2026-09-29_2df219c69efdbfe1e29a6dabbb3cd015_icedid_vidar

General

Target
2026-09-29_2df219c69efdbfe1e29a6dabbb3cd015_icedid_vidar
Size 1.3MB
Sample260930-d8jhdsvblf
SHA256 83dadcdecb22cd1632c6895901cc885f6fe6ff8d2242295bed5d0bb60ba3d8ef
MD5 2df219c69efdbfe1e29a6dabbb3cd015
SHA1 39a9944a0cac66757a4557866add55f09dbc4967
SHA512 b01503018221430503396ec03bb27cb032f92d65b0fd6533693790914bf4b7f1eb68a1567396e4391893a8ff3cc89811426c0d4207af744cacefc17814ac2cea
SSDEEP 12288:437Do0LuIPuTRYvg8oGUxrbWOSLxbrEx3xMZSCxVS3IVtd9yKWB8Pz4:wDzLuTeqGybWZJKSMCxVbT5o8P
TLSH
T1CC55129B722430F8E62BC739C4A15845F361BCB82A744B9F036561AB1F379E98C39F11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_2df219c69efdbfe1e29a6dabbb3cd015_icedid_vidar

File Explorer

2026-09-29_2df219c69efdbfe1e29a6dabbb3cd015_icedid_vidar

.exe 1.3MB

2026-09-29_2df219c69efdbfe1e29a6dabbb3cd015_icedid_vidar

IMPHASH 175ab6ce3e8a9c5780c981bca652236c
SHA256 83dadcdecb22cd1632c6895901cc885f6fe6ff8d2242295bed5d0bb60ba3d8ef
MD5 2df219c69efdbfe1e29a6dabbb3cd015
SHA1 39a9944a0cac66757a4557866add55f09dbc4967
SHA512 b01503018221430503396ec03bb27cb032f92d65b0fd6533693790914bf4b7f1eb68a1567396e4391893a8ff3cc89811426c0d4207af744cacefc17814ac2cea
SSDEEP 12288:437Do0LuIPuTRYvg8oGUxrbWOSLxbrEx3xMZSCxVS3IVtd9yKWB8Pz4:wDzLuTeqGybWZJKSMCxVbT5o8P
TLSH
T1CC55129B722430F8E62BC739C4A15845F361BCB82A744B9F036561AB1F379E98C39F11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

12540

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\admin\Desktop\AliyunLog-2017\UserInfoCollect\x64\Release\InfoForSetup.pdb

kernel32

GetModuleFileNameW LoadLibraryW GetProcAddress InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetCommandLineW LocalFree CloseHandle CreateFileW SetFilePointerEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx GetLastError SetLastError EncodePointer RaiseException InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RtlPcToFileHeader ExitProcess GetModuleHandleExW GetStdHandle WriteFile HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetProcessHeap GetFileType SetStdHandle GetStringTypeW HeapSize HeapReAlloc FlushFileBuffers GetConsoleCP GetConsoleMode WriteConsoleW

shell32

CommandLineToArgvW

Name

.text

Size

56KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.2MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-29_2df219c69efdbfe1e29a6dabbb3cd015_icedid_vidar

kernel32

shell32

generic