2024-02-19_32e1e4887c156d23a6d7baa9f2a2f5fb_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-19_32e1e4887c156d23a6d7baa9f2a2f5fb_icedid
Size

684KB
MD5

32e1e4887c156d23a6d7baa9f2a2f5fb
SHA1

5e781bf3cbc9041e675efdbd62ce7e9f75418dc3
SHA256

f11642b41db32051fe4ed67f45ae724f837abe221351c8ed82c1ff97024ae01b
SHA512

d4dea383fffe5cc2bb373f3227f49b68149712873c47307838c40209e9bca4e6c0ad9bb47006a316f2ed857ef573a7cb4916c6bad29be17839f3a171db5f8e9d
SSDEEP

12288:CsUodp3Du7CbOehOM0cionUxo/gNuirA3bzAtaWRTcKYk7YsxvJuJ+9:C/sfnz/gNuirAPAoWRnYk0se

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-19_32e1e4887c156d23a6d7baa9f2a2f5fb_icedid

Files

2024-02-19_32e1e4887c156d23a6d7baa9f2a2f5fb_icedid
.exe windows:4 windows x86 arch:x86

dcb4ab77703f954c6415275e744ef2d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Develop\TreeNote\src\Release\TreeNote.pdb

Imports

kernel32

SetStdHandle
GetFileType
HeapSize
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
TerminateProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
CreateThread
ExitThread
HeapReAlloc
GetCommandLineA
GetStartupInfoA
GetDateFormatA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
GetFileTime
SetErrorMode
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
LocalAlloc
InterlockedIncrement
GlobalFlags
CreateFileA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
FileTimeToLocalFileTime
FindNextFileA
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
GetProfileIntA
RaiseException
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
SetLastError
GlobalSize
FormatMessageA
lstrcpynA
LocalFree
FreeResource
GlobalReAlloc
GetModuleHandleA
GetProcAddress
lstrcpyA
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
InterlockedDecrement
CopyFileA
FindFirstFileA
FindClose
CreateDirectoryA
SetFileAttributesA
GetFileAttributesA
DeleteFileA
RemoveDirectoryA
GetPrivateProfileStringA
CreateMutexA
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
FileTimeToSystemTime
DeleteCriticalSection
InitializeCriticalSection
Sleep
LeaveCriticalSection
EnterCriticalSection
SystemTimeToFileTime
GetTickCount
WritePrivateProfileStringA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetModuleFileNameA
lstrcmpA
GetLocalTime
EnumDateFormatsA
EnumTimeFormatsA
GetTimeFormatA
UnhandledExceptionFilter

user32

SetWindowContextHelpId
MapDialogRect
GetMessageA
ValidateRect
SetParent
GetSystemMenu
DeleteMenu
GetMenuItemInfoA
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
EndPaint
BeginPaint
SetMenuItemBitmaps
ModifyMenuA
GetMenuCheckMarkDimensions
LoadBitmapA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
WinHelpA
CreateWindowExA
SetWindowsHookExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MapWindowPoints
MessageBoxA
TrackPopupMenu
GetScrollPos
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
UnregisterClassA
GetDlgCtrlID
CallWindowProcA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetMenuState
GetMenuItemID
RegisterClipboardFormatA
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindowTextA
GetKeyState
SetFocus
GetDoubleClickTime
WindowFromPoint
IsChild
ShowScrollBar
DrawFocusRect
DrawFrameControl
EqualRect
IntersectRect
EnableWindow
SendMessageA
GetFocus
IsWindow
CheckMenuItem
GetMenuStringA
GetSubMenu
LoadMenuA
PostMessageA
GetWindowRect
GetWindowDC
ReleaseDC
IsWindowVisible
SetForegroundWindow
LoadIconA
GetCursorPos
GetClipCursor
ClipCursor
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetParent
SetWindowRgn
InvertRect
FillRect
SetRectEmpty
RegisterWindowMessageA
GetSystemMetrics
GetMenuItemCount
SetActiveWindow
PostQuitMessage
PostThreadMessageA
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
AppendMenuA
CreatePopupMenu
DestroyMenu
SetMenu
DrawMenuBar
CountClipboardFormats
IsClipboardFormatAvailable
ReleaseCapture
SetCapture
GetCapture
EnableMenuItem
PeekMessageA
TranslateMessage
DispatchMessageA
ClientToScreen
wsprintfA
RedrawWindow
GetUpdateRect
GetDC
DrawEdge
OffsetRect
InflateRect
IsRectEmpty
LockWindowUpdate
GetDCEx
GetSysColorBrush
ShowOwnedPopups
GetClientRect
LoadImageA
PtInRect
ScreenToClient
InvalidateRect
SetTimer
KillTimer
GetMessagePos
MessageBeep
SetCursor
CopyIcon
LoadCursorA
CharUpperA
IsIconic
UpdateWindow
RegisterClassA
DefWindowProcA
GetClassInfoA
SetWindowLongA
GetMenu
SetRect
CopyRect
GetWindowLongA
GetSysColor
CallNextHookEx

gdi32

CreatePatternBrush
SelectPalette
CreatePen
ExtSelectClipRgn
GetMapMode
DPtoLP
GetTextColor
GetRgnBox
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
SetRectRgn
GetTextMetricsA
SaveDC
GetCharWidthA
DeleteObject
SelectObject
StretchDIBits
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CopyMetaFileA
GetBkColor
RealizePalette
GetTextExtentPoint32A
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetCurrentObject
BitBlt
CreateCompatibleDC
CombineRgn
CreatePolygonRgn
CreateRectRgn
CreateCompatibleBitmap
DeleteMetaFile
GetDeviceCaps
Rectangle
CreateRectRgnIndirect
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetObjectA
CreateFontA
PatBlt
EnumFontFamiliesA
RestoreDC

comdlg32

FindTextA
ReplaceTextA
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
GetFileTitleA
ChooseFontA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegCloseKey

shell32

Shell_NotifyIconA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetSpecialFolderLocation
ShellExecuteA
DragFinish
DragQueryFileA

comctl32

ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_DragMove
ImageList_ReplaceIcon
ord17
ImageList_Add
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_DragLeave
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_SetBkColor
ImageList_DrawIndirect

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8
ord1
ord3

ole32

CoRevokeClassObject
CoRegisterMessageFilter
CreateStreamOnHGlobal
CoLockObjectExternal
RegisterDragDrop
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CreateILockBytesOnHGlobal
CoTaskMemFree
StgCreateDocfile
OleSetMenuDescriptor
GetClassFile
CoCreateInstance
OleRun
CoInitialize
CoUninitialize
CoCreateGuid
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
RevokeDragDrop

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantCopy
VariantInit
VariantClear
VariantChangeType
SysAllocStringLen
SysStringLen
SafeArrayDestroy
SysAllocString
OleCreateFontIndirect
GetErrorInfo

Sections

.text
Size: 484KB - Virtual size: 482KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dcb4ab77703f954c6415275e744ef2d2

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 484KB - Virtual size: 482KB

.rdata Size: 108KB - Virtual size: 107KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 72KB - Virtual size: 68KB

.text
Size: 484KB - Virtual size: 482KB

.rdata
Size: 108KB - Virtual size: 107KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 72KB - Virtual size: 68KB