2024-02-17_451d66f0c2ef9066b10c3f7e11879236_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-02-17_451d66f0c2ef9066b10c3f7e11879236_icedid
Size

220KB
MD5

451d66f0c2ef9066b10c3f7e11879236
SHA1

4c1237989ec5abec32b064b7ae3d3972af029957
SHA256

3a5766ecd195c960f12776f991770f5bcfb31fb8ca955634717ae8162d6ea4b9
SHA512

a5179d3624e5b5ea9af502f62678653896a5cd8855f1637bffa50d72fc3209e54815dea3fb5b19e908d29eaa1e36c5ddb3bd864b28d49cd1eb0481c83cf0026a
SSDEEP

3072:ueAQ4XtO4Y0g+tYDu5yTr7QqMktMGj+JmhPT0eLqTsd83UDN6iAzHlSzcQ:ueA5BhdyTXbuG+JmhPTJVdgUQUc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-17_451d66f0c2ef9066b10c3f7e11879236_icedid

Files

2024-02-17_451d66f0c2ef9066b10c3f7e11879236_icedid
.exe windows:4 windows x86 arch:x86

ba597359b254f5c83ef309206e5f7b7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA
HeapReAlloc
ExitThread
CreateThread
HeapSize
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
VirtualQuery
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
TerminateProcess
ExitProcess
RtlUnwind
SetErrorMode
GetOEMCP
GetCPInfo
CreateFileA
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalFlags
InterlockedIncrement
GetCurrentDirectoryA
WritePrivateProfileStringA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
InterlockedDecrement
FreeResource
SuspendThread
ResumeThread
SetThreadPriority
GlobalAddAtomA
SetLastError
GlobalFree
MulDiv
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
GetCurrentThreadId
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
lstrlenA
lstrcmpiA
GetVersion
MultiByteToWideChar
ResetEvent
DeleteFileA
GetShortPathNameA
GetFileAttributesA
GetPrivateProfileStringA
WinExec
GetCurrentThread
GetCurrentProcess
GetLastError
GetUserDefaultLangID
CreateEventA
SetEvent
FindFirstFileA
FindNextFileA
FindClose
SetCurrentDirectoryA
EnumResourceNamesA
LoadLibraryA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
QueryPerformanceCounter
FreeLibrary

user32

GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
UnregisterClassA
DefWindowProcA
GetWindowPlacement
PtInRect
GetWindow
GetWindowTextLengthA
SetWindowPos
SetFocus
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
SystemParametersInfoA
DestroyMenu
CopyRect
GetSysColor
EndPaint
BeginPaint
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnhookWindowsHookEx
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
TrackPopupMenu
CallNextHookEx
GetMessageA
IsWindowVisible
GetKeyState
ValidateRect
MessageBoxA
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
GetMenuState
GetMenuItemID
GetMenuItemCount
PostQuitMessage
PostMessageA
GetSysColorBrush
LoadBitmapA
CreateWindowExA
PeekMessageA
TranslateMessage
DispatchMessageA
GetDesktopWindow
EnumChildWindows
GetSystemMetrics
EnumWindows
GetCursorPos
SetCursor
ReleaseCapture
LoadIconA
LoadCursorA
EnableWindow
WindowFromPoint
GetParent
SetCapture
GetActiveWindow
InvalidateRect
UpdateWindow
ScreenToClient
ClientToScreen
GetClientRect
GetWindowRect
IsIconic
SendMessageA
LoadMenuA
GetSubMenu
DrawIcon
SetForegroundWindow
ExitWindowsEx
GetWindowTextA
SetWindowsHookExA
wsprintfA
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
EndDialog
CallWindowProcA

gdi32

PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
DeleteObject
GetObjectA
GetBitmapBits
CreateBitmapIndirect
BitBlt
CreateCompatibleDC
SelectObject

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
FreeSid
EqualSid
RegQueryValueA
RegCloseKey
RegOpenKeyA
OpenThreadToken
GetTokenInformation
AllocateAndInitializeSid

shell32

ShellExecuteA

comctl32

ord17

shlwapi

PathFindFileNameA
PathFindExtensionA

oleaut32

VariantInit
VariantClear
VariantChangeType

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba597359b254f5c83ef309206e5f7b7e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Sections

.text Size: 144KB - Virtual size: 140KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 8KB - Virtual size: 23KB

.rsrc Size: 24KB - Virtual size: 21KB

.text
Size: 144KB - Virtual size: 140KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 8KB - Virtual size: 23KB

.rsrc
Size: 24KB - Virtual size: 21KB