2024-01-27_8121eb43a6dc4851eb51287b24328b0c_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-27_8121eb43a6dc4851eb51287b24328b0c_icedid
Size

292KB
MD5

8121eb43a6dc4851eb51287b24328b0c
SHA1

62f979622ffad1a470ed2a50701743255bebed8f
SHA256

fd54cf15e0eef0741395a1a9a7de9f8c12233fa85107e37f659a0717fcf8545b
SHA512

1e04e289f3693a47fecfd50048aa8727564b8d6f1a59b5f2b4e57248611df726a02144ec9f82070d64c62cfca8965f6ea96e6ec5d7d197c50d9c36beb4f9b904
SSDEEP

6144:ATSIj65us0/iUeaxV9hDBG2Eo04y87jlaBrJEFetnjRUM/FU8NxzFz2:WSIW5uhqUegTG1y7jlaBrJEFetnjRUMm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-27_8121eb43a6dc4851eb51287b24328b0c_icedid

Files

2024-01-27_8121eb43a6dc4851eb51287b24328b0c_icedid
.exe windows:4 windows x86 arch:x86

b22d3d8323c23ace3175c11ad3bc460a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
IsBadWritePtr
GetFullPathNameA
GetCurrentDirectoryA
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetOEMCP
GetEnvironmentStrings
SetStdHandle
CreateFileA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleFileNameW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
HeapSize
TerminateProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapReAlloc
GetSystemTimeAsFileTime
RtlUnwind
FindFirstFileA
GetDriveTypeA
HeapAlloc
HeapFree
ExitProcess
GetStartupInfoW
SetErrorMode
FileTimeToLocalFileTime
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetStringTypeExW
GetCurrentDirectoryW
FileTimeToSystemTime
InterlockedIncrement
GlobalFlags
lstrcmpiW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GetFullPathNameW
GetFileTime
GetFileAttributesW
GetTickCount
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
LoadLibraryW
GetLocaleInfoW
lstrcmpA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalGetAtomNameW
WideCharToMultiByte
InterlockedDecrement
GlobalFree
lstrcpyW
GlobalAlloc
lstrcpynW
GlobalLock
GlobalUnlock
MulDiv
SetLastError
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
GetModuleHandleA
LoadLibraryA
FreeLibrary
lstrlenW
lstrcatW
lstrcmpW
GetModuleHandleW
GetProcAddress
GetVersionExA
MultiByteToWideChar
GetVersion
FindResourceW
LoadResource
LockResource
SizeofResource
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateNamedPipeW
GetLastError
FormatMessageW
LocalFree
CreateFileW
CreatePipe
CreateProcessW
CloseHandle
ReadFile
WaitForSingleObject
PeekNamedPipe
GetVersionExW
GetCPInfo

user32

PostThreadMessageW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
CharUpperW
DeleteMenu
IsRectEmpty
GetSysColorBrush
SetRect
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SystemParametersInfoW
GetMenuItemInfoW
InflateRect
GetMessageW
TranslateMessage
ValidateRect
wsprintfW
DestroyMenu
GetActiveWindow
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InvalidateRect
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
GetDesktopWindow
TranslateAcceleratorW
SetMenuItemBitmaps
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
GetMenuState
GetMenuStringW
InsertMenuW
EndPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
IsWindowVisible
UpdateWindow
GetMenu
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
GetParent
ScreenToClient
EqualRect
DeferWindowPos
GetClassInfoW
RegisterClassW
UnregisterClassW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowDC
GetWindowRect
GetSystemMetrics
CopyRect
GetWindow
GetCursorPos
TrackPopupMenu
SetMenuDefaultItem
SetForegroundWindow
KillTimer
PostMessageW
LoadMenuW
GetSubMenu
GetMenuItemID
LoadIconW
SetWindowLongW
ReleaseCapture
LoadCursorW
EnableWindow
SetCapture
RedrawWindow
GetClientRect
SendMessageW
PtInRect
SetCursor
MessageBoxW
BeginPaint

gdi32

CreateSolidBrush
CreateCompatibleBitmap
GetTextExtentPoint32W
SelectObject
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
CreateCompatibleDC
CreateBitmap
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
GetStockObject
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetObjectW
CreateFontIndirectW
SetViewportOrgEx

comdlg32

GetFileTitleW
CommDlgExtendedError
PrintDlgW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueExW
RegOpenKeyExW
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegCloseKey

shell32

Shell_NotifyIconW
DragFinish
DragQueryFileW
ShellExecuteW

comctl32

ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject

oleaut32

SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
SafeArrayDestroy
VariantCopy
SysStringLen
SysFreeString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen

Sections

.text
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b22d3d8323c23ace3175c11ad3bc460a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 196KB - Virtual size: 194KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 28KB - Virtual size: 27KB

.text
Size: 196KB - Virtual size: 194KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 28KB - Virtual size: 27KB