2024-02-13_a7f4edbe1cbb7716537c00c843aa054e_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-13_a7f4edbe1cbb7716537c00c843aa054e_icedid
Size

3.2MB
MD5

a7f4edbe1cbb7716537c00c843aa054e
SHA1

4a68f5769070fc8802c714dbe40c7a17057403ed
SHA256

58e2cc6012db3f1acfcb4b399194e8297d63d16e3d222c338a5a18d3c922cadc
SHA512

96d195ca00b9a54d1662706c361d64556845694c77001f7f5ebc0dc56d7e1b1b6e36de5022137928141478c2d8124d4ab7052e71e0957211621fa80f145da9df
SSDEEP

98304:Js0PRKterA46BRu7IU3lb3Rs/LsNxc1kWw9yMYxGpn2ZE:J7P9rz6BRu7IU3lb3Rs/LsNxc1kWw9Tk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-13_a7f4edbe1cbb7716537c00c843aa054e_icedid

Files

2024-02-13_a7f4edbe1cbb7716537c00c843aa054e_icedid
.exe windows:4 windows x86 arch:x86

f11931b74d0f5ca7f5776950106f9aae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

c4dll323

d4seek
_d4goLow2@16
d4lockInternal
d4recCountDo2
d4unlock
d4fieldJ
f4type
f4memoAssignN
u4freeDefault
file4seqRead
file4seqReadInit
u4allocDefault
d4deleted
d4recordLow
d4recWidthLow
d4optimize
d4recNoLow
d4recall
d4eof
d4skip
u4ncpy
d4append
d4appendStart
d4blank
d4bottom
d4top
d4position
d4bof
d4delete
c4atol
d4close
c4ltoa45
f4dateTime
f4currency
code4indexFormat
d4lockTest
i4close
d4flush
i4open
error4default
d4changed
f4assignNotNull
d4tagSelect
f4ptr
f4len
f4decimals
f4long
d4field
d4tagNext
d4open
d4fieldNumber
code4initUndo
c4dtoa45
code4initLow

polspell

ord121
ord132
ord140
ord120
ord110
ord133
ord144
ord143
ord145
ord102
ord103
ord100
ord141
ord142
ord131
ord130
ord109
ord101

kernel32

GetFileTime
LocalAlloc
GlobalHandle
LocalReAlloc
GlobalFlags
GetTempFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
ResumeThread
SetThreadPriority
GetVolumeInformationA
DuplicateHandle
GetFileSize
UnlockFile
LockFile
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
CopyFileA
FormatMessageA
LocalFree
GetLocaleInfoW
SetEndOfFile
FindResourceExA
GetProfileIntA
CreateThread
ExitThread
Sleep
SearchPathA
GetTempPathA
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
OutputDebugStringA
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
WideCharToMultiByte
FindResourceA
SizeofResource
LockResource
LoadResource
GetVersion
MultiByteToWideChar
lstrlenW
GetLastError
CompareStringW
CompareStringA
GetStringTypeExA
lstrcmpiA
lstrlenA
DeleteFileA
GetWindowsDirectoryA
GetPrivateProfileStringA
_lclose
_llseek
_lread
_lopen
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetPrivateProfileIntA
CloseHandle
LeaveCriticalSection
EnterCriticalSection
SetStdHandle
SetEnvironmentVariableA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetDateFormatA
GetTimeFormatA
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
ReadFile
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetTimeZoneInformation
GetCurrentDirectoryA
GetFullPathNameA
LCMapStringW
LCMapStringA
HeapSize
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualFree
HeapCreate
HeapDestroy
GetCPInfo
GetOEMCP
GetCurrentProcessId
QueryPerformanceCounter
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
TlsAlloc
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
CreateDirectoryA
GetSystemTimeAsFileTime
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetFileAttributesA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
RtlUnwind
InterlockedDecrement
InterlockedIncrement
lstrcpyA
ExitProcess
WriteFile
CreateFileA
_lcreat
_lwrite
lstrcpynA
MulDiv
GetDriveTypeA
GetTickCount
RaiseException
FreeResource
lstrcatA
WinExec
GlobalReAlloc
GlobalSize
GetModuleHandleA
SetLastError
LoadLibraryExA
GetUserDefaultLCID
WritePrivateProfileStringA
GetCurrentThreadId
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
_hread
GetModuleFileNameA

user32

ShowOwnedPopups
GetMenuItemInfoA
ValidateRect
UnpackDDElParam
DestroyMenu
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
SetMenu
TranslateAcceleratorA
EndPaint
BeginPaint
DrawTextExA
TabbedTextOutA
wsprintfA
GetKeyNameTextA
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
ModifyMenuA
CheckMenuItem
GetMenuCheckMarkDimensions
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextA
CheckDlgButton
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
ScrollWindow
TrackPopupMenu
GetScrollRange
GetScrollPos
GetMenu
GetTabbedTextExtentA
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
IntersectRect
GetWindowPlacement
GetWindow
GetMenuState
AppendMenuA
MapDialogRect
SetWindowContextHelpId
IsClipboardFormatAvailable
CharUpperA
EnableWindow
SetTimer
SendMessageA
KillTimer
UpdateWindow
RegisterWindowMessageA
GetSysColor
ReleaseDC
GetDC
GetMenuItemID
InsertMenuA
RemoveMenu
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
GetCapture
ClipCursor
FrameRect
DrawIcon
WinHelpA
PostQuitMessage
FlashWindow
SetWindowPos
SetClipboardViewer
ChangeClipboardChain
GetMenuItemCount
GetSysColorBrush
UnionRect
GetWindowThreadProcessId
WaitMessage
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
GetMenuStringA
DeleteMenu
EnumClipboardFormats
GetClipboardFormatNameA
GetClipboardData
RegisterClipboardFormatA
MapVirtualKeyA
keybd_event
IsWindowVisible
GetWindowDC
ScreenToClient
WindowFromPoint
SetForegroundWindow
GetFocus
SendMessageTimeoutA
GetDesktopWindow
GetDCEx
LockWindowUpdate
GetSystemMenu
SetParent
PostThreadMessageA
AdjustWindowRectEx
SetRect
FillRect
PostMessageA
IsWindow
SetCursor
LoadCursorA
GetCursorPos
SystemParametersInfoA
MapWindowPoints
CopyRect
PtInRect
InflateRect
OffsetRect
DrawStateA
GetWindowRect
GetClientRect
CreateMenu
FindWindowA
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetDoubleClickTime
DestroyCursor
MapVirtualKeyExA
IsCharLowerA
GetWindowRgn
EnumChildWindows
SubtractRect
SetCursorPos
CharUpperBuffA
GetMenuDefaultItem
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
LoadStringA
ShowWindow
SetWindowTextA
DrawTextA
UnregisterClassA
GrayStringA
RedrawWindow
CopyIcon
SetWindowLongA
GetForegroundWindow
MessageBoxA
DestroyIcon
DrawIconEx
IsRectEmpty
ShowScrollBar
ClientToScreen
SetCapture
ReleaseCapture
LoadMenuA
GetSubMenu
EnableMenuItem
SetWindowsHookExA
UnhookWindowsHookEx
IsMenu
GetKeyState
CallNextHookEx
GetKeyboardLayoutList
LoadBitmapA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
IsZoomed
IsIconic
SetRectEmpty
SetScrollRange
SetScrollPos
LoadIconA
SetClassLongA
GetClassNameA
OpenClipboard
GetKeyboardLayout
ActivateKeyboardLayout
SetMenuDefaultItem
EnableScrollBar
GetUpdateRect
DrawEdge
SetWindowRgn
DrawFocusRect
GetIconInfo
DrawFrameControl
GetAsyncKeyState
DestroyAcceleratorTable
CopyImage
LoadImageA
InvalidateRect
OemToCharA
MessageBeep
GetParent
GetSystemMetrics
CloseClipboard
SetClipboardData
EmptyClipboard
ReuseDDElParam

gdi32

SelectPalette
DeleteDC
Rectangle
RoundRect
PatBlt
CreateBitmapIndirect
CreateRectRgnIndirect
CopyMetaFileA
CreateDCA
GetDCOrgEx
GetClipBox
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
OffsetViewportOrgEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetTextAlign
CloseMetaFile
DeleteMetaFile
GetRgnBox
RealizePalette
GetDIBits
PlayEnhMetaFile
GetEnhMetaFileBits
SetEnhMetaFileBits
SetWinMetaFileBits
DeleteEnhMetaFile
GetBkColor
GetTextExtentPoint32A
GetStockObject
GetTextMetricsA
CreateFontIndirectA
StretchBlt
CreateCompatibleDC
CreateBitmap
SetMapMode
CreateSolidBrush
GetDeviceCaps
SelectObject
CreateCompatibleBitmap
GetObjectA
SetTextColor
DeleteObject
BitBlt
GetTextFaceA
SetBkColor
SetViewportOrgEx
SetViewportExtEx
GetTextColor
CreateDIBSection
SetPixel
EnumFontFamiliesA
GetTextCharsetInfo
CreateDIBitmap
Polyline
CreatePolygonRgn
Polygon
Ellipse
CreateEllipticRgn
CreateRoundRectRgn
OffsetRgn
SetWindowExtEx
GetPaletteEntries
CreatePalette
PtInRegion
FrameRgn
FillRgn
GetBoundsRect
SetPaletteEntries
ExtFloodFill
EnumFontFamiliesExA
GetNearestPaletteIndex
GetSystemPaletteEntries
SetPixelV
GetViewportOrgEx
LPtoDP
GetWindowOrgEx

comdlg32

CommDlgExtendedError
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
ChooseColorA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegEnumKeyExA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA

shell32

DragFinish
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
DragQueryFileA
SHAppBarMessage
SHGetFileInfoA
ShellExecuteA

comctl32

ord17
InitCommonControlsEx
ImageList_DrawEx
ImageList_GetIcon
ImageList_AddMasked
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Add
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_DrawIndirect
ImageList_LoadImageA
ImageList_GetImageInfo

shlwapi

PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
UrlUnescapeA

oledlg

ord8

ole32

CoCreateInstance
OleGetClipboard
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CreateStreamOnHGlobal
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleLockRunning
DoDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop

oleaut32

SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreatePictureIndirect
OleLoadPicture
SysAllocString
SysStringLen
SysAllocStringByteLen
SysStringByteLen
VariantClear
VariantChangeType
CreateErrorInfo
VariantInit
SysAllocStringLen
VariantCopy
SafeArrayDestroy
OleCreateFontIndirect
VarUdateFromDate
VarBstrFromDate

wininet

InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetOpenUrlA
UnlockUrlCacheEntryStream
ReadUrlCacheEntryStream
RetrieveUrlCacheEntryStreamA
InternetGetConnectedState
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetQueryDataAvailable

winmm

PlaySoundA
mmioFlush
mciSendCommandA
mmioRead
mmioClose
mmioOpenA
mmioSeek
mmioWrite

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 392KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 709KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f11931b74d0f5ca7f5776950106f9aae

Headers

File Characteristics

Imports

c4dll323

polspell

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

winmm

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 392KB - Virtual size: 390KB

.data Size: 28KB - Virtual size: 709KB

.rsrc Size: 24KB - Virtual size: 21KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 392KB - Virtual size: 390KB

.data
Size: 28KB - Virtual size: 709KB

.rsrc
Size: 24KB - Virtual size: 21KB