2024-02-04_f03bb5dd1932b5ffa9827b94baf39b0e_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-02-04_f03bb5dd1932b5ffa9827b94baf39b0e_icedid
Size

396KB
MD5

f03bb5dd1932b5ffa9827b94baf39b0e
SHA1

bfc1c332936c35e74ccf5d724ad18c13d54ebb9d
SHA256

40171381ada6a5d9f4482f2ea22290481f16a7369cae8c27366c9ff2e9ca7cb1
SHA512

a84d5e195c6b5eccfcc2bf833bb4bb29bd54091d0593b878085d24c77f9ac426f1379bcfee4af1e35bb6e0569fd4e956f19145bee12a4ab4e49cb68022256273
SSDEEP

12288:vzPeVGxN3hNlc65QnxM52rlFnXOzLly4aYnrMyp:qVSN3hNlcxx82rlBt49nrlp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-04_f03bb5dd1932b5ffa9827b94baf39b0e_icedid

Files

2024-02-04_f03bb5dd1932b5ffa9827b94baf39b0e_icedid
.exe windows:4 windows x86 arch:x86

2ee718d1982b0bd6519c1dd44cf61da6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\WindowProject\HanafosPDS\HanafosPDS\Release\HanafosPDS.pdb

Imports

kernel32

GetStartupInfoA
ExitThread
CreateThread
HeapReAlloc
TerminateProcess
HeapSize
SetStdHandle
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
VirtualQuery
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetVersionExA
GetSystemInfo
VirtualAlloc
VirtualProtect
GetSystemTimeAsFileTime
RtlUnwind
HeapAlloc
HeapFree
ExitProcess
SetErrorMode
GetFileTime
GetFileAttributesA
GetOEMCP
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
GlobalFlags
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
InterlockedIncrement
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpA
SuspendThread
SetThreadPriority
RaiseException
InterlockedDecrement
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
GetModuleHandleA
lstrcpynA
IsDBCSLeadByteEx
GetNumberFormatA
FindFirstFileA
FindClose
CreateDirectoryA
GetDiskFreeSpaceExA
GetProcAddress
CompareStringW
CompareStringA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
GetCommandLineA
CreateMutexA
GetLastError
ReleaseMutex
SetEvent
SleepEx
WritePrivateProfileStringA
GetTickCount
ResetEvent
OpenFileMappingA
MapViewOfFile
lstrcpyA
CreateEventA
InitializeCriticalSection
CreateFileA
DeleteFileA
GetPrivateProfileIntA
DeleteCriticalSection
CloseHandle
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
ResumeThread
Sleep
FreeResource
GetCPInfo
lstrlenA
lstrcmpiA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
MultiByteToWideChar
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersion
GetStdHandle

user32

RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
CreateDialogIndirectParamA
EndDialog
CharNextA
wsprintfA
EndPaint
BeginPaint
GetWindowDC
GetMessageA
ValidateRect
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
MapWindowPoints
MessageBoxA
IsWindowVisible
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
UnregisterClassA
SetWindowPos
IntersectRect
GetWindowPlacement
GetWindow
DefWindowProcA
GetDlgCtrlID
GetKeyState
GetCursorPos
IsChild
GetCapture
GetFocus
GetForegroundWindow
BringWindowToTop
SetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
CharUpperA
CallWindowProcA
UpdateWindow
IsRectEmpty
SetWindowLongA
LoadCursorA
CopyIcon
MessageBeep
IsWindow
GetMessagePos
ScreenToClient
PtInRect
LoadIconA
PostThreadMessageA
KillTimer
SetTimer
RedrawWindow
IsIconic
DrawIcon
LoadImageA
TrackPopupMenuEx
PostMessageA
SetCursor
DestroyCursor
DestroyMenu
GetWindowLongA
WindowFromPoint
GetParent
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
SetCapture
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
DrawFocusRect
FrameRect
OffsetRect
InflateRect
GetIconInfo
CreateIconIndirect
DrawStateA
PeekMessageA
TranslateMessage
DispatchMessageA
GetSystemMetrics
SystemParametersInfoA
DestroyIcon
ReleaseCapture
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
EnableWindow
GetDesktopWindow
ReleaseDC
GetDC
ModifyMenuA
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
LoadBitmapA
GetSysColorBrush
FillRect
GetSysColor
CopyRect
SetRect
EqualRect

gdi32

ExtSelectClipRgn
CreateRectRgnIndirect
GetMapMode
GetTextColor
GetRgnBox
GetClipBox
GetCurrentObject
GetBkColor
CreateRectRgn
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
SaveDC
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
MoveToEx
LineTo
SetMapMode
SetBkMode
DeleteDC
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextExtentPoint32A
SetPixel
GetPixel
GetDeviceCaps
GetObjectA
CreateCompatibleBitmap
CreateFontIndirectA
CreatePen
CreateCompatibleDC
SelectObject
BitBlt
CreateSolidBrush
DeleteObject
RestoreDC

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA

shell32

SHGetFileInfoA
ShellExecuteA
SHGetSpecialFolderPathA
ShellExecuteExA

comctl32

_TrackMouseEvent
ord17
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_GetImageInfo
ImageList_Destroy
ImageList_DrawIndirect

shlwapi

PathStripToRootA
PathIsUNCA
PathFindExtensionA
UrlUnescapeA
PathFindFileNameA

oledlg

ord8

ole32

CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
OleInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysStringLen
VariantInit
VariantChangeType
SysAllocStringLen
VariantClear
SysFreeString

ws2_32

gethostbyname
WSACleanup
WSAStartup
closesocket
WSAGetLastError
recv
__WSAFDIsSet
select
connect
WSASetLastError
ioctlsocket
htons
inet_addr
setsockopt
socket
send

wininet

InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetCloseHandle

winmm

PlaySoundA

imagehlp

MakeSureDirectoryPathExists

Sections

.text
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ee718d1982b0bd6519c1dd44cf61da6

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

winmm

imagehlp

Sections

.text Size: 264KB - Virtual size: 263KB

.rdata Size: 68KB - Virtual size: 65KB

.data Size: 12KB - Virtual size: 23KB

.rsrc Size: 48KB - Virtual size: 47KB

.text
Size: 264KB - Virtual size: 263KB

.rdata
Size: 68KB - Virtual size: 65KB

.data
Size: 12KB - Virtual size: 23KB

.rsrc
Size: 48KB - Virtual size: 47KB