2024-01-11_630c587df43f82631a235fbf00dbea8c_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-11_630c587df43f82631a235fbf00dbea8c_icedid
Size

420KB
MD5

630c587df43f82631a235fbf00dbea8c
SHA1

49884e3d9b63045ed02d37dfd8b8e1b51e2a8907
SHA256

b6ed691d68269a3a094282eef0045e6f0caea463962627ba01b66f55cdfa26d3
SHA512

fc322e31dd7fcc660aa6eae4e93d98897eb89e88b3d4696bef4b031f1a258365532f74daec52dc5edda0768aabca1fe4bfc841262d9ed5008873c364e8e7fbff
SSDEEP

6144:veGzTkF3mx7fYKDQgXVLtMRHD3oXPFzKSg074lliATYeHF/QHAZnvOJBRgjJBH:veGz+C7fYK8gXvPFzo0klliA/F2JBRgH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-11_630c587df43f82631a235fbf00dbea8c_icedid

Files

2024-01-11_630c587df43f82631a235fbf00dbea8c_icedid
.exe windows:4 windows x86 arch:x86

161e988c31851013155145dd3606dea4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

clgen

ioini_
io_grp_id
io_get_msg
io_set_chr
fcexist
io_load_file

dbghelp

MakeSureDirectoryPathExists

kernel32

LocalFree
FormatMessageA
CloseHandle
GlobalAddAtomA
GetVersionExA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GetModuleFileNameW
InterlockedDecrement
GetThreadLocale
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
MulDiv
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
CreateFileA
GlobalFlags
WritePrivateProfileStringA
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
FileTimeToSystemTime
GetCPInfo
GetOEMCP
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
SetErrorMode
GetTickCount
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
SetStdHandle
GetFileType
HeapSize
Sleep
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetCurrentProcessId
SetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalAlloc
FreeLibrary
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
LoadLibraryA
GetProcAddress
GetVersion
CompareStringA
RaiseException
InterlockedExchange
DeleteCriticalSection
CompareStringW
GetLastError
lstrlenW
LoadResource
MultiByteToWideChar
LockResource
lstrlenA
SizeofResource
WideCharToMultiByte
FindResourceA
SetEndOfFile

user32

RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
GetCapture
IsChild
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
DestroyMenu
GetSysColorBrush
LoadCursorA
SetCapture
ReleaseCapture
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
SetFocus
AdjustWindowRectEx
UnhookWindowsHookEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextA
TabbedTextOutA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
GetLastActivePopup
PostMessageA
PostQuitMessage
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
RegisterClassA
GetTopWindow
GetMessageTime
GetMessagePos
FillRect
InvalidateRect
MapWindowPoints
EqualRect
UnregisterClassA
CharUpperA
GetSystemMetrics
SendMessageA
IsIconic
GetSystemMenu
EnableWindow
LoadIconA
MessageBoxA
AppendMenuA
DrawIcon
GetDesktopWindow
GetClientRect
DrawTextExA

gdi32

ExtSelectClipRgn
DeleteDC
GetStockObject
ScaleViewportExtEx
GetDeviceCaps
CreatePen
CreateSolidBrush
SetMapMode
GetClipBox
LineTo
MoveToEx
ScaleWindowExtEx
SetWindowExtEx
GetObjectA
CreateFontIndirectA
AngleArc
CreateRectRgnIndirect
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
GetMapMode
GetBkColor
GetTextColor
GetRgnBox

advapi32

RegSetValueExA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA

shell32

SHGetSpecialFolderPathA

ole32

CLSIDFromString
CoTaskMemAlloc
OleIsCurrentClipboard
CoTaskMemFree
OleFlushClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromProgID
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject

oleaut32

SysStringLen
SafeArrayDestroy
VariantClear
VariantInit
SysFreeString
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocStringLen
SysAllocStringByteLen
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString

comctl32

InitCommonControlsEx

shlwapi

StrToIntA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oledlg

ord8

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

comdlg32

GetFileTitleA

Sections

.text
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

161e988c31851013155145dd3606dea4

Headers

File Characteristics

Imports

clgen

dbghelp

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

oledlg

oleacc

winspool.drv

comdlg32

Sections

.text Size: 304KB - Virtual size: 303KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 28KB - Virtual size: 24KB

.text
Size: 304KB - Virtual size: 303KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 28KB - Virtual size: 24KB