2024-01-24_68cacd010fa7235743eed12e72a8dd8b_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-24_68cacd010fa7235743eed12e72a8dd8b_icedid
Size

3.6MB
MD5

68cacd010fa7235743eed12e72a8dd8b
SHA1

0dd0237dc70b7328c455e01a135d269a9fc45724
SHA256

efba0eac07b9a0ab0334879aeb5298df0fb888edb7503dabea4a0586a4f6f609
SHA512

477839436f87abea7bd286fada439977a164566fec189fffc4d39f2e0ea9daa49e7f3f70409442adec39b9a04fc02b712a38b97cafcd601053e46552dea6b909
SSDEEP

24576:5G65ynyVzBl565jvDq9Ls1fkxgnabeLpClsNZnjtPFgmnqsw75WOmDtOoK4tI7ot:5VJYAh8abeLasNZhPFgmnqs2dErrQ0yy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-24_68cacd010fa7235743eed12e72a8dd8b_icedid

Files

2024-01-24_68cacd010fa7235743eed12e72a8dd8b_icedid
.exe windows:4 windows x86 arch:x86

7a40db4c945a822e427f85851de2b55b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

packet

PacketOpenAdapter
PacketCloseAdapter
PacketGetAdapterNames
PacketGetNetType
PacketGetVersion

kernel32

TlsFree
GlobalFlags
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
HeapReAlloc
ExitThread
GetSystemTimeAsFileTime
DeleteFileA
RtlUnwind
ExitProcess
HeapSize
SetStdHandle
GetFileType
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
TlsGetValue
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetProfileIntW
GlobalGetAtomNameW
FileTimeToLocalFileTime
FindNextFileW
GetShortPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiW
GetStringTypeExW
MoveFileW
GetDiskFreeSpaceW
GetFullPathNameW
LocalReAlloc
GetFileTime
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpA
GetModuleHandleA
GetCurrentProcessId
InterlockedDecrement
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
FormatMessageW
LocalFree
FileTimeToSystemTime
GetFileSize
SystemTimeToFileTime
SetFilePointer
ReadFile
SetFileTime
LocalFileTimeToFileTime
GetModuleFileNameA
GetVersion
GetVersionExW
GetTickCount
GetModuleFileNameW
WriteFile
CreateFileW
GlobalMemoryStatusEx
TerminateThread
TerminateProcess
OutputDebugStringA
GlobalAlloc
GlobalFree
GetPrivateProfileSectionNamesW
CreateProcessW
GetPrivateProfileIntW
CreateDirectoryW
GetCurrentDirectoryW
DeleteFileW
GetCurrentThreadId
OpenMutexW
SetThreadLocale
GetThreadLocale
OpenEventW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetFileAttributesW
CreateThread
GlobalUnlock
GlobalLock
lstrlenA
MultiByteToWideChar
MulDiv
OutputDebugStringW
LoadResource
LockResource
FindResourceW
SizeofResource
CreateMutexW
ReleaseMutex
SetEvent
WaitForSingleObject
CreateEventW
lstrlenW
WinExec
Sleep
CloseHandle
WideCharToMultiByte
SetLastError
RaiseException
GetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
TlsSetValue
TlsAlloc
GlobalHandle
GetTempFileNameW
GlobalReAlloc
GetCommandLineW

user32

MessageBeep
PostThreadMessageW
DestroyIcon
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
DestroyMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
DrawFocusRect
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemInt
EndPaint
BeginPaint
GetWindowThreadProcessId
GetActiveWindow
CreateDialogIndirectParamW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetClassLongW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageW
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
DefWindowProcW
IntersectRect
SystemParametersInfoA
UnregisterClassW
GetMenuState
GetMenuStringW
DrawIconEx
LoadStringW
GetCapture
SetFocus
GetMenuItemInfoW
SetCursorPos
GetCaretPos
IsClipboardFormatAvailable
GetSysColorBrush
wsprintfW
GetWindow
GetSystemMenu
SetParent
InflateRect
BeginDeferWindowPos
IsRectEmpty
GetDCEx
IsChild
GetSystemMetrics
DeleteMenu
IsZoomed
SetMenu
InsertMenuW
EqualRect
GetSysColor
GetPropW
SetWindowLongW
SetWindowRgn
GetSubMenu
GetClassNameW
GetMenuItemID
MapWindowPoints
ModifyMenuW
GetWindowLongW
RemovePropW
GetMenuItemCount
SetPropW
CallWindowProcW
IsIconic
GetKeyboardState
SetWindowPos
UnhookWindowsHookEx
ShowWindow
MessageBoxW
GetAsyncKeyState
CallNextHookEx
GetWindowDC
EnableScrollBar
SetWindowsHookExW
UpdateWindow
SystemParametersInfoW
FindWindowW
GetFocus
IsWindowVisible
SetActiveWindow
IsWindow
GetKeyState
GetClipboardData
CloseClipboard
OpenClipboard
PostMessageW
ReleaseDC
OffsetRect
LoadImageW
UnregisterClassA
UnpackDDElParam
ReuseDDElParam
LoadMenuW
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
CharUpperW
DrawIcon
SetCapture
ReleaseCapture
GetDesktopWindow
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
ShowOwnedPopups
PostQuitMessage
GetMessageW
TranslateMessage
ValidateRect
WindowFromPoint
GetWindowPlacement
SetRectEmpty
GetDlgItem
FillRect
GetDC
SetRect
SetClassLongW
CopyRect
PtInRect
ScreenToClient
TabbedTextOutW
GetWindowRect
GrayStringW
DrawTextExW
DrawTextW
CreateWindowExW
RedrawWindow
SetTimer
ClientToScreen
SetCursor
LoadCursorW
GetClientRect
KillTimer
GetCursorPos
GetParent
CreatePopupMenu
AppendMenuW
EnableMenuItem
InvalidateRect
EnableWindow
FrameRect
SendMessageW
LoadBitmapW
MoveWindow
LoadIconW
EndDeferWindowPos
LockWindowUpdate

gdi32

LineTo
MoveToEx
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
StartDocW
SetViewportOrgEx
DPtoLP
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreateBitmap
CreateRectRgnIndirect
SetRectRgn
CombineRgn
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
Ellipse
UnrealizeObject
GetRgnBox
LPtoDP
PatBlt
EnumFontFamiliesW
CreateRectRgn
GetCharABCWidthsFloatW
GetPixel
IntersectClipRect
SetMapMode
SetROP2
RestoreDC
SaveDC
GetClipBox
CreateDCW
SetTextColor
CreateFontW
SetBkColor
GetTextMetricsW
CreateRoundRectRgn
RoundRect
CreatePen
ExcludeClipRect
Rectangle
GetTextColor
StretchBlt
GetStockObject
CreateEllipticRgn
PtInRegion
RectInRegion
SetBkMode
GetObjectW
GetTextExtentPoint32W
SetBrushOrgEx
GetDeviceCaps
CreateFontIndirectW
TextOutW
GetMapMode
Escape
RectVisible
ExtTextOutW
PtVisible
BitBlt
DeleteObject
CreateCompatibleDC
DeleteDC
SelectObject
CreateCompatibleBitmap
CreatePatternBrush
CreateSolidBrush
GetBkColor

comdlg32

GetFileTitleW

winspool.drv

GetJobW
OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegCreateKeyW
GetFileSecurityW
SetFileSecurityW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegSetValueW
RegCloseKey

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
DragQueryFileW
DragAcceptFiles
SHGetFileInfoW
DragFinish
ExtractIconW
ShellExecuteW

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

StrToIntW
PathRemoveFileSpecA
PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
UrlUnescapeW

oledlg

OleUIBusyW

ole32

CoCreateGuid
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize

oleaut32

VariantTimeToSystemTime
SysAllocString
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
SysStringLen
SysFreeString
VariantInit
VariantChangeType
VariantClear
VarUdateFromDate
SystemTimeToVariantTime
SysAllocStringLen

gdiplus

GdipDeleteFont
GdipMeasureString
GdipCreateFont
GdipCreateSolidFill
GdipDeleteGraphics
GdipDrawImageI
GdipFillRectangleI
GdipSetStringFormatLineAlign
GdipDrawImageRect
GdipSetStringFormatFlags
GdipCreateStringFormat
GdipCreatePen1
GdipDeletePen
GdipDeleteStringFormat
GdipDrawLineI
GdipSetImageAttributesColorMatrix
GdipSetSolidFillColor
GdipFillEllipse
GdipSetPenDashStyle
GdipSetPenColor
GdipDrawRectangle
GdipSetPenWidth
GdipDrawEllipse
GdipFillRectangle
GdiplusStartup
GdiplusShutdown
GdipGraphicsClear
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipDrawRectangleI
GdipCreatePen2
GdipCreateBitmapFromHBITMAP
GdipTranslateTextureTransform
GdipCreateTexture
GdipDeleteFontFamily
GdipDrawLine
GdipRotateWorldTransform
GdipResetWorldTransform
GdipTransformMatrixPoints
GdipTranslateMatrix
GdipDeleteMatrix
GdipRotateMatrix
GdipCreateMatrix2
GdipFillEllipseI
GdipTranslateWorldTransform
GdipDrawEllipseI
GdipLoadImageFromStream
GdipCreateBitmapFromStream
GdipCloneBrush
GdipGetImageWidth
GdipDisposeImage
GdipCreateImageAttributes
GdipLoadImageFromFile
GdipSetImageAttributesWrapMode
GdipGetImageHeight
GdipGetGenericFontFamilySansSerif
GdipAlloc
GdipDrawImageRectI
GdipFree
GdipCreateFromHDC
GdipDisposeImageAttributes
GdipDeleteBrush
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipCloneImage
GdipSetStringFormatAlign
GdipDrawString
GdipSetSmoothingMode
GdipSaveImageToFile

imm32

ImmAssociateContext
ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW

ws2_32

inet_addr
send
connect
shutdown
recv
ntohl
ntohs
closesocket
recvfrom
socket
htons
sendto
bind
gethostbyname
gethostname
htonl
WSACleanup
setsockopt
WSAStartup
inet_ntoa

wininet

HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
InternetQueryDataAvailable
InternetSetOptionExW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetConnectW
HttpOpenRequestW

Sections

.text
Size: 1004KB - Virtual size: 1000KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a40db4c945a822e427f85851de2b55b

Headers

File Characteristics

Imports

packet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

imm32

ws2_32

wininet

Sections

.text Size: 1004KB - Virtual size: 1000KB

.rdata Size: 220KB - Virtual size: 216KB

.data Size: 20KB - Virtual size: 44KB

.rsrc Size: 2.4MB - Virtual size: 2.4MB

.text
Size: 1004KB - Virtual size: 1000KB

.rdata
Size: 220KB - Virtual size: 216KB

.data
Size: 20KB - Virtual size: 44KB

.rsrc
Size: 2.4MB - Virtual size: 2.4MB