2024-01-10_b24625ce0a9caf12ff1879238fa12807_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-10_b24625ce0a9caf12ff1879238fa12807_icedid
Size

1.4MB
MD5

b24625ce0a9caf12ff1879238fa12807
SHA1

7009a1ecca2de6a289f3aae744ff7811d0e402f3
SHA256

3d3e40ded8eeb2d6fe3536ba931a04fbba11a5e0ea29f86af27ee23466837618
SHA512

f16c515d1a9c5dc65a6057a0500d6416f52f5b390ce7693580e9d5df7f2460ad10c0c480c58a2a8317b7ffd1783c53d951e241bd550e65926fe0e133bf62b251
SSDEEP

24576:gMge++vUNBoM9N1gH6U/eoECB9eYQBCBWw+zh+3jse988c:ooK9N1gHhzregBEAjsp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-10_b24625ce0a9caf12ff1879238fa12807_icedid

Files

2024-01-10_b24625ce0a9caf12ff1879238fa12807_icedid
.exe windows:4 windows x86 arch:x86

640cb9fb3616304bc89d7774e118208b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSFreeMemory
WTSLogoffSession
WTSVirtualChannelRead
WTSVirtualChannelOpen
WTSVirtualChannelWrite
WTSQuerySessionInformationA

kernel32

IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapReAlloc
RtlUnwind
RaiseException
ExpandEnvironmentStringsA
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GlobalFlags
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
GetFileTime
FileTimeToLocalFileTime
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetFullPathNameA
DuplicateHandle
GetCommandLineA
UnlockFile
LockFile
FlushFileBuffers
MoveFileA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
FreeResource
GetModuleFileNameW
GlobalFree
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetComputerNameA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
CloseHandle
MultiByteToWideChar
FormatMessageA
GetDiskFreeSpaceExA
WriteFile
CreateFileA
GetFileSize
ReadFile
FindClose
FindFirstFileA
CopyFileA
DeleteFileA
WideCharToMultiByte
GetModuleHandleA
GetVersionExA
GetCurrentThreadId
ProcessIdToSessionId
GetCurrentProcessId
GetSystemDefaultUILanguage
GetLocalTime
SetFilePointer
lstrcmpiA
FindNextFileA
GetCurrentProcess
GetLogicalDriveStringsA
GetDriveTypeA
InterlockedExchange
GetVersion
SetErrorMode
SetLastError
TerminateProcess
OpenProcess
GetStartupInfoA
SetStdHandle
GetFileType
CreateThread
ExitProcess
HeapSize
GetStdHandle
GetACP
LCMapStringA
LCMapStringW
VirtualFree
HeapDestroy
HeapCreate
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetVolumeInformationA
DeviceIoControl
Sleep
CreateProcessA
SetFileAttributesA
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
SystemTimeToTzSpecificLocalTime
GetFileAttributesA
GlobalAlloc
GetComputerNameW
GlobalLock
GlobalUnlock
GetWindowsDirectoryA
SetCurrentDirectoryA
CreateSemaphoreA
GetSystemDirectoryA
FileTimeToSystemTime
LocalAlloc
SetEndOfFile
LocalFree
VerLanguageNameA
InterlockedDecrement
GetProcessHeap
HeapAlloc
HeapFree
InitializeCriticalSection
WaitForSingleObject
SetSystemPowerState
OpenEventA
WTSGetActiveConsoleSessionId
GetDateFormatA
GetTimeFormatA
GetExitCodeThread
ExitThread
GetTickCount
GetLocaleInfoA
FindResourceA
LoadResource
LockResource
SizeofResource
MulDiv
EnterCriticalSection
LeaveCriticalSection
lstrlenA
CompareStringW
CompareStringA
CreateDirectoryA
GetThreadLocale

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA

activeds

ord9
ord3

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

netapi32

DsRoleGetPrimaryDomainInformation

mpr

WNetEnumResourceA
WNetOpenEnumA
WNetGetProviderNameA

shlwapi

StrFormatByteSize64A
StrStrIA
StrStrIW
SHDeleteKeyA
PathStripToRootA
PathFindFileNameA
PathIsUNCA
PathFindExtensionA

winmm

PlaySoundA

crypt32

CryptUnprotectData
CryptUnprotectMemory
CryptProtectMemory
CryptProtectData

user32

SetWindowContextHelpId
MapDialogRect
InvalidateRgn
SetRect
CopyAcceleratorTableA
InflateRect
GetMessageA
TranslateMessage
ValidateRect
ReleaseCapture
SetCapture
IsRectEmpty
InvalidateRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
FillRect
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetNextDlgGroupItem
MessageBeep
CharNextA
ShowOwnedPopups
EnableMenuItem
GetMenuItemInfoA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetMenu
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
DestroyMenu
GetSysColorBrush
UnregisterClassA
TranslateAcceleratorA
SetMenu
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
ReuseDDElParam
UnpackDDElParam
PostThreadMessageA
CheckMenuItem
LoadStringA
SetCursor
LoadCursorA
GetDlgItem
EnableWindow
ShowWindow
SendMessageA
SetWindowLongA
CreateWindowExA
LoadStringW
GetSystemMetrics
SetWindowPos
BringWindowToTop
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
SetTimer
KillTimer
GetWindowRect
GetWindowLongA
FindWindowExA
CloseDesktop
GetUserObjectInformationA
OpenInputDesktop
WaitForInputIdle
GetDlgCtrlID
CallWindowProcA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetNextDlgTabItem
GetLastActivePopup
IsWindowEnabled
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
RegisterClipboardFormatA
LoadMenuA
GetSubMenu
DrawFocusRect
CopyRect
CopyIcon
DestroyCursor
GetActiveWindow
PtInRect
IsIconic
DrawIcon
RegisterClassExA
DefWindowProcA
MoveWindow
GetLastInputInfo
GetClientRect
CharUpperA
MessageBoxA
GetDC
IsWindowVisible
CharUpperBuffA
UpdateWindow
keybd_event
RedrawWindow
LoadIconA
SetWindowTextA
GetKeyboardLayout
SetDlgItemTextA
LoadImageA
GetWindowTextLengthA
wsprintfA
ReleaseDC
SetClassLongA
OffsetRect
SendInput
MessageBoxW
PostQuitMessage
GetSysColor
DrawTextA
ExitWindowsEx
LockWorkStation
LoadBitmapA
DialogBoxParamA
EndDialog
IsWindow
PostMessageA
GetCursorPos
GetParent
SetWindowRgn
mouse_event
GetWindowTextA
FindWindowA
EnumWindows
SendMessageTimeoutA
LoadKeyboardLayoutA
VkKeyScanExA
MapVirtualKeyA
UnloadKeyboardLayout

gdi32

PtVisible
RectVisible
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreatePen
CreateSolidBrush
CreateEllipticRgn
LPtoDP
Ellipse
CreateRectRgnIndirect
GetMapMode
GetRgnBox
GetPixel
BitBlt
MoveToEx
LineTo
GetStockObject
CreateCompatibleDC
SelectObject
SetDIBColorTable
DeleteObject
GetObjectA
CreateDIBSection
CreateFontA
GetDeviceCaps
CreateFontIndirectA
CreateRoundRectRgn
GetBkColor
GetTextColor
GetTextMetricsA
TextOutA
SetTextJustification
GetTextExtentPoint32A
GetCharWidthA
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
SetBkMode
GetWindowExtEx
GetViewportExtEx
CreateCompatibleBitmap
SetMapMode
DeleteDC

comdlg32

GetOpenFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumKeyA
LookupAccountNameA
RegQueryValueA
CryptReleaseContext
CryptDecrypt
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
RegDeleteKeyA
LookupAccountSidA
RegOpenKeyA
AdjustTokenPrivileges
CryptAcquireContextA
CryptGenRandom
LsaOpenPolicy
LsaNtStatusToWinError
LsaQueryInformationPolicy
LsaFreeMemory
LsaClose
OpenProcessToken
GetTokenInformation
RegEnumValueA
GetUserNameA
RegQueryInfoKeyA
IsTextUnicode
LookupPrivilegeValueA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegSetKeySecurity
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
LogonUserW

shell32

SHBrowseForFolderA
SHGetFolderLocation
ShellExecuteA
SHGetPathFromIDListA
SHGetFolderPathA
DragQueryFileA
DragFinish
SHFileOperationA
ord680
SHParseDisplayName
SHOpenFolderAndSelectItems

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
CoDisconnectObject
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
CoInitialize
CoCreateInstance
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
StgCreateDocfileOnILockBytes

oleaut32

SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
VariantInit
SysFreeString
SysAllocString
SysReAllocStringLen
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreateVector
SysStringLen
VariantChangeType
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantClear
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
OleCreateFontIndirect
LoadTypeLi
SafeArrayUnaccessData

urlmon

URLDownloadToFileA

gdiplus

GdipDeleteGraphics
GdipDisposeImage
GdipFree
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCloneImage
GdipAlloc

Sections

.text
Size: 640KB - Virtual size: 639KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 596KB - Virtual size: 595KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

640cb9fb3616304bc89d7774e118208b

Headers

File Characteristics

Imports

wtsapi32

kernel32

setupapi

activeds

version

netapi32

mpr

shlwapi

winmm

crypt32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

oledlg

ole32

oleaut32

urlmon

gdiplus

Sections

.text Size: 640KB - Virtual size: 639KB

.rdata Size: 184KB - Virtual size: 181KB

.data Size: 24KB - Virtual size: 255KB

.rsrc Size: 596KB - Virtual size: 595KB

.text
Size: 640KB - Virtual size: 639KB

.rdata
Size: 184KB - Virtual size: 181KB

.data
Size: 24KB - Virtual size: 255KB

.rsrc
Size: 596KB - Virtual size: 595KB