2024-01-26_378561b48a06975210b9cf98dadfa603_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-01-26_378561b48a06975210b9cf98dadfa603_icedid
Size

820KB
MD5

378561b48a06975210b9cf98dadfa603
SHA1

11ec8eea393ac777d54af21a9d5e32cfd8ef7d21
SHA256

b17ef8127e9f7ec16fc9b67baca8d48c744bae07b44212206f186392983b9510
SHA512

f851fd9fc89012ac79f9d2ec288d735b0624ed2017c4f2dc1d5e7d123709df0cbb69d1f0601d3a7c91cfacfd84e222d882b790126279d8d6889b338df2f8f34b
SSDEEP

24576:l5HPbW8xOogjmPSORRkloJw6plQyOS73u:vOsKORil4w6Z7+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-26_378561b48a06975210b9cf98dadfa603_icedid

Files

2024-01-26_378561b48a06975210b9cf98dadfa603_icedid
.exe windows:4 windows x86 arch:x86

80c82ab30c0c6956832ce2b77810cd00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
IsBadReadPtr
GetTimeFormatA
GetDateFormatA
ExitThread
CreateThread
HeapReAlloc
TerminateProcess
GetStartupInfoA
SetStdHandle
GetFileType
HeapSize
HeapDestroy
HeapCreate
IsBadWritePtr
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsBadCodePtr
SetEnvironmentVariableA
SetErrorMode
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
LocalAlloc
InterlockedIncrement
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetProfileIntA
SuspendThread
ResumeThread
GetCurrentThread
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
lstrcmpA
WritePrivateProfileStringA
GetPrivateProfileIntA
InterlockedDecrement
FreeResource
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
SetLastError
GlobalFree
CopyFileA
GlobalAlloc
FormatMessageA
LocalFree
GetFileTime
GetSystemTimeAsFileTime
GetFullPathNameA
GetSystemTime
UnlockFile
LockFileEx
LockFile
GetFileSize
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetTempPathA
CreateFileA
GetFileAttributesA
DeleteFileA
GetTickCount
CreateEventA
ResetEvent
SetEvent
WaitForSingleObject
FindResourceExA
GetCurrentThreadId
GetCommandLineA
lstrcpynA
GlobalSize
GlobalLock
GlobalUnlock
MulDiv
GlobalReAlloc
GetCurrentProcessId
GlobalAddAtomA
CreateFileMappingA
MapViewOfFile
GlobalDeleteAtom
UnmapViewOfFile
CloseHandle
GetModuleHandleA
SetThreadPriority
EnterCriticalSection
LeaveCriticalSection
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
VirtualFree
InterlockedExchange
GetProcessHeap

user32

CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
TrackPopupMenu
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
RegisterClassA
SetWindowPlacement
CallWindowProcA
GetWindowTextLengthA
GetWindowTextA
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowLongA
SetWindowTextA
GetWindowLongA
IsDialogMessageA
SendDlgItemMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDoubleClickTime
WindowFromPoint
ClientToScreen
IsRectEmpty
PostThreadMessageA
ReleaseCapture
ClipCursor
GetCursorPos
GetMessagePos
IsClipboardFormatAvailable
GetClassInfoA
DefWindowProcA
GrayStringA
ValidateRect
TabbedTextOutA
SetCapture
GetCapture
ScreenToClient
InvertRect
IntersectRect
GetKeyState
PostMessageA
DrawFrameControl
TranslateMessage
DispatchMessageA
DrawTextA
DrawEdge
FrameRect
FillRect
InflateRect
SetRect
SystemParametersInfoA
HideCaret
GetFocus
InsertMenuA
DeleteMenu
InvalidateRect
ReleaseDC
GetDC
FindWindowExA
RegisterWindowMessageA
wsprintfA
SendMessageTimeoutA
LoadIconA
GetSystemMetrics
GetSystemMenu
GetMenu
SendMessageA
DrawIcon
AppendMenuA
CreatePopupMenu
LoadCursorA
GetSysColor
SetCursor
GetParent
PostQuitMessage
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
LoadBitmapA
GetDlgItem
GetClassLongA
SetClassLongA
DeferWindowPos
GetDlgCtrlID
SetWindowPos
GetWindowPlacement
KillTimer
SetTimer
EqualRect
GetWindow
BeginDeferWindowPos
EndDeferWindowPos
EnableWindow
IsWindowVisible
GetClientRect
GetWindowRect
IsZoomed
IsIconic
OffsetRect
CopyRect
IsWindow
UnregisterClassA
CharUpperA
GetSysColorBrush
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
PtInRect
GetMessageA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsChild
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MessageBoxA
DrawTextExA
MapWindowPoints

gdi32

SetBkColor
CreateBitmap
CreateRectRgnIndirect
SaveDC
RestoreDC
SetBkMode
SetMapMode
LineTo
MoveToEx
DeleteObject
GetViewportExtEx
GetWindowExtEx
SetTextColor
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
GetMapMode
GetTextColor
GetRgnBox
GetClipBox
CopyMetaFileA
GetTextMetricsA
PatBlt
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
GetBkColor
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontA
CreatePen
GetCurrentObject
GetDeviceCaps
GetTextExtentPoint32A
CreateFontIndirectA
SelectObject
GetObjectA
CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey

comctl32

ImageList_AddMasked
ImageList_Draw
ord17
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Create

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
ReleaseStgMedium
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
RevokeDragDrop
CoLockObjectExternal
CoTaskMemAlloc
RegisterDragDrop

oleaut32

SystemTimeToVariantTime
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
VariantCopy
SafeArrayDestroy
SysAllocString
OleCreateFontIndirect
VarUdateFromDate

Sections

.text
Size: 584KB - Virtual size: 582KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80c82ab30c0c6956832ce2b77810cd00

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 584KB - Virtual size: 582KB

.rdata Size: 160KB - Virtual size: 156KB

.data Size: 16KB - Virtual size: 30KB

.rsrc Size: 56KB - Virtual size: 53KB

.text
Size: 584KB - Virtual size: 582KB

.rdata
Size: 160KB - Virtual size: 156KB

.data
Size: 16KB - Virtual size: 30KB

.rsrc
Size: 56KB - Virtual size: 53KB