2024-01-11_4bd0be7a669f86131117d18d6a0025ce_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-11_4bd0be7a669f86131117d18d6a0025ce_icedid
Size

2.3MB
MD5

4bd0be7a669f86131117d18d6a0025ce
SHA1

424bca39f5d21e82944c7bd363d295db65d55ad8
SHA256

d6cfe4281ed3d12266c78d0b5494613b2709b580442331aabb07708d3021f1c3
SHA512

abb95e1b91a9de52b9d0431b960d40c5b1a1c5044755e0c6f6801b08881d187ce21b61f88f8cf354e2f580e7494891e76e91820bf265b7b56e7eb4566d5fd661
SSDEEP

12288:8gHmMyJ6WC3iAF9jD1p+LXG2XSUThcwTZuSjeNw8CDxcASU:rHmH6RF9jDX+LxlASCNeFci

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-11_4bd0be7a669f86131117d18d6a0025ce_icedid

Files

2024-01-11_4bd0be7a669f86131117d18d6a0025ce_icedid
.exe windows:4 windows x86 arch:x86

0accb89605dd9d092c90c1adc290e14c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
GetTimeFormatA
GetDateFormatA
LCMapStringA
LCMapStringW
FreeEnvironmentStringsW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
GetFileType
InterlockedIncrement
SetStdHandle
HeapSize
ExitProcess
HeapReAlloc
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitThread
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
SetErrorMode
GetVersionExW
LocalFileTimeToFileTime
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
SystemTimeToFileTime
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileW
GetShortPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetStringTypeExW
DeleteFileW
MoveFileW
GetModuleHandleA
RaiseException
GetThreadLocale
GlobalGetAtomNameW
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetCurrentProcessId
GetModuleFileNameW
lstrcpynW
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
ResetEvent
SetEvent
ResumeThread
CreateEventW
GetTickCount
MulDiv
FreeResource
WaitForSingleObject
CreateThread
CreateDirectoryW
Sleep
ReleaseSemaphore
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
GetModuleHandleW
SetLastError
GetCurrentDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryW
CloseHandle
CreateSemaphoreW
WideCharToMultiByte
GetLastError
MultiByteToWideChar
lstrlenA
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedDecrement
FormatMessageW
lstrlenW
LocalAlloc
LocalFree
GetTimeZoneInformation

user32

GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
PostThreadMessageW
DeleteMenu
GetSysColorBrush
SetWindowRgn
DrawIcon
IsRectEmpty
FindWindowW
SystemParametersInfoW
GetMenuItemInfoW
SetCursorPos
RedrawWindow
InflateRect
CharUpperW
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
CharNextW
DestroyCursor
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
LoadAcceleratorsW
InsertMenuItemW
SetRectEmpty
BringWindowToTop
TranslateAcceleratorW
ShowOwnedPopups
GetMessageW
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
RemovePropW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
MessageBeep
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
DefWindowProcW
CallWindowProcW
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetFocus
SetFocus
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetForegroundWindow
EnableWindow
UnregisterClassA
GetWindow
GetDesktopWindow
IsWindow
GetPropW
SendDlgItemMessageW
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringW
DestroyIcon
SetParent
CreateMenu
GetTabbedTextExtentA
WindowFromPoint
GetMenuItemID
InsertMenuW
GetDCEx
LockWindowUpdate
GetTopWindow
IsIconic
ShowWindow
UpdateWindow
RegisterHotKey
GetClientRect
SendMessageW
SetTimer
PostMessageW
GetParent
LoadImageW
GetDlgCtrlID
ClientToScreen
MoveWindow
InvalidateRect
GetSystemMetrics
GetWindowRect
GetDC
ReleaseDC
UnregisterClassW
SetWindowPos
OffsetRect
PtInRect
LoadCursorW
SetCursor
SetCapture
ReleaseCapture
SetMenu
SetPropW
LoadIconW
GetWindowLongW
SetWindowLongW
GetCursorPos
CreatePopupMenu
AppendMenuW
KillTimer
FillRect
SetRect
GetSysColor
CopyRect
GetDoubleClickTime
MessageBoxW
IsWindowEnabled
GetLastActivePopup
GetWindowThreadProcessId
RemoveMenu
GetSubMenu
GetMenuItemCount

gdi32

PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
CreateFontIndirectW
SetRectRgn
CombineRgn
GetMapMode
GetPixel
LPtoDP
Ellipse
GetTextMetricsW
GetRgnBox
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
GetTextExtentPoint32A
GetWindowOrgEx
GetViewportExtEx
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
GetTextExtentPoint32W
GetWindowExtEx
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
StretchDIBits
GetCharWidthW
CreateRectRgnIndirect
GetTextColor
GetBkColor
PatBlt
Rectangle
GetViewportOrgEx
CreatePen
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocW
DPtoLP
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateDCW
CreateFontW
SetDIBColorTable
CreateDIBSection
CreateSolidBrush
DeleteDC
CreateRectRgn
CreateEllipticRgn
StretchBlt
BitBlt
SelectObject
GetObjectW
GetDIBits
DeleteObject
SetDIBits
CreateCompatibleBitmap
GetStockObject
GetDeviceCaps
CreateCompatibleDC

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter
GetJobW

advapi32

RegDeleteKeyW
RegSetValueW
RegCreateKeyW
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW

shell32

ExtractIconW
SHGetPathFromIDListW
Shell_NotifyIconW
ShellExecuteW
DragFinish
DragQueryFileW
SHBrowseForFolderW
SHGetFileInfoW

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
UrlUnescapeW

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoCreateInstance
OleRun
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CoRevokeClassObject

oleaut32

SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
VariantClear
SafeArrayCreate
SafeArrayDestroy
VariantChangeType
VarUdateFromDate
VariantCopy
VariantInit
SysAllocStringLen
OleLoadPicture
SysStringLen
OleCreateFontIndirect
DispCallFunc
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
VariantTimeToSystemTime
SystemTimeToVariantTime
GetErrorInfo

appface

ord1
ord3

gdiplus

GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipFree
GdipGetImageWidth
GdipCloneImage
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipAlloc
GdipDisposeImage

ws2_32

WSASocketW
closesocket
recv
WSAAsyncSelect
WSACleanup
WSAStartup
connect
htons
inet_addr
setsockopt
send

wininet

InternetOpenUrlW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCrackUrlW
InternetCloseHandle
HttpQueryInfoW
InternetQueryDataAvailable
InternetSetOptionExW
InternetQueryOptionW
InternetCanonicalizeUrlW

Sections

.text
Size: 472KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0accb89605dd9d092c90c1adc290e14c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

appface

gdiplus

ws2_32

wininet

Sections

.text Size: 472KB - Virtual size: 470KB

.rdata Size: 132KB - Virtual size: 131KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.text
Size: 472KB - Virtual size: 470KB

.rdata
Size: 132KB - Virtual size: 131KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB