2024-02-13_6c74e8237db215177d211b8c94a3545a_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-13_6c74e8237db215177d211b8c94a3545a_icedid
Size

830KB
MD5

6c74e8237db215177d211b8c94a3545a
SHA1

d643d5cc4a2f4e3dc9d311c0e8e34606ba6f8ce8
SHA256

3111de44ec0d4ed43b156f6bcf146a3e0ffd40fcd1083da04a1722e513003c90
SHA512

e755ee03c7b71e16d157424eca2a6d55c59866cea051581d970f8b1b9156065f32b4b8d8c7adca5a18dffc2ff4b2bb61211a0b36627a11884a905ae9d1abb7ad
SSDEEP

24576:Nh8lZUbtTjeIWAn/exA7pGl0CoOjlvuVVNiQDeklav1hNNGeEaLqpHth:+UxTKIWA/ClXnjlvuVVNiQDeklav1hNO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-13_6c74e8237db215177d211b8c94a3545a_icedid

Files

2024-02-13_6c74e8237db215177d211b8c94a3545a_icedid
.exe windows:5 windows x86 arch:x86

a318bcc91048b573b7aba7eb19f6dd2b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

shlwapi

PathIsDirectoryA
PathAddBackslashA

imagehlp

MakeSureDirectoryPathExists

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

IsDBCSLeadByteEx
FreeLibrary
GetACP
GetModuleFileNameA
LoadLibraryA
GetFileTime
OpenProcess
CloseHandle
GetProcAddress
GetModuleHandleA
GetPrivateProfileStringA
SetFileTime
DeleteFileA
SetFileAttributesA
MoveFileA
SetCurrentDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryA
WaitForSingleObject
GetFileSize
SetFilePointer
GetLastError
ReadFile
WriteFile
CreateFileA
DuplicateHandle
GetCurrentProcess
GlobalFree
GlobalAlloc
LCMapStringA
FindClose
FindFirstFileA
GetVersionExA
HeapAlloc
HeapFree
HeapReAlloc
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetCPInfo
VirtualAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
LCMapStringW
WriteConsoleA
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
HeapCreate
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount

user32

EnableWindow
IsWindowEnabled
LoadIconA
SetClassLongA
GetDlgItem
GetWindowTextA
DialogBoxParamA
EndDialog
GetSystemMetrics
ShowWindow
SetWindowPos
SendDlgItemMessageA
SetWindowTextA
PostMessageA
FindWindowA
MessageBoxA
LoadStringA
SendMessageA
GetDesktopWindow
GetWindowRect

gdi32

DeleteObject
CreateFontIndirectA

advapi32

RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
SHGetSpecialFolderLocation
ShellExecuteA

ole32

CoTaskMemFree

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a318bcc91048b573b7aba7eb19f6dd2b

Headers

DLL Characteristics

File Characteristics

Imports

winmm

shlwapi

imagehlp

version

kernel32

user32

gdi32

advapi32

shell32

ole32

Sections

.text Size: 131KB - Virtual size: 131KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 6KB - Virtual size: 18KB

.rsrc Size: 32KB - Virtual size: 32KB

.text
Size: 131KB - Virtual size: 131KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 6KB - Virtual size: 18KB

.rsrc
Size: 32KB - Virtual size: 32KB