2024-02-19_5cc1a264ba0335f59ae739bc3b322ef7_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-19_5cc1a264ba0335f59ae739bc3b322ef7_icedid
Size

5.9MB
MD5

5cc1a264ba0335f59ae739bc3b322ef7
SHA1

e985d6a94fd46ae7c890b3280f3f75d92c94ba17
SHA256

8b5be174aa60a950d1e6d2481ca78094f6807ad1119f2c62e37fd61376987504
SHA512

5481c89729b48c9087cede83412d123d2c1f72ef6cd7b9ff4bbd355e35bc621f41d3e5d6c12e0bb814b4dd22f1259a3106f5bb58b946182208b8e17e6ee68746
SSDEEP

98304:ri7GYSvbZ5PQazaDkQFuwtbanmKxOzxpYgsDNPGMwt8N+K2xsOHv3g4diUypP/:ri7GYSvbWkuugNKCwNPG/tHrmIDwUy9/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-19_5cc1a264ba0335f59ae739bc3b322ef7_icedid

Files

2024-02-19_5cc1a264ba0335f59ae739bc3b322ef7_icedid
.exe windows:4 windows x86 arch:x86

15535dc7f0be958f419cbb03c245d471

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

RtlUnwind
ExitProcess
TerminateProcess
HeapAlloc
HeapFree
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
GetTickCount
SetErrorMode
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
VirtualProtect
GlobalFlags
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetFileTime
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
WritePrivateProfileStringA
GetPrivateProfileIntA
InterlockedDecrement
SetLastError
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
lstrcpynA
GetModuleHandleA
FreeResource
GetFileAttributesA
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
QueryPerformanceFrequency
QueryPerformanceCounter
LoadLibraryA
GetProcAddress
FreeLibrary
CloseHandle
FormatMessageA
LocalFree
CreateFileA
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
RemoveDirectoryA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTempFileNameA
CreateDirectoryA
GetTempPathA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
GetModuleFileNameA
GetShortPathNameA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetStdHandle

user32

RegisterClipboardFormatA
PostThreadMessageA
GetSysColorBrush
SetRect
WindowFromPoint
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
SetWindowContextHelpId
MapDialogRect
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
wsprintfA
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
CheckMenuItem
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
MessageBoxA
TrackPopupMenu
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
ScreenToClient
GetClassInfoA
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
SetWindowPos
GetWindowPlacement
PtInRect
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetSubMenu
EnumDisplaySettingsA
ChangeDisplaySettingsA
GetDlgCtrlID
IsWindow
GetFocus
TrackMouseEvent
LockWindowUpdate
PostMessageA
FindWindowExA
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
IntersectRect
GetWindowTextLengthA
GetWindowTextA
EqualRect
SetWindowRgn
IsZoomed
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
IsRectEmpty
GetClassLongA
SetCursor
SetParent
SetWindowLongA
IsChild
GetTopWindow
GetWindow
GetWindowLongA
GetSysColor
ReleaseDC
GetDC
LoadBitmapA
OffsetRect
CopyRect
DrawStateA
GetIconInfo
DrawIconEx
SystemParametersInfoA
GetParent
ReleaseCapture
SetCapture
CharNextA
ClientToScreen
EnableMenuItem
CharUpperA
LoadImageA
SetClassLongA
GetSystemMetrics
LoadCursorA
InvalidateRect
GetClientRect
GetWindowRect
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
FillRect
InflateRect
LoadIconA
SendMessageA
EnableWindow
KillTimer
SetTimer

gdi32

GetStockObject
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
GetObjectA
CreateFontIndirectA
CreateSolidBrush
CreateFontA
CreatePatternBrush
CreateDIBSection
SetDIBColorTable
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
SelectObject
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateRectRgn
GetTextExtentPoint32A
StretchBlt
BitBlt
DeleteObject

comdlg32

GetFileTitleA
GetOpenFileNameA
CommDlgExtendedError

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegQueryValueExA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteA

comctl32

ImageList_GetImageInfo
ImageList_AddMasked
ImageList_GetImageCount
ImageList_DrawEx
ImageList_Add
ImageList_Destroy
ord17
ImageList_Create
ImageList_Draw

shlwapi

PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA

oledlg

ord8

ole32

CoTaskMemAlloc
CLSIDFromProgID
CoTaskMemFree
CreateStreamOnHGlobal
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize

oleaut32

SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
OleCreateFontIndirect
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
OleLoadPicture

Sections

.text
Size: 584KB - Virtual size: 582KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15535dc7f0be958f419cbb03c245d471

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 584KB - Virtual size: 582KB

.rdata Size: 124KB - Virtual size: 122KB

.data Size: 60KB - Virtual size: 98KB

.rsrc Size: 60KB - Virtual size: 59KB

.text
Size: 584KB - Virtual size: 582KB

.rdata
Size: 124KB - Virtual size: 122KB

.data
Size: 60KB - Virtual size: 98KB

.rsrc
Size: 60KB - Virtual size: 59KB