2024-02-17_1d3cce688de8a4021489c9370b5a17f7_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-17_1d3cce688de8a4021489c9370b5a17f7_icedid
Size

332KB
MD5

1d3cce688de8a4021489c9370b5a17f7
SHA1

c23464151bc1e9f49d1d729e1a756abd29c18914
SHA256

0d21ecf065508d0b87dd3c19300e4451f194270b328c5273477ceb97469f611b
SHA512

a7245f3b476aa6b50154331f0c2647d9da44f3a9cc13b8ffc3eb6e97821cf3722a87b593f0ea1781d62d5a0451176691d675b9d8248218d491cfbb4cc8c3f71f
SSDEEP

6144:qYwzrvtJL9InSZ46jvOkppgsp9SAtokjOb:qYm1JL204Mmbspok

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-17_1d3cce688de8a4021489c9370b5a17f7_icedid

Files

2024-02-17_1d3cce688de8a4021489c9370b5a17f7_icedid
.exe windows:4 windows x86 arch:x86

bcdddc3d422de03a59b40e0c35f3ff41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Projets\FnacTelechargement\FnacTelechargement\Release\FnacTelechargement.pdb

Imports

kernel32

GetDateFormatA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
ExitThread
CreateThread
HeapSize
QueryPerformanceCounter
GetCurrentProcessId
GetTimeZoneInformation
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
GetTimeFormatA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
RtlUnwind
ExitProcess
GetTickCount
GetFileTime
FileTimeToLocalFileTime
SetErrorMode
GetOEMCP
GetCPInfo
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GlobalFlags
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedIncrement
RaiseException
InterlockedDecrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
FreeResource
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
SetThreadPriority
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
LoadLibraryA
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpynA
CompareStringW
CompareStringA
lstrcmpiA
GetVersion
MultiByteToWideChar
GetPrivateProfileSectionA
GetPrivateProfileStringA
WritePrivateProfileStringA
FormatMessageA
LocalFree
CreateDirectoryA
EnterCriticalSection
ReadFile
SetFilePointer
WriteFile
LeaveCriticalSection
CreateProcessA
GetFileAttributesA
InitializeCriticalSection
lstrcatA
lstrlenA
WinExec
ResumeThread
lstrcpyA
CreateFileA
CloseHandle
CreateMutexA
GetLastError
DeleteCriticalSection
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
UnhandledExceptionFilter
InterlockedExchange

user32

InvalidateRgn
CopyAcceleratorTableA
SetRect
IsRectEmpty
CharNextA
ReleaseCapture
SetCapture
GetSysColorBrush
WindowFromPoint
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
GetDlgItemInt
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetMenu
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
CopyRect
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
ValidateRect
MessageBoxA
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
PostMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetFocus
PostThreadMessageA
RegisterClipboardFormatA
UpdateWindow
ReleaseDC
GetDC
DrawEdge
FrameRect
FillRect
PtInRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
InvalidateRect
InflateRect
GetSysColor
RegisterWindowMessageA
GetCursorPos
MessageBeep
UnregisterClassA
GetNextDlgGroupItem
IsWindow
SetScrollPos
GetParent
KillTimer
SetTimer
ScreenToClient
CharUpperA
LoadCursorA
SetCursor
GetSystemMetrics
LoadIconA
EnableWindow
LockWindowUpdate
ShowOwnedPopups
GetClientRect
GetWindowRect
BringWindowToTop
IsIconic
GetSystemMenu
SendMessageA
AppendMenuA
DrawIcon
wsprintfA

gdi32

CreatePen
GetMapMode
GetTextColor
GetRgnBox
MoveToEx
LineTo
SetMapMode
RestoreDC
GetStockObject
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
DeleteObject
SetBkMode
SaveDC
SetBkColor
GetClipBox
CreateRectRgnIndirect
CreateBitmap
GetDeviceCaps
CreateRectRgn
CreateFontIndirectA
GetTextExtentPoint32A
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetCurrentObject
BitBlt
GetBkColor
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
CreateSolidBrush
SetTextColor

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey

shell32

SHGetSpecialFolderPathA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
SHBrowseForFolderA

comctl32

ord17
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_GetImageInfo
ImageList_Destroy
ImageList_LoadImageA
ImageList_DrawIndirect

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
StrFormatByteSizeA
PathIsUNCA

oledlg

ord8

ole32

CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoGetClassObject
CoTaskMemFree
CoInitialize
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries

oleaut32

OleCreateFontIndirect
SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SysStringLen
SysFreeString

urlmon

URLDownloadToFileA

wininet

InternetSetOptionA

Sections

.text
Size: 216KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bcdddc3d422de03a59b40e0c35f3ff41

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

wininet

Sections

.text Size: 216KB - Virtual size: 212KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 12KB - Virtual size: 23KB

.rsrc Size: 44KB - Virtual size: 40KB

.text
Size: 216KB - Virtual size: 212KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 12KB - Virtual size: 23KB

.rsrc
Size: 44KB - Virtual size: 40KB