2024-02-03_c4b034ff35df860e3e301edf0500327c_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-03_c4b034ff35df860e3e301edf0500327c_icedid
Size

1.4MB
MD5

c4b034ff35df860e3e301edf0500327c
SHA1

409d7c77eb4dd74dc04de76850592536ceaf3d84
SHA256

5ce9f38e18eae804adc468a55ebfffaa53e4843c15c82a6649c52ea9541c5297
SHA512

0f8ec0eef02da2c77bf7dd0d190bf08d2c78dffd49d1167a448abc5ce1a605da517cd8dafb06b779815fe7b0c6a1449dc98c67848214487c1a8b19d016f3b483
SSDEEP

24576:Ce4arcO8DRdsxWag6Z2JOt934J7Z6bQaj1BvUm9J:CGcO8DXsxWabUJE3jM2ce

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-03_c4b034ff35df860e3e301edf0500327c_icedid

Files

2024-02-03_c4b034ff35df860e3e301edf0500327c_icedid
.exe windows:4 windows x86 arch:x86

2f9ec0554fdf08256f128f8fee837d28

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\work\MRP\MRP\Help\release\Help.pdb

Imports

kernel32

ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
Sleep
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
RtlUnwind
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
SetErrorMode
LocalFileTimeToFileTime
FileTimeToLocalFileTime
CreateFileW
GetShortPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetStringTypeExW
DeleteFileW
MoveFileW
GetCurrentDirectoryW
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
lstrlenA
GlobalFlags
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
CloseHandle
GlobalGetAtomNameW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
CompareStringW
GetVersionExA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
GetCurrentProcessId
GlobalFree
GlobalAlloc
InterlockedDecrement
MultiByteToWideChar
GlobalLock
GlobalUnlock
GetModuleHandleA
lstrlenW
LocalFree
FormatMessageW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
GetCurrentThreadId
MulDiv
GetTickCount
GetVersionExW
GetVersion
GlobalAddAtomW
FreeResource
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
SetLastError
WideCharToMultiByte
GetModuleFileNameW
GetModuleFileNameA
FindResourceW
LoadResource
LockResource
SizeofResource
LoadLibraryA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCPInfo
GetFileAttributesA

user32

ShowOwnedPopups
FindWindowW
DrawIcon
SetWindowRgn
SetCapture
GetSysColorBrush
IsZoomed
SetCursorPos
WindowFromPoint
UnregisterClassW
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
CharUpperW
GetDCEx
LockWindowUpdate
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
SetParent
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
LoadAcceleratorsW
InsertMenuItemW
SetRectEmpty
ShowWindow
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
TranslateAcceleratorW
BringWindowToTop
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetFocus
SetFocus
GetWindowTextLengthW
GetForegroundWindow
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
GetMessageW
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
DefWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
PostMessageW
PostQuitMessage
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
GetMenuStringW
EndPaint
BeginPaint
GetDC
ScreenToClient
SetCursor
IsWindowVisible
PtInRect
DestroyCursor
LoadCursorW
OffsetRect
IsWindow
GetMenuItemRect
SetMenu
ModifyMenuW
SetMenuInfo
MessageBoxW
CallWindowProcW
GetSubMenu
IsMenu
RemovePropW
InsertMenuW
GetPropW
GetMessagePos
AppendMenuW
GetSysColor
GetWindowLongW
CreatePopupMenu
GetMenuDefaultItem
UnhookWindowsHookEx
DeleteMenu
CopyRect
SetWindowsHookExW
GetMenuItemCount
DrawFocusRect
ReleaseDC
DrawEdge
GetWindowDC
SetWindowPos
RedrawWindow
CallNextHookEx
ClientToScreen
IsRectEmpty
TranslateMessage
ValidateRect
MoveWindow
SetWindowTextW
IsDialogMessageW
GetMenuItemID
SetPropW
SetWindowLongW
SetScrollRange
GetClassNameW
GetMenuState
LoadMenuW
GetWindowRect
GetMenuItemInfoW
WindowFromDC
DestroyIcon
IntersectRect
GetMenuInfo
SystemParametersInfoW
GetDesktopWindow
SetTimer
FrameRect
SetRect
GrayStringW
GetParent
DrawTextExW
DrawTextW
DrawStateW
TabbedTextOutW
GetSystemMetrics
InflateRect
GetWindowTextW
InvalidateRect
LoadBitmapW
GetClientRect
GetCursorPos
GetMenu
KillTimer
UpdateWindow
GetSystemMenu
DestroyMenu
LoadIconW
EnableWindow
FillRect
SendMessageW
EqualRect
UnregisterClassA

gdi32

GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
CreateEllipticRgn
Ellipse
PatBlt
SetRectRgn
GetTextColor
GetRgnBox
ExtSelectClipRgn
LineTo
MoveToEx
SetBkColor
SetBkMode
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
RestoreDC
SaveDC
GetTextMetricsW
CreateBitmap
SetTextColor
DeleteObject
GetNearestColor
CreatePatternBrush
SetBrushOrgEx
UnrealizeObject
GetPixel
SetPixel
GetDeviceCaps
CreateFontIndirectW
SelectClipRgn
FillRgn
CombineRgn
CreateRectRgn
CreateRectRgnIndirect
SelectObject
Escape
GetTextExtentPoint32W
ExtTextOutW
GetBkColor
TextOutW
RectVisible
LPtoDP
PtVisible
RoundRect
CreateFontW
GetMapMode
DPtoLP
Rectangle
BitBlt
CreatePen
CreateCompatibleDC
GetObjectW
GetStockObject
CreateCompatibleBitmap
CreateSolidBrush
DeleteDC

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegDeleteValueW
RegQueryValueW
RegCreateKeyW
GetFileSecurityW
SetFileSecurityW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyW
RegSetValueW
RegCloseKey

shell32

DragFinish
DragQueryFileW
ExtractIconW
SHGetFileInfoW

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
StgOpenStorageOnILockBytes
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries

oleaut32

OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringLen
SysFreeString

Sections

.text
Size: 408KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 944KB - Virtual size: 948KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2f9ec0554fdf08256f128f8fee837d28

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 408KB - Virtual size: 406KB

.rdata Size: 108KB - Virtual size: 104KB

.data Size: 16KB - Virtual size: 29KB

.rsrc Size: 944KB - Virtual size: 948KB

.text
Size: 408KB - Virtual size: 406KB

.rdata
Size: 108KB - Virtual size: 104KB

.data
Size: 16KB - Virtual size: 29KB

.rsrc
Size: 944KB - Virtual size: 948KB