2024-01-09_cbb677df3febd7ebcceeb41b9e4d015e_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-09_cbb677df3febd7ebcceeb41b9e4d015e_icedid
Size

792KB
MD5

cbb677df3febd7ebcceeb41b9e4d015e
SHA1

ff866a4026d24a421f44d27599bf2f32a5421df8
SHA256

31cbbd7a6541fc6a0242eb20fafda1867fe91a0803985782d8fb2d97e9a1b1a5
SHA512

487cd2f69dec3a14d17405c801471cebe89ced973301c9a88f0c31c99c87c8535d60c08e1ec8c6d4274c4e60629e031c8f4902bcd5aaba47234aa6810c66800d
SSDEEP

12288:e9oViYeqSQ9MA8vf8BN+deuF6mlC19OyGwQYocIpxHh:e9o3SQCA8nEuVlE7JGp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-09_cbb677df3febd7ebcceeb41b9e4d015e_icedid

Files

2024-01-09_cbb677df3febd7ebcceeb41b9e4d015e_icedid
.exe windows:4 windows x86 arch:x86

a2cafe69a7611dd2613bdae83fbdec52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
RtlUnwind
HeapReAlloc
ExitThread
HeapSize
SetStdHandle
GetFileType
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetFileInformationByHandle
LocalFileTimeToFileTime
SetErrorMode
SystemTimeToFileTime
GetOEMCP
GetCPInfo
LocalReAlloc
GlobalHandle
GlobalReAlloc
GlobalFlags
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
SuspendThread
ReleaseMutex
CreateMutexA
GlobalAlloc
FormatMessageA
LocalFree
GetShortPathNameA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
lstrcpyA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GlobalFree
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
lstrcatA
lstrcmpW
lstrcpynA
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
SetLastError
GetExitCodeThread
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
GetSystemTime
GetThreadPriority
TlsGetValue
TlsFree
SetEvent
CloseHandle
TlsAlloc
TlsSetValue
GetCurrentThread
GetCurrentThreadId
CreateEventA
CreateThread
WaitForSingleObject
SetThreadPriority
Sleep
ResumeThread
GetModuleFileNameA
GetVersion
CompareStringA
lstrcmpiA
GetLastError
GetStringTypeExA
lstrlenW
MultiByteToWideChar
CompareStringW
RaiseException
lstrlenA
DeleteCriticalSection
InitializeCriticalSection
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
FindClose
CreateDirectoryA
FindFirstFileA
CopyFileA
GetDiskFreeSpaceExA
GetDriveTypeA
GetLogicalDriveStringsA
GetStdHandle
GetVersionExA
PeekNamedPipe

user32

MessageBeep
SetParent
RegisterClipboardFormatA
GetNextDlgGroupItem
IsDialogMessageA
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
RegisterWindowMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
RemovePropA
SendDlgItemMessageA
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
LoadIconA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
LockWindowUpdate
SetWindowPos
OffsetRect
IntersectRect
GetWindowPlacement
GetWindowRect
PtInRect
GetWindow
DestroyIcon
DestroyMenu
GetMenuItemInfoA
InflateRect
UnhookWindowsHookEx
GetSysColor
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
ReleaseDC
GetDC
CopyRect
GetDlgCtrlID
GetFocus
IsChild
GetParent
InvalidateRect
IsIconic
AdjustWindowRectEx
MsgWaitForMultipleObjects
GetMessageA
LoadBitmapA
GetDCEx
GetSysColorBrush
ShowOwnedPopups
PostQuitMessage
SetWindowRgn
SetWindowTextA
FindWindowA
KillTimer
SetTimer
UnionRect
IsRectEmpty
IsZoomed
PeekMessageA
DestroyWindow
CreateWindowExA
RegisterClassA
MessageBoxA
DefWindowProcA
PostThreadMessageA
GetPropA
UpdateWindow
SetForegroundWindow
ShowWindow
EnumWindows
CharUpperA
GetClientRect
DestroyCursor
SetCursorPos
MoveWindow
RedrawWindow
WaitMessage
SetPropA
GetSystemMetrics
UnregisterClassA
EnableWindow
PostMessageA
ClientToScreen
AppendMenuA
CreatePopupMenu
ScreenToClient
GetMessagePos
GetWindowLongA
SetWindowLongA
SendMessageA
SetWindowContextHelpId
MapDialogRect
CharNextA
InvalidateRgn
SystemParametersInfoA
CopyAcceleratorTableA
LoadCursorA
WindowFromPoint
SetCapture
LoadMenuA
UnpackDDElParam
ReuseDDElParam
SetCursor
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
SetRect
TranslateMessage
GetCursorPos
ValidateRect
wsprintfA
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
IsWindowEnabled
CallWindowProcA
DrawIcon

gdi32

BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateBitmap
CreateCompatibleDC
GetStockObject
GetWindowExtEx
GetDeviceCaps
CreateSolidBrush
CreateFontIndirectA
GetTextExtentPoint32A
CreateDCA
CreateCompatibleBitmap
GetTextMetricsA
StretchDIBits
GetCharWidthA
CreateFontA
GetBkColor
CreateEllipticRgn
LPtoDP
Ellipse
SetRectRgn
CombineRgn
GetMapMode
GetRgnBox
GetTextColor
GetViewportExtEx
GetObjectA
CreateRectRgn
SelectClipRgn
DeleteObject
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateRectRgnIndirect
PatBlt

comdlg32

CommDlgExtendedError
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

GetFileSecurityA
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA
RegDeleteValueA
RegEnumKeyA
RegCreateKeyA
RegCloseKey
SetFileSecurityA
RegQueryValueA

shell32

DragQueryFileA
ExtractIconA
SHGetFileInfoA
ShellExecuteA
DragFinish

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Create
ord17
ImageList_Draw
ImageList_GetImageInfo

shlwapi

PathRemoveExtensionA
PathFindExtensionA
PathIsUNCA
PathStripToRootA
PathFindFileNameA

oledlg

ord8

ole32

CoRevokeClassObject
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SafeArrayDestroy
OleCreateFontIndirect
SystemTimeToVariantTime
SysAllocString

ws2_32

htonl
socket
gethostbyname
connect
WSAAsyncSelect
WSASetLastError
inet_addr
inet_ntoa
bind
WSAGetLastError
accept
closesocket
getsockname
ntohs
ntohl
recvfrom
recv
sendto
send
WSACleanup
WSAStartup
listen
setsockopt
select
ioctlsocket
htons

wininet

HttpAddRequestHeadersA
InternetQueryDataAvailable
InternetSetOptionExA
InternetCloseHandle
InternetGetLastResponseInfoA
HttpOpenRequestA
InternetConnectA
HttpSendRequestA
InternetReadFile
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
HttpQueryInfoA

winmm

waveOutClose
waveOutReset
waveOutRestart
waveOutUnprepareHeader
waveOutGetDevCapsA
waveOutGetNumDevs
waveOutSetPlaybackRate
waveOutGetVolume
waveOutPrepareHeader
waveOutWrite
mixerGetControlDetailsA
waveOutPause
waveOutSetVolume
mixerSetControlDetails
mixerOpen
mixerGetDevCapsA
mixerClose
mixerGetLineInfoA
mixerGetLineControlsA
waveOutOpen

Sections

.text
Size: 404KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2cafe69a7611dd2613bdae83fbdec52

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

winmm

Sections

.text Size: 404KB - Virtual size: 402KB

.rdata Size: 172KB - Virtual size: 168KB

.data Size: 16KB - Virtual size: 29KB

.rsrc Size: 196KB - Virtual size: 195KB

.text
Size: 404KB - Virtual size: 402KB

.rdata
Size: 172KB - Virtual size: 168KB

.data
Size: 16KB - Virtual size: 29KB

.rsrc
Size: 196KB - Virtual size: 195KB