2026-11-05_98cc318b4a7ef056714b80827ac86031_icedid

General

Target
2026-11-05_98cc318b4a7ef056714b80827ac86031_icedid
Size 10.5MB
Sample261106-sne2sszzav
SHA256 c75135589b49ee21ad509b308893c9eaa76ed00d38319e177a465a40584c0a6d
MD5 98cc318b4a7ef056714b80827ac86031
SHA1 52812cc08de202f44ac17675e61c6ab490ac9a0d
SHA512 e69855638ea693530978aa54e32128505c13d5c0aae4f538471567c729b70a49f2a271c733703a363b0f70e4214acf791690c47dc4cff88a3b64ec626df27977
SSDEEP 196608:4kLfezwvntMppVr7cQJrOEPhOMTE7nAPWDQ8uNPQx+I52/f+RFTk+UP6tCob4O6q:WSMxrZKEPExwWbEQgI52/feUP6UoM
TLSH
T17CB6332905AC59D3E4C3807E19602D40DAB73539BB7CA0CFBB80AD718FA65D98ECE751
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-05_98cc318b4a7ef056714b80827ac86031_icedid

File Explorer

2026-11-05_98cc318b4a7ef056714b80827ac86031_icedid

.exe 10.5MB

2026-11-05_98cc318b4a7ef056714b80827ac86031_icedid

IMPHASH 28222c23b878bbeafefaf0353d4ed650
SHA256 c75135589b49ee21ad509b308893c9eaa76ed00d38319e177a465a40584c0a6d
MD5 98cc318b4a7ef056714b80827ac86031
SHA1 52812cc08de202f44ac17675e61c6ab490ac9a0d
SHA512 e69855638ea693530978aa54e32128505c13d5c0aae4f538471567c729b70a49f2a271c733703a363b0f70e4214acf791690c47dc4cff88a3b64ec626df27977
SSDEEP 196608:4kLfezwvntMppVr7cQJrOEPhOMTE7nAPWDQ8uNPQx+I52/f+RFTk+UP6tCob4O6q:WSMxrZKEPExwWbEQgI52/feUP6UoM
TLSH
T17CB6332905AC59D3E4C3807E19602D40DAB73539BB7CA0CFBB80AD718FA65D98ECE751
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

98968

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCurrentProcess CheckRemoteDebuggerPresent IsDebuggerPresent CreateDirectoryA SetFileAttributesA CreateProcessA GetFileAttributesA CopyFileA GetEnvironmentVariableA GetTickCount GetCurrentProcessId LoadLibraryA ExitProcess VirtualFree VirtualAlloc GlobalMemoryStatusEx GetComputerNameA GetVolumeInformationA WaitForSingleObject GetNativeSystemInfo VirtualProtect FlushInstructionCache WriteConsoleW GetModuleHandleA GetProcAddress ReadFile Sleep GetModuleFileNameA WriteFile CreateFileA QueryPerformanceCounter CloseHandle GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle GetModuleFileNameW TerminateProcess GetModuleHandleExW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

advapi32

FreeSid RegCloseKey RegSetValueExA RegCreateKeyExA CheckTokenMembership AllocateAndInitializeSid

iphlpapi

GetAdaptersInfo

Name

.text

Size

144KB

Virtual Size

143KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

10.4MB

Virtual Size

10.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-05_98cc318b4a7ef056714b80827ac86031_icedid

kernel32

advapi32

iphlpapi

generic