2024-01-28_f29549d9c4d4d8f22c7ad0fd379a79b4_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-01-28_f29549d9c4d4d8f22c7ad0fd379a79b4_icedid
Size

444KB
MD5

f29549d9c4d4d8f22c7ad0fd379a79b4
SHA1

e7951dba26ac2c48c5bb444f89124798920a4e89
SHA256

16428cd91d24d3360fd703070134b3dd23daaa796a1751e38c994383be10200b
SHA512

d3f72554c8d99a6fb5b8e0a12a004b43241fc910a9e3d9254a65f4bd7c81815dd1df1ba70e716cb7f8d58270c0ea08648799cdd0699684d344e84e04d6f80a27
SSDEEP

6144:zCxKk0xInQtBxb1fXyM1nxiOO9M0lbBCBcZoTMcvwYHgkhPs5WxUPgWMvS3sqm/4:zgatBLX1MOO9M0lbBeTz5HpdGh9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-28_f29549d9c4d4d8f22c7ad0fd379a79b4_icedid

Files

2024-01-28_f29549d9c4d4d8f22c7ad0fd379a79b4_icedid
.exe windows:4 windows x86 arch:x86

e9acef256ecac9efc608dbc7b344e346

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

DrawDibOpen
DrawDibDraw
DrawDibClose

kernel32

GetCurrentProcessId
GetTimeZoneInformation
IsBadWritePtr
GetTimeFormatA
GetDateFormatA
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetTickCount
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
SizeofResource
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
HeapSize
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapReAlloc
TerminateProcess
HeapAlloc
CreateThread
ExitThread
HeapFree
GetSystemTimeAsFileTime
ExitProcess
RtlUnwind
GetStartupInfoW
SetErrorMode
WritePrivateProfileStringW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
SetEndOfFile
UnlockFile
LockFile
LockResource
LoadResource
FindResourceW
FlushFileBuffers
lstrcmpiW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalGetAtomNameW
InterlockedDecrement
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcpyW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
LoadLibraryA
lstrcatW
lstrcmpW
GetVersionExA
SuspendThread
GetCurrentThreadId
SetThreadPriority
FreeResource
GetComputerNameW
GetTimeFormatW
GetLocaleInfoW
GetLocalTime
GetSystemDefaultLCID
SetFilePointer
ReadFile
lstrlenW
CreateFileMappingW
GetFileSize
CreateFileW
WriteFile
MulDiv
GlobalSize
MultiByteToWideChar
GlobalHandle
GlobalUnlock
GlobalReAlloc
GlobalLock
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
FormatMessageW
LocalFree
GetDateFormatW
lstrcpynW
GlobalAlloc
GlobalFree
CreateEventW
GetExitCodeThread
ResetEvent
GetCurrentProcess
DuplicateHandle
ResumeThread
SetEvent
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
WideCharToMultiByte
WaitForSingleObject
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
LoadLibraryW
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
FreeLibrary

user32

GetSysColorBrush
CharUpperW
IsZoomed
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
CreatePopupMenu
BringWindowToTop
SetMenu
TranslateAcceleratorW
ReleaseCapture
WindowFromPoint
SetCapture
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextW
TabbedTextOutW
ShowOwnedPopups
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
SetWindowTextW
IsDialogMessageW
GetDlgItemInt
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
SetRect
GetMessagePos
MapWindowPoints
TrackPopupMenu
GetMenuItemID
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoW
RegisterClassW
UnregisterClassW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
ValidateRect
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
DrawTextExW
SetRectEmpty
InflateRect
SetCursorPos
CharNextW
DestroyAcceleratorTable
LoadAcceleratorsW
PeekMessageW
GetSystemMetrics
SetTimer
KillTimer
GetKeyState
wsprintfW
SetCursor
GetCursorPos
LoadCursorW
GetTopWindow
GetFocus
RedrawWindow
IsWindowVisible
ScreenToClient
GetClientRect
GetMenu
GetDCEx
LockWindowUpdate
SetParent
GetMessageTime
LoadMenuW
RemoveMenu
GetSubMenu
GetMenuState
FillRect
UnionRect
PtInRect
CopyRect
IsIconic
ShowWindow
DrawStateW
GetDC
ReleaseDC
IntersectRect
PostMessageW
SetForegroundWindow
MessageBoxW
LoadIconW
UpdateWindow
OffsetRect
SendMessageW
EnableWindow
InvalidateRect
SetFocus

gdi32

SetDIBits
GetTextMetricsW
SetWinMetaFileBits
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
SetTextAlign
SetColorAdjustment
SelectClipRgn
GetClipRgn
SelectClipPath
GetPixel
SetStretchBltMode
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
OffsetViewportOrgEx
ScaleViewportExtEx
MaskBlt
ScaleWindowExtEx
GetCurrentPositionEx
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreatePen
SetRectRgn
GetMapMode
GetCharWidthW
GetBkColor
StretchDIBits
PlayEnhMetaFile
DeleteEnhMetaFile
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
SetMetaFileBitsEx
PlayMetaFile
DeleteMetaFile
CreateFontW
CreateDCW
GetStockObject
StrokePath
StrokeAndFillPath
CreateRectRgn
PaintRgn
PlgBlt
MoveToEx
GetTextCharset
AddFontResourceW
GetDIBits
GetTextExtentPoint32W
SetMiterLimit
FillPath
CloseFigure
GetColorAdjustment
Ellipse
SetBrushOrgEx
GetBrushOrgEx
CombineRgn
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateBitmapIndirect
CreateBitmap
CreatePatternBrush
CreateBrushIndirect
ExtCreatePen
GetEnhMetaFileW
GetEnhMetaFileHeader
SetWindowOrgEx
PolyBezier
EndPath
BeginPath
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
Rectangle
PatBlt
BitBlt
StretchBlt
GetCurrentObject
DeleteObject
CreateDIBSection
CreateSolidBrush
CreateDIBPatternBrushPt
GetDeviceCaps
Polygon
SelectPalette

msimg32

GradientFill
AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
GetPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
GetUserNameW
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCloseKey

shell32

DragQueryFileW
DragFinish

comctl32

ImageList_Destroy
ImageList_Create
ord17
ImageList_Draw
ImageList_GetImageInfo

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oleaut32

SysAllocStringLen
VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9acef256ecac9efc608dbc7b344e346

Headers

File Characteristics

Imports

msvfw32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Sections

.text Size: 348KB - Virtual size: 348KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 32KB - Virtual size: 32KB

.text
Size: 348KB - Virtual size: 348KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 32KB - Virtual size: 32KB