2024-01-22_b528d9fd9a6932be1f2a5c66c3ca0c64_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-22_b528d9fd9a6932be1f2a5c66c3ca0c64_icedid
Size

1.1MB
MD5

b528d9fd9a6932be1f2a5c66c3ca0c64
SHA1

c9b3174bb848217b346299462615f2295dfebc3b
SHA256

6acfaa2f8516edd617b38bb2b0322d5c901cf8fae84adda501074b4701c350f3
SHA512

2d652d0553fe938645a5ce495260317f53d5ff0b304578682d51dac5c793ab08357ac1876ef9b3dd9d6748f559c00696d89321a8e57adc24f03574ba6ce499b7
SSDEEP

24576:ZWzhg7GlAERI9ljr8ESWQeokooLebgsj:NERKlH8fCokooa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-22_b528d9fd9a6932be1f2a5c66c3ca0c64_icedid

Files

2024-01-22_b528d9fd9a6932be1f2a5c66c3ca0c64_icedid
.exe windows:4 windows x86 arch:x86

7ebf5be60e57f5f6215e9d52dac4c8a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
GetStringTypeA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetEnvironmentVariableA
GetCurrentProcessId
HeapSize
GetFileType
SetStdHandle
CreateThread
ExitThread
HeapReAlloc
InterlockedExchange
GetCommandLineA
GetStartupInfoA
VirtualQuery
VirtualAlloc
VirtualProtect
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
TerminateProcess
HeapAlloc
HeapFree
RtlUnwind
ExitProcess
GetCurrentDirectoryA
LocalFileTimeToFileTime
SetErrorMode
SystemTimeToFileTime
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GetTickCount
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
WritePrivateProfileStringA
GetPrivateProfileIntA
InterlockedIncrement
lstrcmpA
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempPathA
GetTempFileNameA
GetProfileIntA
SearchPathA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
GetShortPathNameA
GetFullPathNameA
FindFirstFileA
FindClose
lstrcpyA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
DeleteFileA
MoveFileA
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
InterlockedDecrement
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
GlobalLock
SetLastError
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
WriteFile
GetStringTypeExA
CompareStringW
CompareStringA
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetSystemDirectoryA
GetModuleFileNameA
GlobalUnlock
GetCurrentProcess
IsProcessorFeaturePresent
GetSystemInfo
QueryPerformanceFrequency
QueryPerformanceCounter
CreateFileA
CloseHandle
GetLogicalDriveStringsA
GetDriveTypeA
GetVolumeInformationA
QueryDosDeviceA
GetLastError
MulDiv
GetPrivateProfileStringA
CopyFileA
GetFileAttributesA
MultiByteToWideChar
WinExec
lstrlenA
Sleep
WideCharToMultiByte
lstrcpynA
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
FreeEnvironmentStringsA

user32

LockWindowUpdate
GetDCEx
GetSysColorBrush
GetMenuItemInfoA
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
GetSystemMenu
DeleteMenu
SetParent
UnionRect
CharNextA
SetWindowRgn
DrawIcon
IsRectEmpty
FindWindowA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
LoadMenuA
DestroyMenu
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetMenu
GetDesktopWindow
GetMessageA
TranslateMessage
ValidateRect
SetCursorPos
wsprintfA
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
GetMenuCheckMarkDimensions
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
CheckRadioButton
CheckDlgButton
GetMenuState
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
TabbedTextOutA
WinHelpA
CreateWindowExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetSubMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
IntersectRect
IsIconic
GetWindowPlacement
IsZoomed
UnregisterClassA
CharUpperA
LoadCursorA
SystemParametersInfoA
PostQuitMessage
IsWindow
SetForegroundWindow
KillTimer
SetTimer
IsWindowVisible
GetSystemMetrics
SubtractRect
UpdateWindow
GetWindow
RegisterWindowMessageA
MessageBoxA
DrawTextA
MessageBeep
GetNextDlgGroupItem
DestroyIcon
InvalidateRgn
GetTabbedTextExtentA
GetKeyboardState
ReleaseDC
SetClassLongA
GetDC
SetRectEmpty
GetMenu
CheckMenuItem
EqualRect
SetRect
PtInRect
GetFocus
PostMessageA
LoadBitmapA
SetCursor
PeekMessageA
ReleaseCapture
PostThreadMessageA
CreateMenu
CopyAcceleratorTableA
SendDlgItemMessageA
GetCursorPos
LoadImageA
GetIconInfo
DestroyCursor
GetWindowLongA
EnableWindow
WindowFromPoint
GetParent
SetCapture
GetCapture
GetActiveWindow
RedrawWindow
InvalidateRect
ScreenToClient
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
DrawFocusRect
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
GetSysColor
DrawStateA
SetWindowsHookExA

gdi32

IntersectClipRect
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
CreatePen
CreateSolidBrush
CreateDCA
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetCharWidthA
CreateFontA
GetTextMetricsA
GetBkColor
GetViewportOrgEx
StartPage
EndPage
SetAbortProc
GetCurrentPositionEx
EndDoc
CreateEllipticRgn
Ellipse
GetTextColor
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetWindowOrgEx
GetRgnBox
ExcludeClipRect
SetMapMode
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetClipBox
CreateRectRgnIndirect
SetStretchBltMode
SetDIBitsToDevice
PatBlt
GetTextExtentPoint32A
CreateFontIndirectA
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
AbortDoc
GetStockObject
CreateDIBSection
GdiFlush
GetDIBColorTable
SetDIBColorTable
StretchBlt
RealizePalette
CreatePalette
LPtoDP
StretchDIBits
GetTextExtentPointA
SetROP2
Rectangle
GetDeviceCaps
GetObjectA
CreateCompatibleBitmap
CreateBitmap
CreateCompatibleDC
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteDC
DeleteObject

comdlg32

PrintDlgA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA
GetJobA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegSetValueA
RegOpenKeyA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyA
RegCloseKey

shell32

ExtractIconA
DragAcceptFiles
DragFinish
DragQueryFileA
SHGetFileInfoA
ShellExecuteA

comctl32

ImageList_AddMasked
ord8
ImageList_GetImageCount
ImageList_Add
ImageList_Draw
ImageList_GetImageInfo
ord17
ImageList_Destroy
ImageList_Create

shlwapi

PathIsUNCA
PathFindExtensionA
PathRemoveExtensionA
PathStripToRootA
PathFindFileNameA

oledlg

ord8

ole32

CoTaskMemFree
OleDestroyMenuDescriptor
CoGetClassObject
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleTranslateAccelerator
IsAccelerator
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleCreateMenuDescriptor
CoRevokeClassObject
OleIsCurrentClipboard
CoRegisterMessageFilter
OleFlushClipboard

oleaut32

SysAllocStringLen
SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysStringLen
SysFreeString
VariantInit
VariantChangeType
VariantClear
OleCreateFontIndirect

ws2_32

WSACleanup
WSAStartup

pgw32

W32_CreateCursorFromBitmap
W32_GetFileSizeOnDisk
W32_LaunchNewProcessModal
W32_BringAppToFront
W32_IsFirstInstance
W32_GetTrayRect
W32_GetVersionInfo
W32_GetFileVersion

gdiplus

GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipSetImagePalette
GdipImageRotateFlip
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipGetImageVerticalResolution
GdipBitmapSetResolution
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipGetImageGraphicsContext
GdipSetInterpolationMode
GdipDrawImageI
GdipDrawImageRectI
GdipCloneImage
GdipGetImageHorizontalResolution
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipDisposeImage
GdipFree
GdipAlloc
GdipBitmapUnlockBits
GdiplusShutdown
GdiplusStartup
GdipDeleteGraphics

pgdg

PGDLGResample
PGDLGAbout
PGFUNCSplashScreen
PGDLGSelectMaterial
PGDLGSelectMachine
PGDLGExportImage

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 636KB - Virtual size: 635KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 372KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ebf5be60e57f5f6215e9d52dac4c8a6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

pgw32

gdiplus

pgdg

iphlpapi

Sections

.text Size: 636KB - Virtual size: 635KB

.rdata Size: 136KB - Virtual size: 135KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 372KB - Virtual size: 370KB

.text
Size: 636KB - Virtual size: 635KB

.rdata
Size: 136KB - Virtual size: 135KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 372KB - Virtual size: 370KB