2026-11-12_078ee58915031793ccd618912999d62a_icedid_vidar

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-12_078ee58915031793ccd618912999d62a_icedid_vidar
Size 1.3MB
Sample261113-ktedfssx2m
SHA256 39d788d2aa99d92c760676c811e7f3c3a68b6b635f8d041d02ca7e42c426b532
MD5 078ee58915031793ccd618912999d62a
SHA1 53e444df9ea7df23cdaf004173c3acfbaabb897a
SHA512 fb74496fb99ee226c5b812a5fa9ba75b21fe540bcb33fe868ba8ce33bf1ac9ca1573573bef5e7041a76fe92685534f70f3165eaab3d592ab6d8c68780f7baefa
SSDEEP 24576:tHicSA26AsqjnhMgeiCl7G0nehbGZpbD:tHiVHzDmg27RnWGj
TLSH
T10755026EB2E910E9E1735039C9A1D909F633786107308A7F03A547BADF776904E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-12_078ee58915031793ccd618912999d62a_icedid_vidar

File Explorer

2026-11-12_078ee58915031793ccd618912999d62a_icedid_vidar

.exe 1.3MB

2026-11-12_078ee58915031793ccd618912999d62a_icedid_vidar

IMPHASH d74711117926348c7ae5ec226f6177d7
SHA256 39d788d2aa99d92c760676c811e7f3c3a68b6b635f8d041d02ca7e42c426b532
MD5 078ee58915031793ccd618912999d62a
SHA1 53e444df9ea7df23cdaf004173c3acfbaabb897a
SHA512 fb74496fb99ee226c5b812a5fa9ba75b21fe540bcb33fe868ba8ce33bf1ac9ca1573573bef5e7041a76fe92685534f70f3165eaab3d592ab6d8c68780f7baefa
SSDEEP 24576:tHicSA26AsqjnhMgeiCl7G0nehbGZpbD:tHiVHzDmg27RnWGj
TLSH
T10755026EB2E910E9E1735039C9A1D909F633786107308A7F03A547BADF776904E3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21464

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

GoogleUpdateComRegisterShell64_unsigned.pdb

advapi32

RegCloseKey RegOverridePredefKey RegOpenKeyExW

kernel32

RtlPcToFileHeader GetModuleHandleExW GetFileType FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle SetFilePointerEx GetConsoleOutputCP GetConsoleMode WriteConsoleW FindResourceW SizeofResource LockResource LoadResource GetProcAddress GetModuleHandleW FindResourceExW DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError RaiseException DecodePointer GetCommandLineW GetCPInfo RtlUnwindEx GetModuleFileNameW CloseHandle GetCurrentProcessId VirtualQuery LocalFree SetLastError FindNextFileW GetCurrentProcess GetEnvironmentVariableW FindClose LoadLibraryW FreeLibrary lstrcmpiW GetTickCount LoadLibraryExW TerminateProcess Sleep WaitForSingleObjectEx lstrlenW MultiByteToWideChar WideCharToMultiByte WriteFile CreateFileW GetFileAttributesExW GetSystemTimeAsFileTime FlushFileBuffers GetPrivateProfileIntW OutputDebugStringA GetCurrentThreadId GetPrivateProfileStringW OutputDebugStringW TryEnterCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSection CreateEventW SetEvent ResetEvent ExitProcess IsDebuggerPresent GetStdHandle GlobalAlloc GlobalFree GlobalLock GlobalUnlock RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent QueryPerformanceCounter InitializeSListHead GetStartupInfoW TlsAlloc TlsGetValue TlsSetValue TlsFree EncodePointer LCMapStringW GetStringTypeW

user32

MessageBoxW SetClipboardData EmptyClipboard CloseClipboard OpenClipboard wsprintfW CharLowerBuffW

shlwapi

PathAppendW PathRemoveFileSpecW PathRemoveExtensionW PathStripPathW

shell32

CommandLineToArgvW

Name

.text

Size

84KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gehcont

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1.2MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-12_078ee58915031793ccd618912999d62a_icedid_vidar

advapi32

kernel32

user32

shlwapi

shell32

generic