2024-02-11_9713d8c43deb385b7a95b833c4c16eef_icedid_magniber

Sharing

Copy URL

Twitter E-mail

General

Target

2024-02-11_9713d8c43deb385b7a95b833c4c16eef_icedid_magniber
Size

6.1MB
MD5

9713d8c43deb385b7a95b833c4c16eef
SHA1

cde4e90f7d38e7cc3ca0c5866e986354b148119f
SHA256

dc662314bccc2b4e69c46f540553b6196cf2dddcb16f963f2d2eccafbb3c0e38
SHA512

53b62d9fe421a91f592c0ddd6b50c9b56d724d498b5965ffec062951622b2058b2cadc32b680dea40644c900821621fbbbea0bdecc5aa355a0c4ac467ea68b02
SSDEEP

98304:zZiqFS76k8mXoZ74ceW22LYKKi6fuSvuFoxtN75a4BNB:vnrmXoZ22T6fuS6QbNf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-11_9713d8c43deb385b7a95b833c4c16eef_icedid_magniber

Files

2024-02-11_9713d8c43deb385b7a95b833c4c16eef_icedid_magniber
.exe windows:4 windows x86 arch:x86

7c27384ed347469fdc199ea2c01a28a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
LoadLibraryA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
CompareStringA
MapViewOfFile
UnmapViewOfFile
HeapFree
GetProcessHeap
HeapAlloc
FreeLibrary
GetCurrentThread
lstrlenA
VirtualQuery
SetUnhandledExceptionFilter
FindClose
CreateThread
SetLastError
MulDiv
GlobalAlloc
GlobalFree
SetEnvironmentVariableA
GetConsoleOutputCP
WriteConsoleA
CreateFileA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
FindNextChangeNotification
FindCloseChangeNotification
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
ResetEvent
SetEvent
WaitForMultipleObjects
GetExitCodeProcess
WaitForSingleObject
TerminateProcess
GetSystemInfo
Sleep
GetTickCount
SetFilePointer
FlushFileBuffers
GetStdHandle
GetFileSize
ReadFile
InitializeCriticalSection
GetCurrentProcessId
LocalFree
EnterCriticalSection
AllocConsole
LeaveCriticalSection
DeleteCriticalSection
ReleaseMutex
GetCurrentThreadId
GetLastError
GetCurrentProcess
GetLocalTime
GetVersion
WriteFile
CloseHandle
GlobalLock
GlobalUnlock
LoadResource
LockResource
SizeofResource
GetDateFormatA
GetTimeFormatA
GetStringTypeA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
SetConsoleCtrlHandler
LCMapStringA
GetTimeZoneInformation
GetOEMCP
GetACP
VirtualAlloc
FatalAppExitA
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
ExitThread
SetStdHandle
HeapReAlloc
ExitProcess
IsDebuggerPresent
UnhandledExceptionFilter
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
SetErrorMode
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
ConvertDefaultLocale
EnumResourceLanguagesW
SuspendThread
ResumeThread
SetThreadPriority
ReleaseSemaphore
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
GetThreadLocale
InterlockedDecrement
lstrcmpA
GlobalSize
FreeResource
GlobalDeleteAtom
GetVersionExA
GetFileType

advapi32

RegOpenKeyExA
RegCloseKey
FreeSid
IsValidSecurityDescriptor
GetSecurityDescriptorOwner
SetSecurityDescriptorOwner
GetSecurityDescriptorGroup
SetSecurityDescriptorGroup
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
GetSecurityDescriptorDacl
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
GetKernelObjectSecurity
SetKernelObjectSecurity
LookupPrivilegeValueW
AdjustTokenPrivileges
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenProcessToken
GetTokenInformation
RegQueryValueExA

user32

keybd_event
GetDlgCtrlID
OffsetRect
GetWindowRect
MessageBeep
IsWindowVisible
RedrawWindow
IsChild
EnumChildWindows
SetWindowRgn
ReleaseDC
IsWindow
InvalidateRect
GetDC
DestroyIcon
GetClientRect
SetMenuItemBitmaps
TranslateMessage
GetMenu
AdjustWindowRect
SetWindowPos
IsIconic
DrawMenuBar
DrawIcon
TrackPopupMenu
GetWindow
CheckDlgButton
CheckRadioButton
GetDlgItem
GetDlgItemInt
SetDlgItemInt
IsDlgButtonChecked
MoveWindow
ShowWindow
IsWindowEnabled
SetFocus
ScrollWindowEx
GetFocus
GetWindowPlacement
SystemParametersInfoA
IntersectRect
SetWindowPlacement
SetScrollInfo
GetScrollInfo
EqualRect
AdjustWindowRectEx
GetMenuItemCount
UpdateWindow
ShowScrollBar
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
GetKeyState
ScrollWindow
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
CallNextHookEx
GetCapture
SendDlgItemMessageA
RemoveMenu
GetMenuState
BeginPaint
EndPaint
CheckMenuItem
EnableMenuItem
GetMenuCheckMarkDimensions
GetSysColor
EndDialog
GetDialogBaseUnits
IsZoomed
MsgWaitForMultipleObjects
ValidateRect
ShowOwnedPopups
GetWindowThreadProcessId
GetSysColorBrush
SetMenu
BringWindowToTop
CreatePopupMenu
ReleaseCapture
ReuseDDElParam
UnpackDDElParam
GetDCEx
LockWindowUpdate
SetCapture
DeleteMenu
GetSystemMenu
SetParent
UnregisterClassA
SetMenuDefaultItem
SetForegroundWindow
GetMenuItemID
UnionRect
WindowFromDC
GetCursorPos
ChildWindowFromPointEx
ScreenToClient
SetRectEmpty
SetRect
PtInRect
ExitWindowsEx
IsRectEmpty
GetSystemMetrics
GetDesktopWindow
PostQuitMessage
KillTimer
SetTimer
DeferWindowPos
EndDeferWindowPos
BeginDeferWindowPos
GetThreadDesktop
GetUserObjectInformationW
DestroyMenu
DestroyCursor
GetIconInfo
GetSubMenu
TrackPopupMenuEx
SetCursor
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
ClientToScreen
DrawFocusRect
FrameRect
FillRect
InflateRect
CopyRect
GetWindowDC

gdi32

BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetDIBits
DeleteObject
GetViewportOrgEx
RealizePalette
GetStockObject
GetTextColor
GetBkColor
CreateSolidBrush
StretchBlt
CombineRgn
GetDCOrgEx
GetClipBox
CreateRectRgn
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SelectObject
DeleteDC
SetTextColor
SetBkColor
CreateBitmap
PtVisible
RectVisible
Escape
CreateDIBSection
StretchDIBits
SetDIBitsToDevice
CreatePalette
GetDeviceCaps
CreatePen
Rectangle
CreatePolygonRgn
CreateRoundRectRgn
OffsetRgn
FillRgn
FrameRgn
RoundRect
SaveDC
DPtoLP
PatBlt
GetMapMode
SetRectRgn
CreateRectRgnIndirect
CreateHatchBrush
ExtCreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreatePatternBrush
CreateDIBPatternBrushPt
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
GetClipRgn
SelectClipRgn
SetColorAdjustment

comctl32

ord8
_TrackMouseEvent

shlwapi

PathFindExtensionW
PathStripToRootW
PathRemoveExtensionW
PathFindFileNameW
PathIsUNCW

ole32

CoUninitialize
CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CoTreatAsClass
OleDuplicateData
CoDisconnectObject
CoCreateInstance
StringFromGUID2
CLSIDFromString

oleaut32

VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime

shell32

DragFinish

winspool.drv

ClosePrinter

Sections

.text
Size: 880KB - Virtual size: 877KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c27384ed347469fdc199ea2c01a28a3

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

comctl32

shlwapi

ole32

oleaut32

shell32

winspool.drv

Sections

.text Size: 880KB - Virtual size: 877KB

.rdata Size: 176KB - Virtual size: 175KB

.data Size: 16KB - Virtual size: 59KB

.rsrc Size: 5.0MB - Virtual size: 5.0MB

.text
Size: 880KB - Virtual size: 877KB

.rdata
Size: 176KB - Virtual size: 175KB

.data
Size: 16KB - Virtual size: 59KB

.rsrc
Size: 5.0MB - Virtual size: 5.0MB