2026-10-26_4ed2285b0096eb64609561efb5921895_icedid_njrat_ryuk

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-26_4ed2285b0096eb64609561efb5921895_icedid_njrat_ryuk
Size 7.6MB
Sample261027-wd7kvaeb76
SHA256 9f18cd97d12598c6ab69ba5ed09b41b79772e9a835066590c0f621771cdff792
MD5 4ed2285b0096eb64609561efb5921895
SHA1 4964e65f351c5dee7cf9d92cf72e5ce859bf0137
SHA512 f99b5add20d140e1fa9fa1ec6ad053f40b6629f6dba1cd6ea2a59ad862b5f57584c2b29bd8b776bd862bb4a12850f30c1b804c1354504c7b84e732b9323365da
SSDEEP 98304:eWQnx8xGvODPRwPmCb1dWtF9tD1EpnPq0SE4hXbHoBeCPBOpnSBv:eWQnx+DCf1dWtF9txEpnylPD+eCE
TLSH
T17D86F115D51101C9EC76D1319EB465B2BA603EA6C720FBBF95ECFB7526321F6283A302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detects executables packed with Enigma 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_Enigma

Detects executables packed with Themida 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_Themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-26_4ed2285b0096eb64609561efb5921895_icedid_njrat_ryuk

File Explorer

2026-10-26_4ed2285b0096eb64609561efb5921895_icedid_njrat_ryuk

.exe 7.6MB

2026-10-26_4ed2285b0096eb64609561efb5921895_icedid_njrat_ryuk

IMPHASH 92d0612cd9da28f5b038463fb4e618d9
SHA256 9f18cd97d12598c6ab69ba5ed09b41b79772e9a835066590c0f621771cdff792
MD5 4ed2285b0096eb64609561efb5921895
SHA1 4964e65f351c5dee7cf9d92cf72e5ce859bf0137
SHA512 f99b5add20d140e1fa9fa1ec6ad053f40b6629f6dba1cd6ea2a59ad862b5f57584c2b29bd8b776bd862bb4a12850f30c1b804c1354504c7b84e732b9323365da
SSDEEP 98304:eWQnx8xGvODPRwPmCb1dWtF9tD1EpnPq0SE4hXbHoBeCPBOpnSBv:eWQnx+DCf1dWtF9txEpnylPD+eCE
TLSH
T17D86F115D51101C9EC76D1319EB465B2BA603EA6C720FBBF95ECFB7526321F6283A302
MD5 SHA1 SHA512 SSDEEP TLSH

Detects executables packed with Enigma
Detects executables packed with Themida
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9412608

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

AcMountManagerInternal BufferAttachHeapInternal BufferBeginManagerBuffered BufferBeginPhaseReal BufferBeginSealInline BufferBeginSealProxy BufferBeginSwitchInternal BufferCloneCycleEx BufferCloneCycleProxy BufferCloneHandlerReal BufferCloneHeapBuffered BufferCloneHeapInline BufferCloneManagerBuffered BufferCloneManagerInternal BufferCloneSealProxy BufferCloneTrackReal BufferConnectControlBuffered BufferConnectSealInternal BufferConnectShaderReal BufferConnectSwitchProxy BufferInitArrayProxy BufferInitFlagEx BufferInitReferenceBuffered BufferIterateArrayBuffered BufferIterateManagerBuffered BufferIterateParcelReal BufferIterateSwitchBuffered BufferMountPhaseInline BufferPrepareControlReal BufferPrepareReferenceInline BufferPrepareSealProxy BufferPrepareShaderInline BufferRollbackHeapInline BufferRollbackManagerBuffered BufferRollbackManagerExclusive BufferRollbackManagerInternal BufferRollbackParcelEx BufferRollbackWaveExclusive BufferSignParcelInline BufferSignShaderBuffered BufferSignWaveBuffered BufferStartTrackInline BufferTerminateHandlerReal BufferTerminateReferenceExclusive BufferTerminateSwitchDynamic ContextAttachArrayDynamic ContextAttachHeapInline ContextAttachParcelProxy ContextBeginControlDynamic ContextBeginParcelDynamic ContextBeginReferenceEx ContextCloneArrayProxy ContextCloneParcelEx ContextConnectArrayInternal ContextConnectGraphEx ContextConnectGraphInternal ContextConnectPulseExclusive ContextConnectTrackBuffered ContextInitControlProxy ContextInitFlagEx ContextInitParcelExclusive ContextIterateHandlerReal ContextIterateWaveProxy ContextMountDeviceInternal ContextMountParcelExclusive ContextPrepareControlProxy ContextRollbackControlInternal ContextRollbackHeapInline ContextRollbackParcelBuffered ContextRollbackPhaseDynamic ContextRollbackQueueProxy ContextRollbackReferenceInternal ContextSignCycleDynamic ContextStartCycleInline ContextStartParcelBuffered ContextTerminateDeviceInternal ContextTerminateFlagBuffered ContextTerminateHeapInternal CryptoAttachControlEx CryptoAttachGraphBuffered CryptoBeginCycleInternal CryptoBeginParcelBuffered CryptoBeginPhaseReal CryptoBeginReferenceExclusive CryptoCloneArrayEx CryptoCloneCycleExclusive CryptoCloneManagerExclusive CryptoCloneQueueEx CryptoConnectPulseEx CryptoConnectSealBuffered CryptoInitCycleDynamic CryptoInitHandlerProxy CryptoInitPulseExclusive CryptoInitReferenceExclusive CryptoIterateTrackEx CryptoMountHeapBuffered CryptoMountSealEx CryptoMountTrackEx CryptoPrepareHandlerProxy CryptoPrepareHeapInline CryptoPrepareParcelInternal CryptoPreparePhaseReal CryptoPreparePulseInternal CryptoRollbackHeapReal CryptoRollbackSealEx CryptoRollbackSealReal CryptoRollbackTrackInline CryptoSignArrayExclusive CryptoSignShaderBuffered CryptoStartFlagInternal CryptoTerminateParcelDynamic CryptoTerminatePhaseExclusive CryptoTerminateTrackInternal CryptoTerminateWaveProxy EncodeAttachGraphDynamic EncodeAttachHeapReal EncodeAttachParcelEx EncodeAttachSealInternal EncodeAttachWaveInternal EncodeBeginSwitchInline EncodeCloneArrayReal EncodeCloneShaderProxy EncodeConnectArrayBuffered EncodeConnectDeviceDynamic EncodeConnectHandlerDynamic EncodeConnectQueueBuffered EncodeConnectReferenceReal EncodeInitFlagBuffered EncodeInitQueueEx EncodeIterateArrayInternal EncodeIterateArrayReal EncodeIterateCycleDynamic EncodeIterateFlagExclusive EncodeIterateQueueProxy EncodeMountParcelProxy EncodeMountTrackEx EncodeMountWaveBuffered EncodeMountWaveDynamic EncodeMountWaveEx EncodePrepareFlagInline EncodePrepareGraphInternal EncodePrepareQueueInternal EncodePrepareWaveDynamic EncodeRollbackControlExclusive EncodeRollbackParcelInternal EncodeRollbackReferenceDynamic EncodeRollbackWaveEx EncodeSignControlBuffered EncodeSignDeviceReal EncodeSignWaveEx EncodeStartArrayDynamic EncodeStartFlagDynamic EncodeStartPhaseInternal EncodeStartReferenceExclusive EncodeTerminateGraphEx EncodeTerminatePulseBuffered EncodeTerminateSealBuffered EtwAttachHandlerBuffered EtwCloneShaderReal EtwMountArrayDynamic EtwRollbackHandlerDynamic EtwSignHandlerBuffered EventAttachGraphProxy EventAttachManagerDynamic EventAttachParcelProxy EventAttachSealBuffered EventAttachTrackInline EventBeginCycleInline EventBeginFlagEx EventBeginHeapProxy EventBeginManagerProxy EventBeginPhaseReal EventCloneGraphBuffered EventClonePulseInternal EventCloneWaveInline EventConnectManagerBuffered EventInitDeviceExclusive EventInitFlagEx EventIterateArrayEx EventIterateSwitchInternal EventMountHandlerDynamic EventMountManagerEx EventPrepareGraphBuffered EventPrepareParcelInternal EventPreparePulseInline EventPrepareTrackInline EventRollbackArrayInline EventRollbackCycleDynamic EventRollbackHeapBuffered EventRollbackManagerBuffered EventRollbackManagerDynamic EventRollbackWaveInline EventSignDeviceDynamic EventSignParcelReal EventSignPulseDynamic EventSignQueueReal EventStartCycleProxy EventStartDeviceEx EventStartDeviceReal EventStartGraphProxy EventStartParcelInline EventStartSealProxy EventTerminateHandlerInternal EventTerminateHeapInline EventTerminateParcelDynamic EventTerminatePulseInline FileAttachHandlerBuffered FileAttachHeapInternal FileAttachHeapProxy FileAttachSealExclusive FileAttachTrackProxy FileBeginDeviceExclusive FileBeginFlagReal FileBeginGraphEx FileCloneControlReal FileCloneReferenceExclusive FileCloneShaderInternal FileConnectGraphExclusive FileConnectHandlerDynamic FileConnectParcelProxy FileConnectPulseReal FileConnectQueueBuffered FileConnectReferenceDynamic FileConnectWaveProxy FileInitControlBuffered FileInitPhaseInline FileInitShaderBuffered FileInitSwitchEx FileIterateArrayExclusive FileIterateArrayInternal FileIterateFlagInline FileIterateManagerBuffered FileIterateParcelReal FileMountManagerInline FilePrepareQueueInline FilePrepareReferenceExclusive FilePrepareSealProxy FilePrepareTrackExclusive FileRollbackGraphExclusive FileRollbackHeapDynamic FileRollbackPulseProxy FileSignControlInline FileSignGraphReal FileSignParcelInline FileSignPulseReal FileSignShaderEx FileStartGraphEx FileStartQueueProxy FileStartReferenceExclusive FileStartSealProxy FileTerminateFlagExclusive FileTerminatePhaseExclusive HostAttachHandlerReal HostAttachHeapReal HostAttachPhaseDynamic HostBeginFlagExclusive HostBeginFlagInternal HostBeginHandlerInline HostBeginPhaseEx HostCloneManagerDynamic HostClonePhaseDynamic HostClonePulseDynamic HostConnectControlDynamic HostConnectPulseBuffered HostConnectQueueExclusive HostInitPhaseDynamic HostInitQueueBuffered HostIterateDeviceEx HostIterateWaveDynamic HostMountManagerInline HostMountManagerInternal HostMountPulseBuffered HostMountPulseProxy HostPrepareHandlerProxy HostPreparePhaseEx HostPreparePulseReal HostPrepareShaderDynamic HostPrepareSwitchInternal HostPrepareWaveProxy HostRollbackControlReal HostRollbackPhaseProxy HostRollbackTrackInline HostSignArrayExclusive HostSignDeviceBuffered HostSignFlagBuffered HostSignParcelDynamic HostStartControlEx HostStartHandlerProxy HostStartParcelEx HostTerminateArrayExclusive HostTerminateDeviceEx HostTerminateHeapBuffered HostTerminateHeapInline HostTerminateParcelBuffered HostTerminatePulseEx IoCloneFlagBuffered IoCloneSwitchReal IoConnectArrayInline IoConnectParcelExclusive IoMountArrayInternal IoRollbackPhaseProxy IoSignReferenceEx IoStartHandlerEx IoStartManagerEx IoStartPhaseProxy IpcAttachControlInline IpcAttachControlInternal IpcAttachManagerInternal IpcAttachPhaseDynamic IpcAttachPhaseReal IpcAttachReferenceBuffered IpcAttachReferenceProxy IpcBeginControlProxy IpcBeginHeapBuffered IpcBeginQueueReal IpcCloneArrayProxy IpcCloneFlagBuffered IpcCloneParcelDynamic IpcClonePhaseBuffered IpcCloneQueueProxy IpcCloneTrackProxy IpcCloneWaveEx IpcCloneWaveProxy IpcConnectDeviceExclusive IpcConnectGraphEx IpcConnectHandlerExclusive IpcConnectSwitchInline IpcInitGraphExclusive IpcInitPhaseExclusive IpcInitQueueProxy IpcInitSwitchExclusive IpcIterateCycleBuffered IpcIterateHandlerDynamic IpcIterateHandlerReal IpcIterateSwitchReal IpcMountArrayEx IpcMountGraphEx IpcMountParcelEx IpcMountPulseProxy IpcPrepareArrayInline IpcPrepareDeviceExclusive IpcPrepareHandlerInline IpcPrepareHandlerProxy IpcPrepareHeapReal IpcPreparePhaseProxy IpcRollbackControlInternal IpcRollbackPhaseDynamic IpcRollbackSealProxy IpcSignHeapEx IpcSignParcelDynamic IpcStartControlProxy IpcStartDeviceBuffered IpcStartDeviceExclusive IpcStartSwitchExclusive IpcStartTrackEx IpcStartWaveInline IpcTerminateFlagReal IpcTerminateManagerInline IpcTerminateWaveInternal KeyBeginHeapExclusive KeyBeginSwitchBuffered KeyCloneDeviceReal KeyCloneHeapEx KeyClonePulseEx KeyCloneReferenceProxy KeyConnectArrayInline KeyInitCycleInline KeyInitManagerBuffered KeyInitPulseExclusive KeyInitQueueInternal KeyInitReferenceBuffered KeyIterateControlExclusive KeyIterateCycleEx KeyIterateFlagBuffered KeyIteratePhaseDynamic KeyIterateSealReal KeyIterateShaderInline KeyMountArrayDynamic KeyMountControlInline KeyMountCycleEx KeyMountHeapReal KeyPrepareArrayBuffered KeyPrepareManagerInternal KeyPreparePulseExclusive KeyPrepareSwitchDynamic KeyPrepareSwitchInternal KeyRollbackCycleEx KeyRollbackGraphReal KeyRollbackPhaseExclusive KeyRollbackShaderDynamic KeySignParcelDynamic KeySignParcelInline KeySignSwitchBuffered KeyStartDeviceDynamic KeyStartQueueProxy KeyTerminateDeviceBuffered KeyTerminateTrackReal MapAttachManagerInternal MapAttachParcelDynamic MapAttachParcelExclusive MapAttachReferenceEx MapBeginHandlerDynamic MapBeginHeapEx MapCloneArrayExclusive MapCloneDeviceBuffered MapCloneDeviceInternal MapCloneFlagEx MapCloneHeapDynamic MapCloneSwitchInline MapConnectControlBuffered MapConnectSealExclusive MapInitArrayExclusive MapInitHeapExclusive MapInitWaveEx MapIterateQueueInternal MapIterateSealExclusive MapMountHandlerBuffered MapMountTrackBuffered MapPrepareControlEx MapPrepareFlagInternal MapPrepareShaderDynamic MapPrepareShaderProxy MapRollbackGraphDynamic MapRollbackShaderExclusive MapSignArrayBuffered MapSignCycleProxy MapSignFlagExclusive MapSignParcelBuffered MapSignTrackEx MapStartParcelInternal MapStartReferenceProxy MapStartTrackEx MapTerminateHandlerReal MapTerminatePhaseExclusive MapTerminateSwitchBuffered MmConnectControlInline MmConnectTrackExclusive MmInitSwitchBuffered MmMountArrayInline NativeAttachCycleBuffered NativeAttachWaveProxy NativeBeginControlInternal NativeBeginFlagProxy NativeBeginHeapReal NativeBeginManagerEx NativeBeginPhaseBuffered NativeBeginQueueEx NativeBeginReferenceBuffered NativeBeginShaderDynamic NativeCloneDeviceInline NativeCloneHeapInternal NativeCloneManagerInline NativeCloneReferenceBuffered NativeCloneReferenceEx NativeCloneShaderInternal NativeCloneWaveProxy NativeConnectGraphExclusive NativeConnectReferenceReal NativeInitArrayBuffered NativeInitSealExclusive NativeIterateFlagEx NativeIterateHandlerEx NativeIterateManagerProxy NativeIterateReferenceEx NativeMountCycleEx NativeMountManagerExclusive NativeMountWaveReal NativePrepareArrayDynamic NativePrepareControlBuffered NativePrepareControlExclusive NativePrepareGraphReal NativePrepareSwitchBuffered NativePrepareWaveBuffered NativeRollbackFlagDynamic NativeRollbackHandlerInternal NativeRollbackManagerReal NativeRollbackParcelReal NativeRollbackSwitchExclusive NativeSignHandlerBuffered NativeSignQueueInternal NativeStartSwitchBuffered NativeStartWaveBuffered NativeTerminateFlagInline NativeTerminateHeapEx NativeTerminateHeapExclusive ProcessAttachCycleInternal ProcessAttachFlagProxy ProcessAttachSwitchBuffered ProcessAttachTrackProxy ProcessBeginSwitchInternal ProcessCloneCycleBuffered ProcessCloneFlagReal ProcessCloneManagerEx ProcessCloneTrackDynamic ProcessCloneTrackExclusive ProcessConnectArrayInline ProcessConnectGraphBuffered ProcessConnectReferenceInternal ProcessConnectSwitchExclusive ProcessInitArrayDynamic ProcessInitCycleEx ProcessInitDeviceReal ProcessInitFlagProxy ProcessInitGraphBuffered ProcessIterateGraphProxy ProcessIterateQueueProxy ProcessIterateTrackBuffered ProcessMountCycleDynamic ProcessMountHandlerProxy ProcessMountSwitchBuffered ProcessPrepareHandlerInline ProcessPreparePhaseEx ProcessRollbackArrayReal ProcessRollbackControlInternal ProcessRollbackHandlerEx ProcessRollbackShaderBuffered ProcessSignArrayInternal ProcessSignDeviceExclusive ProcessSignParcelBuffered ProcessSignPhaseExclusive ProcessSignPhaseProxy ProcessSignTrackReal ProcessTerminateHeapInline ProcessTerminatePulseProxy ProxyAttachArrayDynamic ProxyAttachPhaseDynamic ProxyAttachTrackInternal ProxyBeginManagerInternal ProxyBeginManagerProxy ProxyCloneArrayDynamic ProxyCloneFlagBuffered ProxyInitHeapInline ProxyInitQueueExclusive ProxyIterateControlEx ProxyIterateDeviceInternal ProxyIterateGraphProxy ProxyIterateQueueInline ProxyIterateSwitchBuffered ProxyMountReferenceProxy ProxyMountSwitchBuffered ProxyPrepareCycleBuffered ProxyPrepareGraphInternal ProxyPrepareHeapProxy ProxyPreparePulseExclusive ProxyPrepareShaderBuffered ProxyPrepareSwitchInline ProxyPrepareTrackInline ProxyRollbackArrayInline ProxyRollbackHeapExclusive ProxyRollbackSealInline ProxySignControlEx ProxySignFlagEx ProxySignPulseReal ProxySignReferenceExclusive ProxyStartCycleExclusive ProxyStartParcelDynamic ProxyStartSwitchProxy ProxyTerminateCycleReal ProxyTerminateHandlerEx ProxyTerminateShaderDynamic SeAttachQueueExclusive SeBeginCycleReal SeInitTrackInline SeMountControlEx SeRollbackPhaseInline SeSignHeapBuffered StateAttachControlBuffered StateAttachHeapReal StateAttachReferenceExclusive StateBeginArrayProxy StateBeginGraphDynamic StateBeginManagerReal StateBeginQueueDynamic StateCloneDeviceReal StateClonePulseProxy StateConnectControlDynamic StateConnectParcelExclusive StateInitSwitchReal StateIterateParcelEx StateIteratePulseBuffered StateMountGraphProxy StateMountSwitchInternal StatePrepareArrayEx StatePrepareArrayReal StatePrepareControlEx StatePrepareFlagExclusive StatePrepareHandlerBuffered StatePrepareParcelEx StatePreparePhaseProxy StatePrepareReferenceInline StateRollbackControlReal StateRollbackQueueBuffered StateSignPulseBuffered StateSignReferenceInline StateSignReferenceProxy StateSignSwitchDynamic StateStartCycleInternal StateStartPhaseExclusive StateStartPhaseReal StateStartPulseProxy StateTerminateArrayProxy StateTerminateHandlerBuffered StateTerminateReferenceProxy SysAttachGraphInternal SysAttachWaveReal SysCloneCycleBuffered SysCloneManagerInternal SysCloneQueueDynamic SysConnectArrayExclusive SysConnectControlInternal SysConnectHeapInline SysConnectReferenceReal SysInitControlExclusive SysInitFlagInline SysInitQueueReal SysIterateReferenceDynamic SysMountCycleDynamic SysMountSwitchEx SysMountTrackInline SysPreparePhaseBuffered SysRollbackControlEx SysRollbackFlagDynamic SysRollbackQueueBuffered SysRollbackQueueReal SysRollbackSealBuffered SysRollbackSealDynamic SysRollbackSealReal SysRollbackWaveDynamic SysSignDeviceReal SysSignHeapReal SysSignPulseDynamic SysSignQueueEx SysStartControlInline SysStartHeapDynamic SysStartPulseEx SysStartTrackProxy ThreadAttachCycleExclusive ThreadAttachDeviceDynamic ThreadAttachGraphInternal ThreadAttachParcelReal ThreadAttachPulseProxy ThreadAttachSwitchDynamic ThreadAttachSwitchInternal ThreadBeginControlReal ThreadBeginManagerInline ThreadClonePulseEx ThreadConnectArrayProxy ThreadConnectHeapInternal ThreadInitHandlerInline ThreadInitQueueExclusive ThreadInitReferenceDynamic ThreadIterateControlInternal ThreadIterateCycleDynamic ThreadIterateDeviceExclusive ThreadIterateParcelProxy ThreadIteratePhaseExclusive ThreadMountSealDynamic ThreadPrepareCycleExclusive ThreadPreparePulseInternal ThreadPrepareReferenceProxy ThreadPrepareSealBuffered ThreadPrepareSealInternal ThreadPrepareWaveInternal ThreadRollbackArrayProxy ThreadRollbackManagerBuffered ThreadRollbackPhaseReal ThreadStartDeviceEx ThreadStartPhaseBuffered ThreadStartPhaseInternal ThreadStartQueueProxy ThreadStartShaderDynamic ThreadTerminateManagerInline ZoneAttachHandlerReal ZoneBeginParcelInline ZoneCloneCycleProxy ZoneCloneDeviceInline ZoneCloneParcelProxy ZoneClonePulseInline ZoneCloneTrackExclusive ZoneConnectCycleExclusive ZoneConnectPulseBuffered ZoneInitArrayBuffered ZoneInitControlExclusive ZoneInitDeviceInline ZoneInitManagerProxy ZoneInitReferenceInternal ZoneInitShaderInline ZoneIterateControlInline ZoneIterateManagerDynamic ZoneIteratePulseEx ZoneIterateQueueEx ZoneIterateQueueInline ZoneIterateWaveExclusive ZoneMountDeviceDynamic ZoneMountDeviceExclusive ZoneMountHeapProxy ZoneMountSealProxy ZonePrepareFlagProxy ZonePrepareParcelReal ZonePrepareSwitchInternal ZoneRollbackArrayInternal ZoneRollbackParcelInternal ZoneRollbackShaderProxy ZoneSignDeviceInternal ZoneSignFlagBuffered ZoneSignFlagInline ZoneSignHeapDynamic ZoneSignHeapInline ZoneSignPhaseInline ZoneSignPhaseReal ZoneSignReferenceProxy ZoneStartHeapInline ZoneTerminateArrayBuffered ZoneTerminateCycleDynamic ZoneTerminateFlagInternal

Name

.text

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

359KB

Virtual Size

360KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

62KB

Virtual Size

356KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

51KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.c2n

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.c2n

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.cpsci

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.cpsr90

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.k6r

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.q8w

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.q8wf

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.tls

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

194KB

Virtual Size

196KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text$go

Size

180KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data$rs

Size

223KB

Virtual Size

224KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text$go

Size

342KB

Virtual Size

344KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data$rs

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text$0b

Size

56KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text$9e

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data$z0

Size

19KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text$aa

Size

17KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data$1d

Size

13KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.varos

Size

24KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.shadowj

Size

10KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.enigma1

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mask6

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmc4

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmc6

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sec5

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.trapa

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.stubC

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mask8

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.crypt0

Size

11KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.stubE

Size

10KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.traph

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.altmap

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.stub9

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.patchI

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.enigma2

Size

10KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.dsstext

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.junkQ

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reshook

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.themida

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp9

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp2

Size

11KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.crypt8

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sec6

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fakehdr

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ghost

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.junkG

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp6

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.guardG

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.patchB

Size

11KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.shadowf

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.lzxd

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.guard8

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.shadowr

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.enigma5

Size

10KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mask9

Size

11KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data$ep

Size

2.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text$ce

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text$em

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.lzpa$sk

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text$bf

Size

1KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text$yn

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text$me

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text$6w

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text$qm

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text$2e

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.tls

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.arch

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

2026-10-26_4ed2285b0096eb64609561efb5921895_icedid_njrat_ryuk

shlwapi

shell32

ole32

version

advapi32

user32

generic