2024-01-27_35614f2920e51abce1a783345cc15171_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-27_35614f2920e51abce1a783345cc15171_icedid
Size

740KB
MD5

35614f2920e51abce1a783345cc15171
SHA1

df024870af242db63ae25cd1b6d0911f48b09424
SHA256

0c3971c8af1f9428e4f7dd8584c11ff19bc274d9e5f845a1a99dba4d9a17aaab
SHA512

7aa619eef0a4deaf60e7c528bbcd67aea4ab101cae36c0a8f83bb1acc25862f0a8c5903e4c4669d6400685be5be7e87449578ae2f7dddd498bb9a8e3247f84b1
SSDEEP

12288:9idqw3lxQnZj5gwxAptvuQ5UV8xAYHWCw1CLOn:9aqw3lWnJ2mAUV8mYHC1G8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-27_35614f2920e51abce1a783345cc15171_icedid

Files

2024-01-27_35614f2920e51abce1a783345cc15171_icedid
.exe windows:5 windows x86 arch:x86

81e366477ec506dee4ed28b363cc15bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
SetErrorMode
GetStartupInfoW
RtlUnwind
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
RaiseException
ExitProcess
ExitThread
CreateThread
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
EnterCriticalSection
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetProcessHeap
SetEnvironmentVariableA
TlsGetValue
LeaveCriticalSection
GlobalFlags
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateEventW
SuspendThread
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
CompareStringA
InterlockedExchange
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
MoveFileW
lstrlenA
lstrcmpA
InterlockedDecrement
GetModuleHandleA
GetCurrentProcessId
FormatMessageW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
FreeResource
SetEvent
SetThreadPriority
GetVersionExA
GetEnvironmentVariableA
ResetEvent
CreateEventA
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalFree
LocalAlloc
LocalLock
LocalFree
LocalUnlock
GetVersionExW
GetACP
GetLocaleInfoW
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameW
GetSystemDefaultLCID
GetTickCount
GetCurrentProcess
TerminateProcess
GetDiskFreeSpaceExW
GetPrivateProfileStringW
WritePrivateProfileStringW
FindFirstFileW
WaitForMultipleObjects
TerminateThread
GetPrivateProfileIntW
WaitForSingleObject
Sleep
ResumeThread
CreateDirectoryW
CreateSemaphoreW
CloseHandle
GetVersion
DeleteFileW
GetLastError
SetLastError
GetProcAddress
GetModuleHandleW
GetWindowsDirectoryW
LoadLibraryW
FreeLibrary
lstrcatW
WinExec
WideCharToMultiByte
MulDiv
lstrlenW
lstrcpyW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
FreeEnvironmentStringsW
SizeofResource

user32

UnregisterClassW
ReleaseCapture
CharNextW
CopyAcceleratorTableW
IsRectEmpty
InvalidateRgn
SetCapture
GetNextDlgGroupItem
RegisterClipboardFormatW
PostThreadMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
CheckMenuItem
DestroyMenu
GetMenuState
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetFocus
GetWindowTextLengthW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MapWindowPoints
SetMenu
IsWindowVisible
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
DefWindowProcW
GetSysColorBrush
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetActiveWindow
MessageBoxW
CreateDialogIndirectParamW
PeekMessageW
IsDialogMessageW
DispatchMessageW
WaitMessage
PostQuitMessage
DestroyWindow
CheckDlgButton
SetFocus
MoveWindow
SetWindowTextW
WinHelpW
GetDialogBaseUnits
GetAsyncKeyState
GetWindowTextW
GetDlgItem
LoadStringW
BeginPaint
EndPaint
SetRect
FillRect
RegisterWindowMessageW
DrawAnimatedRects
FindWindowW
EnumChildWindows
GetClassNameW
GetCursorPos
TrackPopupMenu
DestroyIcon
SetParent
SetActiveWindow
SystemParametersInfoW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
EqualRect
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnableMenuItem
GetDlgCtrlID
SetWindowPos
LoadAcceleratorsW
SetPropW
RemovePropW
GetSystemMetrics
GetSystemMenu
AppendMenuW
DeleteMenu
DrawIcon
GetDesktopWindow
GetWindow
GetPropW
IsIconic
ShowWindow
SetForegroundWindow
GetLastActivePopup
SetWindowContextHelpId
MapDialogRect
IsZoomed
SetRectEmpty
GetMessageW
ValidateRect
CharUpperW
WindowFromPoint
GetWindowDC
ClientToScreen
GetWindowThreadProcessId
CallWindowProcW
GetWindowLongW
RedrawWindow
LockWindowUpdate
UpdateWindow
PostMessageW
CopyRect
GetKeyState
GetMenu
LoadIconW
LoadMenuW
GetMenuItemID
GetMenuItemCount
SetMenuDefaultItem
SetWindowLongW
LoadCursorW
CopyIcon
IsWindow
GetSysColor
GetMessagePos
GetParent
KillTimer
SetTimer
ReleaseDC
GetDC
ScreenToClient
GetClientRect
GetWindowRect
InflateRect
PtInRect
SetCursor
MessageBeep
InvalidateRect
SendMessageW
EnableWindow
CheckMenuRadioItem
GetSubMenu
TranslateAcceleratorW
TranslateMessage

gdi32

SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
SetWindowOrgEx
SetViewportExtEx
GetMapMode
GetCharWidthW
StretchDIBits
GetTextMetricsW
GetBkColor
GetTextColor
GetRgnBox
CreatePen
ScaleViewportExtEx
MoveToEx
LineTo
IntersectClipRect
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
DeleteDC
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
CreateBitmap
GetClipBox
SelectObject
SetBkColor
SetTextColor
DeleteObject
CreateFontW
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetTextExtentPoint32W
GetObjectW
CreateFontIndirectW
GetStockObject
CreateDCW
GetDeviceCaps

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegQueryValueW
RegCloseKey

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFolderPathW
Shell_NotifyIconW
SHAppBarMessage
ShellExecuteW

shlwapi

PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
PathFileExistsW
PathRemoveFileSpecW

oledlg

OleUIBusyW

ole32

CLSIDFromString
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CLSIDFromProgID
CoInitializeEx
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysAllocString
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromDate
VarDateFromStr
SysFreeString

winmm

mixerOpen
mixerGetControlDetailsA
mixerSetControlDetails
mixerGetDevCapsA
mixerClose
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetID
waveInMessage
waveOutMessage
waveInGetNumDevs
waveOutGetNumDevs
waveInPrepareHeader
waveOutPrepareHeader
waveOutReset
waveInReset
waveOutPause
waveInStart
waveOutRestart
waveOutGetPosition
waveOutWrite
waveInAddBuffer
waveInUnprepareHeader
waveOutUnprepareHeader
waveInClose
waveOutClose
waveOutGetDevCapsA
waveInGetDevCapsA
waveOutOpen
waveOutGetErrorTextA
waveInOpen
waveInGetErrorTextA
timeGetTime

Sections

.text
Size: 417KB - Virtual size: 417KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81e366477ec506dee4ed28b363cc15bb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

winmm

Sections

.text Size: 417KB - Virtual size: 417KB

.rdata Size: 104KB - Virtual size: 104KB

.data Size: 14KB - Virtual size: 31KB

.rsrc Size: 203KB - Virtual size: 203KB

.text
Size: 417KB - Virtual size: 417KB

.rdata
Size: 104KB - Virtual size: 104KB

.data
Size: 14KB - Virtual size: 31KB

.rsrc
Size: 203KB - Virtual size: 203KB