2024-01-22_d00b457c29d42d2c1bfa2f28e14f9008_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-22_d00b457c29d42d2c1bfa2f28e14f9008_icedid
Size

1.6MB
MD5

d00b457c29d42d2c1bfa2f28e14f9008
SHA1

0b1ae58a472f5116aa821b6194d091800cfd1796
SHA256

116fce90573434aa67e81ef45a33ed9fb5c53265cd769ca3a12c17715ca6663f
SHA512

76035d2aad5ed2ab8cd7e7ac8a5fd6d2d091dde6f4b96f120a60fb4e5581a7dbed12e5a57247f6fda70d726b388bec165229cd5888aee5c9301253e007d1925a
SSDEEP

24576:XJL6h1SVqOyRVipwu+zgotxmkXC691JJIAynaIpBTH7js/X0zH89I:ZL2iI0U3XrrJ3piBLpzH89

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-22_d00b457c29d42d2c1bfa2f28e14f9008_icedid

Files

2024-01-22_d00b457c29d42d2c1bfa2f28e14f9008_icedid
.exe windows:4 windows x86 arch:x86

c8a2a37d4a71347643f4f4feb127bc9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

GetEnvironmentVariableA
HeapCreate
IsBadWritePtr
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
ExitThread
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateThread
LCMapStringW
GetSystemTime
GlobalMemoryStatus
VirtualAlloc
VirtualFree
GetSystemInfo
GetTickCount
DeviceIoControl
CreateFileA
GetTimeZoneInformation
RaiseException
GlobalHandle
FindResourceA
LoadResource
LockResource
GetCPInfo
GetVersion
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
GetCurrentThreadId
GetCommandLineA
lstrcmpiA
GetCurrentProcessId
GetVersionExA
GetCurrentProcess
GetLogicalDrives
GetDriveTypeA
TerminateProcess
OpenProcess
SetPriorityClass
lstrcpynA
CreateProcessA
CloseHandle
GetLastError
DeleteCriticalSection
HeapDestroy
ExitProcess
SetCurrentDirectoryA
Sleep
GetStdHandle
WriteFile
GetModuleFileNameA
HeapAlloc
GetStartupInfoA
HeapReAlloc
HeapFree
RtlUnwind
SetEndOfFile
TlsGetValue
GetOEMCP
GetProcessVersion
TlsFree
LocalReAlloc
TlsSetValue
GetSystemDirectoryA
TlsAlloc
LocalAlloc
LoadLibraryExA
GlobalFlags
WritePrivateProfileStringA
GetPrivateProfileIntA
SetThreadPriority
SetEvent
WaitForSingleObject
lstrcmpA
GetCurrentThread
MulDiv
SetLastError
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetTempFileNameA
SetFileAttributesA
MoveFileA
SizeofResource
FreeResource
DeleteFileA
FlushFileBuffers
GetCurrentDirectoryW
GetCommandLineW
TerminateThread
VirtualQueryEx
GetProcessHeap
CreateSemaphoreA
CreateEventA
CreateMutexA
FindFirstChangeNotificationA
CreatePipe
CreateMailslotA
FindCloseChangeNotification
ExpandEnvironmentStringsA
FormatMessageA
LocalFree
ReadFile
SetFilePointer
CompareFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
GetTimeFormatA
GetThreadLocale
GetLocaleInfoA
GlobalReAlloc
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GetPrivateProfileStringA
GetComputerNameA
GetWindowsDirectoryA
GetSystemPowerStatus
SuspendThread
ResumeThread
GetThreadContext
CreateFileMappingA
MapViewOfFile
GetFileSize
UnmapViewOfFile
ReadProcessMemory
GetLocalTime
GetSystemTimeAsFileTime
SetErrorMode
FindFirstFileA
FindClose
SearchPathA
GetCurrentDirectoryA
LCMapStringA
GlobalSize
InterlockedExchange

user32

TranslateAcceleratorA
ReleaseCapture
LoadAcceleratorsA
DestroyMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
LoadStringA
IsZoomed
SetParent
SetCapture
SetCursorPos
DestroyCursor
GetSystemMenu
GetDCEx
LockWindowUpdate
FindWindowA
InvertRect
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetFocus
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetDlgCtrlID
DefWindowProcA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindowPlacement
GetNextDlgTabItem
EndDialog
TranslateMessage
GetMessageA
CreateDialogIndirectParamA
IsWindowEnabled
GetForegroundWindow
RegisterClipboardFormatA
SetLastErrorEx
CheckMenuItem
SetScrollRange
GetScrollPos
GetScrollRange
ClientToScreen
IsRectEmpty
ScreenToClient
SetCursor
DrawFrameControl
SetWindowLongA
GetDlgItem
ShowWindow
GetFocus
IsMenu
GetMenu
SetMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetIconInfo
CreateIconIndirect
IsIconic
SetWindowPos
AdjustWindowRectEx
OffsetRect
SetRectEmpty
WindowFromPoint
RedrawWindow
LoadCursorA
PtInRect
InflateRect
SetForegroundWindow
EnumChildWindows
GetWindowLongA
GetClassNameA
GetWindow
LoadIconA
CreateWindowExA
UpdateWindow
IsWindowVisible
DestroyWindow
KillTimer
SetTimer
GetParent
GetAsyncKeyState
InvalidateRect
GetSubMenu
GrayStringA
TabbedTextOutA
LoadBitmapA
GetSysColorBrush
GetMenuStringA
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
AppendMenuA
GetSystemMetrics
GetDesktopWindow
GetDC
DrawTextA
ReleaseDC
DrawIconEx
DestroyIcon
SystemParametersInfoA
GetSysColor
CopyRect
ValidateRect
ShowOwnedPopups
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GetActiveWindow
SetActiveWindow
SetScrollPos
FillRect
DrawEdge
SetRect
GetMenuItemInfoA
GetCursorPos
GetKeyState
GetClientRect
IsWindow
CharNextA
EnumWindows
GetWindowTextA
GetWindowThreadProcessId
SendMessageTimeoutA
ExitWindowsEx
DeleteMenu
PostMessageA
RegisterWindowMessageA
EnableWindow
GetWindowRect
SendMessageA
IntersectRect
DrawFocusRect
LoadMenuA
FrameRect
UnregisterClassA

gdi32

CreatePalette
SetDIBitsToDevice
CreateRoundRectRgn
GetDeviceCaps
CreatePen
CreateSolidBrush
CreateFontIndirectA
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
GetTextExtentPoint32W
GetTextExtentPoint32A
Ellipse
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
SetPixel
GetPixel
GetObjectA
PtVisible
RectVisible
PatBlt
TextOutA
ExtTextOutA
Escape
Rectangle
GetRgnBox
Polyline
SetBoundsRect
GetTextColor
GetBkColor
GetTextMetricsA
Polygon
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
GetStockObject
SelectPalette
SetBkMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
GetCharABCWidthsA
CreateRectRgn
CreatePatternBrush
CreateRectRgnIndirect
CombineRgn
DPtoLP
SetRectRgn
GetCharWidthA
CreateFontA
StretchDIBits
FrameRgn
GdiFlush
GetCharWidth32A
GetBkMode
EnumFontFamiliesExA
GetWindowOrgEx
RealizePalette

comdlg32

ChooseFontA
GetOpenFileNameA
GetSaveFileNameA

advapi32

LookupAccountSidA
CopySid
ControlService
RegQueryValueA
IsTextUnicode
RegFlushKey
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CloseServiceHandle
StartServiceA
QueryServiceStatus
CreateServiceA
OpenServiceA
OpenSCManagerA
DeleteService
GetUserNameA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
GetTokenInformation
RegOpenKeyA
GetLengthSid
EqualSid
IsValidSid
RegDeleteKeyA
FreeSid
AllocateAndInitializeSid

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
SHAppBarMessage
ShellExecuteExA
Shell_NotifyIconA
ShellExecuteA

comctl32

ImageList_GetImageInfo
ImageList_Draw
ImageList_GetImageCount
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create

ole32

CoInitialize
CoRegisterClassObject
CoUninitialize
StringFromGUID2
CoRevokeClassObject
CoCreateFreeThreadedMarshaler
CoCreateInstance
CoCreateGuid

Sections

.text
Size: 916KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 488KB - Virtual size: 484KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8a2a37d4a71347643f4f4feb127bc9e

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

ole32

Sections

.text Size: 916KB - Virtual size: 912KB

.rdata Size: 116KB - Virtual size: 112KB

.data Size: 88KB - Virtual size: 130KB

.rsrc Size: 488KB - Virtual size: 484KB

.text
Size: 916KB - Virtual size: 912KB

.rdata
Size: 116KB - Virtual size: 112KB

.data
Size: 88KB - Virtual size: 130KB

.rsrc
Size: 488KB - Virtual size: 484KB