2024-01-27_4ee4c8926bed6ff6a79904f93da29abb_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-27_4ee4c8926bed6ff6a79904f93da29abb_icedid
Size

711KB
MD5

4ee4c8926bed6ff6a79904f93da29abb
SHA1

392dc0de5a2d88f298d4e7f8323f954b556589ff
SHA256

7882e09ecf322a2b93cfeb2d63362a1d182fa20e124c06f89d057b6c37804fc2
SHA512

5ae775300a4585a7e6632e0eae68849033d39b57c00cff5188db877ee31d2cc83cae513d228881bb76fca4177727fb113e517d95225d0f81ee4e47469ad83eab
SSDEEP

12288:NDgv+Jx009NCBzbVl8dZHvj+coRr8qEFx1lPLHF8kuvusyOHqem3YpSA:i10rCtbVudZHvl4ROxr/uPyOKem3o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-27_4ee4c8926bed6ff6a79904f93da29abb_icedid

Files

2024-01-27_4ee4c8926bed6ff6a79904f93da29abb_icedid
.exe windows:5 windows x86 arch:x86

4afa162dcec3e62b476f07288d116de5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Build_82\EAI\VisFly_82\bin\release\VVCP\Vis2DIPCMain.pdb

Imports

ctl2d

ctl_main_loop
CtlInitializePvdraw
CtlStopPDF

kernel32

GetOEMCP
GetCommandLineA
HeapAlloc
HeapFree
RtlUnwind
RaiseException
VirtualAlloc
HeapReAlloc
HeapSize
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetVersionExA
SetLastError
GetLastError
LocalAlloc
LocalFree
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalLock
GlobalReAlloc
GlobalUnlock
GlobalHandle
GlobalAlloc
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
GlobalFree
TlsFree
GetProcAddress
GetModuleHandleA
InterlockedDecrement
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
GetLocaleInfoA
GlobalFlags
CreateFileA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
lstrcmpW
lstrcmpA
GlobalGetAtomNameA
InterlockedIncrement
GetModuleHandleW
CompareStringA
GetCurrentThreadId
CloseHandle
FreeLibrary
FormatMessageA
MultiByteToWideChar
lstrlenA
GetCurrentProcessId
GetModuleFileNameA
IsValidCodePage

ole32

CoInitialize
CoUninitialize

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

PostQuitMessage
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ClientToScreen
SetWindowTextA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetWindowTextA
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
UnhookWindowsHookEx
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
SendMessageA
GetWindowThreadProcessId
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetSysColorBrush
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
GetKeyState
PeekMessageA
ValidateRect
GetMenuState

gdi32

RestoreDC
SetMapMode
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
SaveDC
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
ExtTextOutA
DeleteObject
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
OffsetViewportOrgEx
GetDeviceCaps

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4afa162dcec3e62b476f07288d116de5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ctl2d

kernel32

ole32

oleacc

user32

gdi32

winspool.drv

oleaut32

Sections

.text Size: 107KB - Virtual size: 107KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 568KB - Virtual size: 572KB

.text
Size: 107KB - Virtual size: 107KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 568KB - Virtual size: 572KB