2026-10-19_36e35f57405377475cc126923031740c_icedid

General

Target
2026-10-19_36e35f57405377475cc126923031740c_icedid
Size 8.6MB
Sample261020-3f973sbs8q
SHA256 cab3351599cd84fa5b60eebdd87e1f71a0e16f8e364f7f192395fce61e3b1f39
MD5 36e35f57405377475cc126923031740c
SHA1 8c6664de026227a04fc87c5feb6782e8f16e0331
SHA512 78ce4305b7bd275ffa28a3533f78ec6b8852d00aa5bcd64aed073e684370a47e3e24ba4befa76e8cef5a067c642e38b640d6c514a2cbf2bff5c31d6b458c1cf4
SSDEEP 196608:+Hs+bUI5CdUnaKEfGmB1gtaiHN8GQ4fTBVR1xikpdoog:mUwoUnlsB1ji2PwTBVR1xZXx
TLSH
T1B396339627B26390D5F7B2B6B81B5AD45FF39E540AC05F2B7E000B540E2E5EF8D22394
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-19_36e35f57405377475cc126923031740c_icedid

File Explorer

2026-10-19_36e35f57405377475cc126923031740c_icedid

.exe 8.6MB

2026-10-19_36e35f57405377475cc126923031740c_icedid

IMPHASH 923bdfaeefbab6fa43aca538ebe63b78
SHA256 cab3351599cd84fa5b60eebdd87e1f71a0e16f8e364f7f192395fce61e3b1f39
MD5 36e35f57405377475cc126923031740c
SHA1 8c6664de026227a04fc87c5feb6782e8f16e0331
SHA512 78ce4305b7bd275ffa28a3533f78ec6b8852d00aa5bcd64aed073e684370a47e3e24ba4befa76e8cef5a067c642e38b640d6c514a2cbf2bff5c31d6b458c1cf4
SSDEEP 196608:+Hs+bUI5CdUnaKEfGmB1gtaiHN8GQ4fTBVR1xikpdoog:mUwoUnlsB1ji2PwTBVR1xZXx
TLSH
T1B396339627B26390D5F7B2B6B81B5AD45FF39E540AC05F2B7E000B540E2E5EF8D22394
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6704

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetEnvironmentVariableA CreateDirectoryA CreateFileA DeleteFileA WriteFile GetTempPathA CloseHandle QueryPerformanceCounter Sleep CreateProcessA InitializeProcThreadAttributeList DeleteProcThreadAttributeList UpdateProcThreadAttribute OpenProcess GetTickCount FreeLibrary GetProcAddress LoadLibraryA LocalAlloc LocalFree lstrcmpiA lstrcpyA lstrcatA CreateToolhelp32Snapshot Process32First Process32Next WriteConsoleW CreateFileW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx

user32

wsprintfA

Name

.text

Size

54KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

8.5MB

Virtual Size

8.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-19_36e35f57405377475cc126923031740c_icedid

kernel32

user32

generic