2024-01-11_c7fca6575544282abc4ab26454a3396b_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-11_c7fca6575544282abc4ab26454a3396b_icedid
Size

647KB
MD5

c7fca6575544282abc4ab26454a3396b
SHA1

b464c7828e12ae66e43ee6d8e0836d8764e8fa5b
SHA256

13a7e4057e399784e1ba618409f7b0ce5d2e2c5347085b86b5c19777266e1757
SHA512

9324051e59b68aaadf096f9e2c738e331f8c6c2cf106e619708976c59249420b5216986adc946cff5536186dd61e9a893d0036c8935f38a88b0b200212c2db29
SSDEEP

12288:WrX7x+Ibz29ZoKMzjGFE2NQHrNtBFvTaB58nfd18sW:64I2nE22j85efd1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-11_c7fca6575544282abc4ab26454a3396b_icedid

Files

2024-01-11_c7fca6575544282abc4ab26454a3396b_icedid
.exe windows:5 windows x86 arch:x86

5d4b8f8ed2816fdabae68fc26095ed5c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

olepro32

ord250

kernel32

GetFileSizeEx
GetFileTime
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetCurrentDirectoryW
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
HeapReAlloc
HeapSize
ExitThread
CreateThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FatalAppExitA
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
SetFileTime
LocalFileTimeToFileTime
IsValidCodePage
GetTimeZoneInformation
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
FileTimeToLocalFileTime
SetErrorMode
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetModuleHandleA
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GlobalFlags
SystemTimeToFileTime
FileTimeToSystemTime
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
lstrlenA
lstrcmpA
GetAtomNameW
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
GetStringTypeExW
DeleteFileW
MoveFileW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
SetLastError
CopyFileW
FormatMessageW
LocalFree
MulDiv
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GetFileAttributesW
CreateDirectoryW
WriteFile
lstrcmpiW
LoadLibraryExW
MultiByteToWideChar
FreeLibrary
RaiseException
GetLastError
GetModuleFileNameW
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceW
Sleep
GetCurrentProcessId
WriteProfileStringW
CreateFileW
GetSystemTimeAsFileTime
GetFileSize
CloseHandle
WideCharToMultiByte
GetSystemDirectoryW
LoadLibraryW
lstrlenW
GetVersionExW
lstrcpyW
GetProfileStringW
GetProfileIntW
GetModuleHandleW
GetProcAddress
lstrcpynW
lstrcatW
RtlUnwind
ExitProcess
CreateFileA
SetFileAttributesW
SetEnvironmentVariableA

user32

SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
CopyRect
PtInRect
SetWindowPlacement
GetDlgCtrlID
CallWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetFocus
IsWindowEnabled
GetParent
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetWindowTextW
GetSysColor
CharNextW
SendDlgItemMessageW
EnableWindow
GetDlgItem
SetScrollInfo
RegisterHotKey
SetMenu
UnregisterHotKey
LoadMenuW
GetSysColorBrush
GetScrollInfo
SetScrollPos
ScrollWindow
GetDlgItemInt
CheckDlgButton
GetDlgItemTextW
IsDlgButtonChecked
EndDialog
DialogBoxParamW
SetClassLongW
GetClassNameW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
GetCapture
IsChild
WinHelpW
GetMenuItemCount
wsprintfW
RemoveMenu
AppendMenuW
InvalidateRect
SetTimer
UpdateWindow
MessageBoxW
IsWindow
KillTimer
DestroyWindow
CreateDialogParamW
SendMessageW
SetFocus
GetWindowRect
GetClientRect
ClientToScreen
SetWindowPos
EnableMenuItem
CheckMenuItem
GetMenu
GetSubMenu
PostQuitMessage
GetAsyncKeyState
PostMessageW
BeginPaint
GetWindowThreadProcessId
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
CreateDialogIndirectParamW
GetActiveWindow
GetDesktopWindow
InflateRect
GetMenuItemInfoW
SystemParametersInfoW
ValidateRect
GetCursorPos
GetMessageW
FillRect
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetWindowDC
UnregisterClassW
DestroyIcon
GetDialogBaseUnits
SetRectEmpty
SetCursor
ShowOwnedPopups
DeleteMenu
BringWindowToTop
CreatePopupMenu
SetCapture
LockWindowUpdate
GetDCEx
UnionRect
SetParent
GetSystemMenu
IsRectEmpty
MapVirtualKeyW
GetKeyNameTextW
WindowFromPoint
SetRect
EndPaint
SetDlgItemTextW
SendDlgItemMessageA
RegisterWindowMessageW
CharUpperW
CheckRadioButton
SetDlgItemInt
IsDialogMessageW
ScrollWindowEx
GetSystemMetrics
MoveWindow
DefWindowProcW
PeekMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
WaitMessage
LoadAcceleratorsW
LoadStringW
LoadCursorW
LoadIconW
RegisterClassW
GetDC
ReleaseDC
CreateWindowExW
GetWindowLongW
SetWindowLongW
ShowWindow
SetWindowTextW
UnpackDDElParam
ReuseDDElParam
GetMenuBarInfo
ReleaseCapture
GetScrollPos
InsertMenuItemW
DestroyMenu

gdi32

CreateBitmap
CreateFontIndirectW
GetTextExtentPoint32W
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocW
PtVisible
RectVisible
GetObjectW
CreateDCW
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateHatchBrush
GetCharWidthW
StretchDIBits
CreateCompatibleBitmap
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetBkColor
GetClipBox
TextOutW
GetDCOrgEx
CopyMetaFileW
GetDeviceCaps
SetBkColor
SetTextColor
ExtTextOutW
PatBlt
CreateSolidBrush
CreateFontW
StretchBlt
CreateCompatibleDC
CreateDIBitmap
BitBlt
DeleteObject
DeleteDC
GetStockObject
GetTextMetricsW
Escape
SelectObject

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

comdlg32

GetOpenFileNameW
GetFileTitleW

advapi32

RegSetValueExW
RegEnumKeyW
RegQueryValueW
RegCreateKeyW
RegOpenKeyW
RegSetValueW
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW

shell32

SHBrowseForFolderW
SHGetFileInfoW
ExtractIconW
DragFinish
DragQueryFileW
SHGetPathFromIDListW

ole32

CoTreatAsClass
ReleaseStgMedium
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateStreamOnHGlobal
CoTaskMemRealloc
CoTaskMemAlloc
CoGetMalloc
GetRunningObjectTable
CreateItemMoniker
CreateBindCtx
MkParseDisplayName
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx
OleDuplicateData
CoDisconnectObject
StringFromGUID2
CLSIDFromString
StringFromCLSID

oleaut32

SafeArrayCopy
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SysFreeString
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysStringLen
VarUI4FromStr

comctl32

CreateStatusWindowW

shlwapi

PathRemoveExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW

gdiplus

GdipCreateFromHWNDICM
GdipCreateFromHWND
GdipCreateBitmapFromGdiDib
GdipDrawImageRectI
GdipCloneImage
GdipDisposeImage
GdipSaveImageToStream
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDrawImageRect
GdipDeleteGraphics
GdiplusShutdown
GdiplusStartup
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipFree

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Sections

.text
Size: 479KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5d4b8f8ed2816fdabae68fc26095ed5c

Headers

DLL Characteristics

File Characteristics

Imports

winmm

olepro32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

gdiplus

oleacc

Sections

.text Size: 479KB - Virtual size: 478KB

.rdata Size: 111KB - Virtual size: 111KB

.data Size: 12KB - Virtual size: 33KB

.rsrc Size: 44KB - Virtual size: 44KB

.text
Size: 479KB - Virtual size: 478KB

.rdata
Size: 111KB - Virtual size: 111KB

.data
Size: 12KB - Virtual size: 33KB

.rsrc
Size: 44KB - Virtual size: 44KB