What would cause Apache to display a bomb icon for a specific directory?
By default, the bomb icon is displayed for core dumps, and the default configuration assumes that any filename or directory name matching a regex like ^*core$ must be a core dump.
This option is controlled by the AddIcon directive of mod_autoindex which is also visible in the default extra/httpd-autoindex.conf file:
AddIcon /icons/bomb.gif core