2024-02-03_e0ae6f51e6170bc8c82521703e95c626_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-03_e0ae6f51e6170bc8c82521703e95c626_icedid
Size

1.6MB
MD5

e0ae6f51e6170bc8c82521703e95c626
SHA1

7993fed2f6a960f7517ca98a3ae86ceb25ddbc56
SHA256

05f9608ba1f1c06f4851144c55de4d452e50b80b4023fc1562534674e2aa781a
SHA512

026bf8ff3fe8d844d5d7e8ee90dbcec847cd194f0c21cbadc443eed92d177c1a7d789ef822a393a10fb3c31d3bcb05bb2cc549ddaa9cb677082995805121a198
SSDEEP

12288:X5XO7LaQEnUCyt87yEcm9CztF3zDE2222O22j22wyK/PNgN3m1i:XNO7LaQ9C0TIoRFnE2222O22j222

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-03_e0ae6f51e6170bc8c82521703e95c626_icedid

Files

2024-02-03_e0ae6f51e6170bc8c82521703e95c626_icedid
.exe windows:4 windows x86 arch:x86

854487021d451f991066794db870f400

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
PathFileExistsW

shfolder

SHGetFolderPathW

kernel32

ExitThread
CreateThread
RemoveDirectoryW
GetSystemTimeAsFileTime
ExitProcess
TerminateProcess
HeapAlloc
HeapReAlloc
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetTimeZoneInformation
QueryPerformanceCounter
GetCurrentProcessId
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetDriveTypeA
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
RtlUnwind
GetStartupInfoW
GetTickCount
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
InterlockedIncrement
WritePrivateProfileStringW
GlobalGetAtomNameW
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetStringTypeExW
GlobalFindAtomW
lstrlenA
lstrcatW
GetVersionExA
GetModuleHandleA
InterlockedDecrement
FreeResource
LoadLibraryA
SetLastError
FormatMessageW
lstrcpynW
LocalFree
SuspendThread
SetThreadPriority
GlobalAddAtomW
GetCurrentThread
GetCurrentThreadId
lstrcmpW
FreeLibrary
GlobalDeleteAtom
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcpyW
LoadLibraryW
GetLocaleInfoW
OpenEventW
OutputDebugStringW
Sleep
WideCharToMultiByte
GetWindowsDirectoryW
GetLastError
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrlenW
GlobalLock
GlobalUnlock
MulDiv
GlobalFree
CreateEventW
ResumeThread
GlobalAlloc
SetEvent
WaitForSingleObject
CloseHandle
ResetEvent
SetCurrentDirectoryW
GetCurrentDirectoryW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
DeleteFileW
MultiByteToWideChar
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
FindResourceW
LoadResource
LockResource
SizeofResource
VirtualFree

user32

PostThreadMessageW
RegisterClipboardFormatW
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
IsRectEmpty
CharNextW
MessageBeep
GetSysColorBrush
DeleteMenu
LoadMenuW
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
CharUpperW
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageA
IsChild
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
MessageBoxW
TrackPopupMenu
GetScrollRange
GetScrollPos
SetForegroundWindow
GetMenu
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
GetClassInfoW
RegisterClassW
DefWindowProcW
CallWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
UnhookWindowsHookEx
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
EndDialog
GetWindow
SetWindowContextHelpId
MapDialogRect
GetWindowTextW
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
GetWindowLongW
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
SetMenuItemBitmaps
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
SetWindowsHookExW
CallNextHookEx
GetMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
ShowOwnedPopups
PostQuitMessage
PeekMessageW
TranslateMessage
DispatchMessageW
GetWindowTextLengthW
wsprintfW
LoadImageW
DestroyIcon
LoadCursorW
SetCursor
IsWindow
ReleaseCapture
SetCapture
PtInRect
UpdateWindow
SetRect
GetSysColor
FillRect
GetSystemMetrics
UnregisterClassW
LoadIconW
SetWindowRgn
IsIconic
GetSystemMenu
AppendMenuW
DrawIcon
GetWindowRect
DrawIconEx
CopyRect
EnableWindow
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SendMessageW
GetParent
KillTimer
SetTimer
InvalidateRect
ReleaseDC
GetDC
GetClientRect
PostMessageW
LoadBitmapW
GetNextDlgTabItem

gdi32

GetTextColor
GetRgnBox
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetPixel
GetBkColor
GetViewportExtEx
DPtoLP
GetMapMode
CreateRectRgnIndirect
CreatePen
MoveToEx
LineTo
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetWindowExtEx
PtVisible
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetStockObject
Rectangle
GetTextExtentPoint32W
CreateFontW
CreateFontIndirectW
GetDeviceCaps
DeleteObject
DeleteDC
SelectObject
CreateRoundRectRgn
StretchBlt
GetObjectW
CreateSolidBrush
Escape
ExtTextOutW
TextOutW
RectVisible
SetWindowOrgEx

msimg32

TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueW
RegDeleteValueW
RegCloseKey

shell32

DragQueryFileW
DragFinish
ExtractIconW
SHGetSpecialFolderPathW

comctl32

_TrackMouseEvent
ImageList_ReplaceIcon
ord17
ImageList_Destroy
ImageList_Create
ImageList_Draw
ImageList_GetImageInfo

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SafeArrayDestroy
SysFreeString
SysStringLen
SysAllocStringLen
OleCreateFontIndirect
VariantClear
VariantChangeType
VariantInit
SysAllocString
SystemTimeToVariantTime
OleLoadPicture
VariantCopy

winmm

timeGetTime

wininet

DeleteUrlCacheEntryW
FindCloseUrlCache
FindFirstUrlCacheEntryW
FindNextUrlCacheEntryW

Sections

.text
Size: 264KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

854487021d451f991066794db870f400

Headers

File Characteristics

Imports

shlwapi

shfolder

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

winmm

wininet

Sections

.text Size: 264KB - Virtual size: 260KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 264KB - Virtual size: 260KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB