2024-02-02_b6f2103edbb54727322164b9bea2b0b5_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-02_b6f2103edbb54727322164b9bea2b0b5_icedid
Size

1.7MB
MD5

b6f2103edbb54727322164b9bea2b0b5
SHA1

1f3f569aaf38a13c76d69331213fe37d0f978225
SHA256

49a6fe8e74b7cce31ebe6481bb8cd7e110717586da1802e31fec073465760216
SHA512

1bdf4cf4528c37adbc4d6255048fa77dec1904d15bea4fc3a85f30cf3a5f4a82e564fb1e0dc4e5c1077836dd0439ef10df05b031ef900387357074c25d99fa47
SSDEEP

24576:4CoYU2act2/CjOMK0XArhQnm0lWJDzeyi3WckCw1SFGV/aIYo+anfStTB+u/8:472axCAymXZy/zhFGJaIdtnfMTAo8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-02_b6f2103edbb54727322164b9bea2b0b5_icedid

Files

2024-02-02_b6f2103edbb54727322164b9bea2b0b5_icedid
.exe windows:5 windows x86 arch:x86

087a6cd1822939263ba909c5a1bfcc40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapCreate
QueryPerformanceCounter
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
SetStdHandle
GetCurrentDirectoryA
ExitThread
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetDriveTypeA
SetEnvironmentVariableA
ExitProcess
GetDriveTypeW
GetFileType
HeapReAlloc
VirtualQuery
GetSystemInfo
GetSystemTimeAsFileTime
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetStartupInfoW
SetErrorMode
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
UnlockFile
LockFile
lstrcmpiW
GetStringTypeExW
MoveFileW
GetCurrentDirectoryW
FindResourceExW
GetPrivateProfileSectionNamesW
TerminateThread
GetExitCodeThread
EnumResourceNamesW
EnumResourceTypesW
SystemTimeToFileTime
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetModuleHandleA
GetProfileIntW
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
SetFileTime
CreateEventW
SuspendThread
SetEvent
SetThreadPriority
lstrlenA
WritePrivateProfileStringW
InterlockedIncrement
InterlockedDecrement
GlobalGetAtomNameW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
CompareStringA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
lstrlenW
MulDiv
GlobalFree
CopyFileW
GetTimeZoneInformation
GetComputerNameExW
FormatMessageW
LocalFree
GetShortPathNameW
GetLongPathNameW
GetLocaleInfoW
GetTimeFormatW
GetThreadLocale
GetDateFormatW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetVersionExW
GlobalAlloc
FindFirstFileW
FindClose
GetFileAttributesW
HeapAlloc
GetProcessHeap
HeapFree
lstrcmpiA
IsBadReadPtr
VirtualFree
VirtualProtect
VirtualAlloc
GlobalSize
GlobalLock
GlobalUnlock
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
Sleep
CreateProcessW
WaitForSingleObject
GetPrivateProfileStringW
GetCurrentProcessId
DeleteFileW
GetCommandLineW
CreateDirectoryW
GetPrivateProfileIntW
GetUserDefaultLCID
CreateFileW
GetFileTime
GetFileSize
FlushFileBuffers
SetEndOfFile
SetFilePointer
WriteFile
ReadFile
CloseHandle
SetLastError
GetProcAddress
GetTempPathW
GetTickCount
SizeofResource
GetModuleHandleW
LoadLibraryW
FreeLibrary
GetLastError
GetACP
FreeResource
ResumeThread
WideCharToMultiByte
GetModuleFileNameW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource

user32

GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowTextLengthW
GetScrollPos
GetWindow
SetFocus
GetMenuState
GetMenuItemID
InsertMenuW
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
DrawFocusRect
GetClassNameW
EnumChildWindows
GetWindowTextW
SetWindowTextW
IsDialogMessageW
MoveWindow
ShowWindow
GetMenuItemCount
SetMenuItemInfoW
GetMenuStringW
GetSysColorBrush
FillRect
PeekMessageW
DispatchMessageW
TranslateMessage
GrayStringW
DrawTextExW
GetAsyncKeyState
WindowFromPoint
DrawTextW
ClientToScreen
GetWindowRect
PtInRect
IsRectEmpty
CopyRect
LoadImageW
LoadBitmapW
DeferWindowPos
EqualRect
AdjustWindowRectEx
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsWindowVisible
SetMenu
TrackPopupMenu
EnumClipboardFormats
MessageBoxW
LoadStringW
GetCursorPos
MapWindowPoints
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetLastActivePopup
RemovePropW
GetPropW
SetPropW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
GetCapture
IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
CheckMenuItem
EnableMenuItem
ModifyMenuW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EndDialog
MapDialogRect
EnableWindow
GetParent
SendMessageW
PostMessageW
UpdateWindow
DestroyIcon
GetSubMenu
LoadMenuW
SetTimer
KillTimer
RegisterWindowMessageW
IsWindow
GetClientRect
GetSystemMetrics
LoadCursorW
CreatePopupMenu
SetClipboardViewer
ChangeClipboardChain
RegisterClipboardFormatW
IsClipboardFormatAvailable
ScreenToClient
InvalidateRect
GetFocus
OpenClipboard
GetMessagePos
CloseClipboard
SetClipboardData
EmptyClipboard
GetKeyState
GetClipboardData
TranslateMDISysAccel
DrawMenuBar
DefFrameProcW
GetDoubleClickTime
GetKeyNameTextW
MapVirtualKeyW
PostQuitMessage
TranslateAcceleratorW
BringWindowToTop
SetRectEmpty
LockWindowUpdate
GetDCEx
PostThreadMessageW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
CharUpperW
UnregisterClassW
SetParent
GetSystemMenu
DeleteMenu
EndPaint
BeginPaint
GetWindowDC
SetCapture
SetRect
SystemParametersInfoW
GetMenuItemInfoW
InflateRect
ShowOwnedPopups
GetMessageW
ValidateRect
SetWindowContextHelpId
UnpackDDElParam
ReuseDDElParam
DestroyMenu
GetWindowThreadProcessId
SetCursor
ReleaseCapture
LoadAcceleratorsW
InsertMenuItemW
TabbedTextOutW
DrawEdge
SetCursorPos
GetCursor
InvertRect
SetWindowRgn
GetMenuDefaultItem
LookupIconIdFromDirectoryEx
DrawFrameControl
GetWindowRgn
ShowCaret
HideCaret
IsMenu
DrawIconEx
CreateIconIndirect
GetIconInfo
CopyIcon
CreateIconFromResourceEx
DrawStateW
IsZoomed
CreateAcceleratorTableW
ToUnicodeEx
LoadIconW
SetForegroundWindow
GetSysColor
ReleaseDC
GetDC
GetForegroundWindow
RedrawWindow
wsprintfW
DestroyAcceleratorTable
MapVirtualKeyExW
GetKeyboardLayout
IsCharLowerW
GetKeyboardLayoutList
GetKeyboardState

gdi32

SetBkMode
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
RestoreDC
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
PatBlt
SetRectRgn
CombineRgn
DPtoLP
GetTextMetricsW
EnumFontFamiliesExW
CreateFontW
StretchDIBits
GetBkColor
GetTextColor
GetRgnBox
ScaleViewportExtEx
SaveDC
CreateRectRgnIndirect
CreateBitmap
SetTextColor
GetClipBox
CopyMetaFileW
GetDeviceCaps
CreateSolidBrush
Escape
TextOutW
RectVisible
PtVisible
GetTextCharacterExtra
BitBlt
GetMapMode
CreateCompatibleBitmap
CreateFontIndirectW
GetStockObject
SetBkColor
ExtTextOutW
CreateDIBSection
SelectObject
DeleteDC
StretchBlt
GetDIBits
SetPixel
SetDIBits
PtInRegion
Polygon
GetBitmapBits
GetViewportOrgEx
CreateCompatibleDC
GetObjectW
DeleteObject
CreatePatternBrush
GetTextExtentPoint32W
CreatePen

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegEnumKeyW
RegQueryValueExW
RegOpenKeyExW
GetUserNameW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
IsTextUnicode
GetFileSecurityW
SetFileSecurityW
RegCreateKeyW
RegQueryValueW
RegOpenKeyW
RegCloseKey
RegDeleteKeyW
RegSetValueW

shell32

ShellExecuteW
ExtractIconW
Shell_NotifyIconW
DragQueryFileW
SHGetFolderPathW
DragFinish
SHGetFileInfoW
DragAcceptFiles

comctl32

ImageList_GetIconSize
_TrackMouseEvent
ImageList_Destroy
ImageList_GetImageCount
InitCommonControlsEx
ImageList_DrawEx

shlwapi

UrlIsW
PathCombineW
StrCmpIW
PathCreateFromUrlW
StrCpyW
StrStrIA
StrCmpNIW
PathFindExtensionW
StrFormatByteSizeW
StrStrIW
PathAddBackslashW
PathFileExistsW
StrRChrW
StrChrW
UrlUnescapeA
UrlCanonicalizeA
UrlUnescapeW
UrlCanonicalizeW
UrlCombineW
UrlGetPartW
PathRemoveExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW
StrTrimW

oledlg

OleUIAddVerbMenuW
OleUIBusyW

ole32

CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
OleGetClipboard
RevokeDragDrop
RegisterDragDrop
DoDragDrop
OleFlushClipboard
CoDisconnectObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoRevokeClassObject
CoRegisterClassObject
OleDuplicateData
StringFromCLSID
ReleaseStgMedium
CLSIDFromProgID
CoTaskMemFree
StringFromGUID2
CLSIDFromString
OleIsCurrentClipboard
CoUninitialize
CoTaskMemAlloc
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoLockObjectExternal

oleaut32

OleCreateFontIndirect
VarBstrFromDate
VarDateFromStr
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopy
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
VariantInit
SysStringLen
SysAllocStringLen
VariantClear
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocString
SysFreeString
VarUdateFromDate
VariantChangeTypeEx

urlmon

URLDownloadToCacheFileW
URLDownloadToFileW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

gdiplus

GdiplusShutdown

wininet

GetUrlCacheEntryInfoW

winmm

PlaySoundW

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 263KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

087a6cd1822939263ba909c5a1bfcc40

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

version

gdiplus

wininet

winmm

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 263KB - Virtual size: 263KB

.data Size: 38KB - Virtual size: 56KB

.rsrc Size: 252KB - Virtual size: 251KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 263KB - Virtual size: 263KB

.data
Size: 38KB - Virtual size: 56KB

.rsrc
Size: 252KB - Virtual size: 251KB