LoadLibraryExW FreeLibrary RtlUnwindEx RaiseException RtlPcToFileHeader GetStartupInfoW IsDebuggerPresent InitializeSListHead GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext CloseHandle GetCPInfo GetStringTypeW LCMapStringW GetProcAddress GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc CreateEventW InitializeCriticalSectionAndSpinCount DecodePointer EncodePointer MultiByteToWideChar DeleteCriticalSection LeaveCriticalSection EnterCriticalSection WideCharToMultiByte SetLastError GetLastError GetModuleHandleW GetCommandLineW WriteConsoleW

Name

.text

Size

320KB

Virtual Size

319KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

176KB

Virtual Size

175KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

284B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

55KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rcdf17

Size

112KB

Virtual Size

112KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-28_6bc634e0d58a071979d3fd7c6da80eaa_hijackloader_icedid_mespinoza

libcef

kernel32

generic