2026-10-23_dcaa6f2e9cad8e4290e8e0255e395f90_icedid_njrat_vidar

General

Target
2026-10-23_dcaa6f2e9cad8e4290e8e0255e395f90_icedid_njrat_vidar
Size 1.4MB
Sample261023-hm885swzev
SHA256 8ce96e1cf5cb7e0aa0fa8e419b61ac2f1728d68029a764232d492a864b4031cf
MD5 dcaa6f2e9cad8e4290e8e0255e395f90
SHA1 3411e6c971c0fa4f9763f136dd2796ee1179b591
SHA512 2a3d9e0e76c45daccc3de6d4cb0851ce50e5d576106a9f41b9850017528a37ec1742f39b3edfd22b0f3b6a05d63cf5e830fa1a1d3eadfb955ad4e34021ffb605
SSDEEP 24576:N7ZJTd5vNs1sqjnhMgeiCl7G0nehbGZpbD:lTHkDmg27RnWGj
TLSH
T13C65F159B7A908F9EC73813C8952D54AF572BC520734CAAB13A1436B6F372E05D3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-23_dcaa6f2e9cad8e4290e8e0255e395f90_icedid_njrat_vidar

File Explorer

2026-10-23_dcaa6f2e9cad8e4290e8e0255e395f90_icedid_njrat_vidar

.exe 1.4MB

2026-10-23_dcaa6f2e9cad8e4290e8e0255e395f90_icedid_njrat_vidar

IMPHASH 51c363195eabe083b922582c511553fb
SHA256 8ce96e1cf5cb7e0aa0fa8e419b61ac2f1728d68029a764232d492a864b4031cf
MD5 dcaa6f2e9cad8e4290e8e0255e395f90
SHA1 3411e6c971c0fa4f9763f136dd2796ee1179b591
SHA512 2a3d9e0e76c45daccc3de6d4cb0851ce50e5d576106a9f41b9850017528a37ec1742f39b3edfd22b0f3b6a05d63cf5e830fa1a1d3eadfb955ad4e34021ffb605
SSDEEP 24576:N7ZJTd5vNs1sqjnhMgeiCl7G0nehbGZpbD:lTHkDmg27RnWGj
TLSH
T13C65F159B7A908F9EC73813C8952D54AF572BC520734CAAB13A1436B6F372E05D3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

49260

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\shaohuiKong\source\repos\test\x64\Release\gpu_detect64.pdb

dxgi

CreateDXGIFactory

kernel32

WriteConsoleW MultiByteToWideChar GetLastError WideCharToMultiByte GetStringTypeW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress EncodePointer DecodePointer LCMapStringW GetLocaleInfoW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException RtlUnwind FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapAlloc HeapFree GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileSizeEx SetFilePointerEx CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap HeapSize CreateFileW

Name

.text

Size

169KB

Virtual Size

168KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

89KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-23_dcaa6f2e9cad8e4290e8e0255e395f90_icedid_njrat_vidar

dxgi

kernel32

generic