2024-01-18_dc4590cff4d1daf9584ba24c3336885e_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-18_dc4590cff4d1daf9584ba24c3336885e_icedid
Size

2.8MB
MD5

dc4590cff4d1daf9584ba24c3336885e
SHA1

895aa0e3033752a4e402df5de6d207c0bb1a1e2b
SHA256

67e4f761776db356531e8c1d8a2ae54a50d30dea4949700e2fde53641acdf384
SHA512

edf2818b1a9526c3c0d857f35e53e1a4426530691ece4aa99b18fbf28dcebf62b489e21b4b219e369ad006b58c5ee93885dab46f668249608451df9f4fda8e1d
SSDEEP

24576:rve3eaX/OY6US3+MQGKqZCGvEbB1eT/4zXzTEa:rGeavOJQG7ZCG8bB1U8D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-18_dc4590cff4d1daf9584ba24c3336885e_icedid

Files

2024-01-18_dc4590cff4d1daf9584ba24c3336885e_icedid
.exe windows:4 windows x86 arch:x86

f8ce4edab50d8a37af03d6a480e061b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsBadWritePtr
IsBadCodePtr
SetEnvironmentVariableA
CreateDirectoryA
ReleaseMutex
GetLastError
CreateMutexA
WritePrivateProfileStringA
Beep
MultiByteToWideChar
GetVersion
lstrcmpiA
lstrlenW
lstrlenA
GetFileSize
SetFilePointer
GlobalAlloc
MulDiv
GetModuleHandleA
ReadFile
CreateFileA
WriteFile
GlobalLock
GlobalUnlock
CreateEventA
WaitForSingleObject
SetEvent
FreeResource
GetCPInfo
GetLocalTime
GetExitCodeThread
TerminateThread
GetDiskFreeSpaceExA
GlobalMemoryStatus
GetSystemDirectoryA
GetSystemInfo
FormatMessageA
LoadLibraryA
GetProcAddress
FreeLibrary
VirtualFree
HeapCreate
SetFileAttributesA
DeleteCriticalSection
LocalAlloc
LocalFree
HeapDestroy
GetTimeZoneInformation
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
QueryPerformanceCounter
SetStdHandle
HeapSize
HeapReAlloc
GetCommandLineA
Sleep
GetTickCount
GetLogicalDrives
GetDriveTypeA
GetCurrentDirectoryA
SetCurrentDirectoryA
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
GetPrivateProfileIntA
CloseHandle
GetPrivateProfileStringA
DeleteFileA
CopyFileA
WinExec
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetStartupInfoA
RemoveDirectoryA
VirtualQuery
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
TerminateProcess
GetFileType
CreateThread
ExitThread
RtlUnwind
ExitProcess
SetErrorMode
GetFileTime
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetOEMCP
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
RaiseException
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
FindFirstFileA
FindNextFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
InterlockedDecrement
SetLastError
GlobalFree
MoveFileExA
GetModuleFileNameA
LocalLock
LocalUnlock
GetVersionExA
InterlockedExchange
GetThreadLocale
GetLocaleInfoA
CompareStringW
GetACP
CompareStringA

user32

TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
DestroyIcon
DrawIconEx
GetSysColorBrush
GetMenuItemInfoA
DrawFocusRect
InvalidateRect
PostMessageA
FillRect
LoadBitmapA
CopyRect
GetSysColor
GetMenuState
GetDC
GetKeyState
GetCapture
CharUpperA
SystemParametersInfoA
SetWindowRgn
GetSystemMetrics
SetTimer
GetWindowRect
ModifyMenuA
SetRect
DrawEdge
DrawIcon
SetForegroundWindow
IsIconic
ReleaseDC
GetMenuItemID
GetMenuItemCount
AppendMenuA
CreatePopupMenu
GetParent
CreateMenu
LoadImageA
GetClientRect
KillTimer
wsprintfA
FindWindowA
RedrawWindow
EnableWindow
CheckMenuItem
EnableMenuItem
ClientToScreen
ScreenToClient
SetCapture
LoadCursorA
LoadIconA
SendMessageA
GetCursorPos
SetCursor
GetSubMenu
SetWindowPos
GetMessageA
GetFocus
SetFocus
GetDlgCtrlID
UpdateWindow
IntersectRect
FrameRect
InflateRect
PeekMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
OffsetRect
PtInRect
GetMenuStringA
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
GetWindowLongA
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
GetDesktopWindow
UnhookWindowsHookEx
GetWindow
GetWindowPlacement
SetWindowLongA
CallWindowProcA
DefWindowProcA
UnregisterClassA
RegisterClassA
GetClassInfoA
DeferWindowPos
EqualRect
AdjustWindowRectEx
GetMenu
IsWindowVisible
GetScrollPos
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
IsChild
SendDlgItemMessageA
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassInfoExA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
WinHelpA
RegisterWindowMessageA
SetParent
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindowDC
BeginPaint
EndPaint
WindowFromPoint
PostQuitMessage
ValidateRect
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatA
DestroyMenu
SetRectEmpty
CharNextA
IsRectEmpty
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
GetDCEx
LockWindowUpdate
ReleaseCapture

gdi32

PtVisible
ResetDCA
StartDocA
StartPage
EndPage
EndDoc
SetPixel
GetPixel
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreateDIBSection
GetTextExtentPoint32W
Escape
ExtTextOutA
RectVisible
SetBkMode
PatBlt
Rectangle
Ellipse
GetBkMode
CreateFontIndirectA
CreateDCA
GetDeviceCaps
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
GetObjectA
SetStretchBltMode
StretchDIBits
CreatePen
SelectObject
MoveToEx
LineTo
DeleteObject
CreateFontA
GetRgnBox
GetTextColor
CombineRgn
SetRectRgn
GetCharWidthA
GetStockObject
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateRectRgn
SelectClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetClipBox
SetBkColor
GetTextExtentPoint32A
SetTextAlign
StretchBlt
SetTextColor
TextOutA
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap

comdlg32

PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
GetFileTitleA

advapi32

RegSetValueExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleIsCurrentClipboard
CoTaskMemAlloc
CoRevokeClassObject
CoTaskMemFree
OleFlushClipboard

oleaut32

OleCreateFontIndirect
SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantCopy

odbc32

ord11
ord13
ord24
ord75
ord41
ord26
ord31
ord9
ord4

comctl32

ImageList_GetIconSize
ImageList_Draw
ImageList_GetIcon
ord17
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create
ImageList_AddMasked

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oledlg

ord8

ws2_32

recv
recvfrom
WSAStartup
gethostbyname
inet_ntoa
send
shutdown
sendto
connect
listen
setsockopt
__WSAFDIsSet
ntohs
closesocket
accept
socket
select
htons
inet_addr
bind
WSACleanup

wininet

InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback

winmm

waveOutClose
waveOutReset
waveOutUnprepareHeader
waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutOpen
timeSetEvent
timeKillEvent
waveOutGetNumDevs
waveInOpen
waveInUnprepareHeader
waveInPrepareHeader
waveInAddBuffer
waveInStart
sndPlaySoundA
timeBeginPeriod
timeGetTime

gdiplus

GdipDeleteGraphics
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipFree
GdipGetImageGraphicsContext
GdipGetDC
GdipReleaseDC
GdipAlloc
GdipCloneImage
GdiplusStartup
GdipDisposeImage

dsound

ord1

exceptionhandler

??0HPExceptionHandler@@QAE@XZ
??1HPExceptionHandler@@QAE@XZ
?Create@HPExceptionHandler@@QAEJH@Z

sms_sdk_h264_dec

PT_H264dec_Init
PT_H264dec_GetOneFrame
PT_H264dec_Uninit

ddraw

DirectDrawEnumerateExA
DirectDrawCreate

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

Sections

.text
Size: 688KB - Virtual size: 687KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8ce4edab50d8a37af03d6a480e061b5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

odbc32

comctl32

shlwapi

oledlg

ws2_32

wininet

winmm

gdiplus

dsound

exceptionhandler

sms_sdk_h264_dec

ddraw

winspool.drv

Sections

.text Size: 688KB - Virtual size: 687KB

.rdata Size: 116KB - Virtual size: 113KB

.data Size: 12KB - Virtual size: 1.1MB

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.text
Size: 688KB - Virtual size: 687KB

.rdata
Size: 116KB - Virtual size: 113KB

.data
Size: 12KB - Virtual size: 1.1MB

.rsrc
Size: 2.0MB - Virtual size: 2.0MB