2024-02-12_b22010e08c5ef3321cccc3c0bf29ca02_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-02-12_b22010e08c5ef3321cccc3c0bf29ca02_icedid
Size

21.1MB
MD5

b22010e08c5ef3321cccc3c0bf29ca02
SHA1

ebaf969d2d4d47b33c85184021e9ac4a0a854947
SHA256

c01436b0e53fc5100e66aa243a86c768d80aba35f647205f803f3d46ade81ed4
SHA512

6a8ceb6c259bb124ee45659c9cd820fede83164ed46eec65173cd46e0c6ef7f3399325180849ac30d85c07283faa9041e29c0bf3dc7ed36b1a5692e584d0a77d
SSDEEP

393216:gN0XTCTP/KZWeLHqrC1/YJuMry5gEakls6lsBkWDeDUYQcliCnkakNW:vyP/KZB+SYNW+kHleDC+cNn7kNW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-12_b22010e08c5ef3321cccc3c0bf29ca02_icedid

Files

2024-02-12_b22010e08c5ef3321cccc3c0bf29ca02_icedid
.exe windows:4 windows x86 arch:x86

93e21bc428b72d871b05b87931b7976d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\Bm358源程序\upgrade\upgrade\Release\upgrade.pdb

Imports

iphlpapi

GetAdaptersInfo

psapi

GetModuleFileNameExA
EnumProcesses
EnumProcessModules

kernel32

GetFileTime
ExitProcess
RtlUnwind
VirtualAlloc
GetStartupInfoA
GetCommandLineA
DebugBreak
HeapReAlloc
HeapSize
QueryPerformanceCounter
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CreateFileW
SetEnvironmentVariableA
FileTimeToLocalFileTime
SetErrorMode
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
RaiseException
WritePrivateProfileStringA
ConvertDefaultLocale
EnumResourceLanguagesA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
GlobalFree
FormatMessageA
LocalFree
InterlockedDecrement
InterlockedIncrement
ReadProcessMemory
GetCurrentThread
SuspendThread
GetThreadContext
GetFileAttributesA
ResumeThread
SetThreadPriority
ReleaseSemaphore
CreateSemaphoreA
GetSystemTimeAsFileTime
OutputDebugStringA
GetWindowsDirectoryA
FlushInstructionCache
VirtualProtect
SetLastError
GetCurrentProcess
WriteProcessMemory
VirtualQuery
GetCurrentProcessId
GetSystemInfo
GetSystemTime
MulDiv
SetEvent
CreateEventA
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
HeapFree
GetProcessHeap
HeapAlloc
ReleaseMutex
GetLocalTime
CreateMutexA
FreeLibrary
LoadLibraryA
GetTempPathA
GetTempFileNameA
GetModuleFileNameA
lstrcpyA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetModuleHandleA
GetProcAddress
lstrcmpA
lstrcpynA
GetCurrentThreadId
CreateThread
CloseHandle
ExitThread
GetCurrentDirectoryA
SetCurrentDirectoryA
DeleteFileA
CreateDirectoryA
GetSystemDirectoryA
CopyFileA
FreeResource
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
TerminateProcess
OpenProcess
FindResourceA
LoadResource
LockResource
SizeofResource
GetEnvironmentVariableA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
Sleep
GetStdHandle

user32

RegisterClipboardFormatA
PostThreadMessageA
EndDialog
TranslateMessage
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuA
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
WinHelpA
GetClassInfoExA
SendDlgItemMessageA
IsChild
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
GetMessageTime
PeekMessageA
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
GetDlgCtrlID
CreateIconIndirect
GetCapture
GetMessagePos
MapWindowPoints
CopyRect
CopyIcon
LoadImageA
DestroyCursor
GetWindowPlacement
DrawMenuBar
EqualRect
GetMenuItemID
GetSubMenu
ValidateRect
DestroyIcon
IntersectRect
GetWindowWord
SetRect
GetFocus
SetFocus
EnumChildWindows
DrawStateA
DrawTextW
DrawFrameControl
LoadStringA
wsprintfA
GetCursor
GetDC
ShowScrollBar
SetScrollRange
SetScrollPos
SetScrollInfo
GetScrollRange
GetScrollPos
GetScrollInfo
EnableScrollBar
SetWindowContextHelpId
GetClassLongA
DrawIconEx
EnableMenuItem
DestroyMenu
GetMenuItemCount
CreatePopupMenu
InsertMenuItemA
GetMenuItemInfoA
GetDesktopWindow
LockWindowUpdate
GetKeyboardLayoutList
GetKeyboardLayout
MapVirtualKeyExA
ToUnicodeEx
IsWindowVisible
GetCursorPos
SetCapture
ReleaseCapture
ScreenToClient
DestroyWindow
DrawEdge
FillRect
BeginPaint
EndPaint
SetCursor
PtInRect
KillTimer
SetForegroundWindow
SetTimer
UpdateWindow
UnregisterClassA
LoadCursorA
RegisterClassExA
CreateWindowExA
ClientToScreen
GetKeyState
CopyAcceleratorTableA
GetMenu
SetMenu
OffsetRect
IsRectEmpty
IsMenu
GetWindowInfo
GetWindow
IsZoomed
MoveWindow
ShowWindow
ReleaseDC
GetWindowDC
GetWindowRect
SystemParametersInfoA
GetWindowTextA
SetWindowRgn
SetWindowPos
RemovePropA
SetPropA
SetWindowLongA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CallWindowProcA
DefWindowProcA
GetSysColorBrush
GetMessageA
DispatchMessageA
UnhookWindowsHookEx
SetWindowsHookExA
GetParent
GetWindowLongA
GetActiveWindow
GetClassNameA
GetPropA
GetMenuState
IsWindowEnabled
CallNextHookEx
MessageBoxA
GetSystemMetrics
LoadIconA
IsIconic
CharNextA
GetIconInfo
GetSystemMenu
PostMessageA
SendMessageA
AppendMenuA
DrawIcon
GetSysColor
IsWindow
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
EnableWindow
RedrawWindow
InvalidateRect
GetClientRect
CharUpperA
CharLowerA
MapDialogRect
CreateDialogIndirectParamA
InflateRect
GetNextDlgTabItem
CharUpperBuffA

gdi32

SetDIBitsToDevice
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetMapMode
GetBkColor
GetTextColor
CreateDIBSection
CreateDIBitmap
SaveDC
RestoreDC
Polygon
StretchBlt
GetDeviceCaps
SelectPalette
RealizePalette
CreateBitmap
SetBkColor
GetObjectA
CreateICA
GetDIBits
SetMapMode
GetDCOrgEx
CreatePatternBrush
SetBrushOrgEx
PatBlt
UnrealizeObject
GetRgnBox
IntersectClipRect
CreatePen
Rectangle
MoveToEx
LineTo
SetPixel
GetTextExtentPoint32A
GetClipRgn
SelectClipRgn
GetPixel
ExcludeClipRect
GetTextMetricsA
PtInRegion
StretchDIBits
GetClipBox
ExtSelectClipRgn
RectVisible
PtVisible
BitBlt
CreateCompatibleDC
CreateRectRgn
CreateCompatibleBitmap
DeleteDC
GetRegionData
ExtCreateRegion
GetTextExtentPointA
CreateSolidBrush
GetStockObject
CreateRectRgnIndirect
OffsetRgn
CombineRgn
SetBkMode
CreateFontIndirectA
SelectObject
SetTextColor
GetLayout
SetLayout
DeleteObject
Escape
ExtTextOutA
TextOutA
SetStretchBltMode

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueA
GetUserNameA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA

shell32

ExtractIconExA

comctl32

ImageList_Create
ord17
ImageList_DrawEx
ImageList_GetIconSize
_TrackMouseEvent
ImageList_Draw
ImageList_GetIcon
ImageList_Destroy
ImageList_GetImageCount
ImageList_Remove
ImageList_AddMasked

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathFileExistsA
PathIsUNCA

oledlg

ord8

ole32

StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CreateILockBytesOnHGlobal
OleUninitialize
CoTaskMemFree
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc

oleaut32

SafeArrayDestroy
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
VariantCopy
OleCreateFontIndirect
SysAllocString
SystemTimeToVariantTime

imagehlp

ImageDirectoryEntryToData

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ws2_32

closesocket
select
inet_addr
send
setsockopt
shutdown
getsockopt
WSAGetLastError
connect
ioctlsocket
socket
WSAStartup
htons
recv

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19.7MB - Virtual size: 19.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93e21bc428b72d871b05b87931b7976d

Headers

File Characteristics

PDB Paths

Imports

iphlpapi

psapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

imagehlp

version

ws2_32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 128KB - Virtual size: 127KB

.data Size: 12KB - Virtual size: 95KB

.rsrc Size: 19.7MB - Virtual size: 19.7MB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 128KB - Virtual size: 127KB

.data
Size: 12KB - Virtual size: 95KB

.rsrc
Size: 19.7MB - Virtual size: 19.7MB