2024-02-20_5c945553b3f407f7962a2c6751e9fa32_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-20_5c945553b3f407f7962a2c6751e9fa32_icedid
Size

2.0MB
MD5

5c945553b3f407f7962a2c6751e9fa32
SHA1

1a186f1582b83f0aee45afe7ade19106600e25c7
SHA256

81729a2628993d781420cde5482db67704f29a54dca93c5264b3da1299910aee
SHA512

6f01dfbf9eedd5525e1df72a3bb2d33b65e3b0d01600f34a0f4036d9a12a5b77c232c4cc9b42fc38b881337335b96080d7594baa4e1b367bff96da4d16baedc6
SSDEEP

6144:CSNAK4ZqZd0ZBB7s7+AEGUngq9JJy4RmUWM2NaEImf/F3lMb8HRxsjc:CwAKdZdgIq13nJJbRmRZ0GNVM4uc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-20_5c945553b3f407f7962a2c6751e9fa32_icedid

Files

2024-02-20_5c945553b3f407f7962a2c6751e9fa32_icedid
.exe windows:4 windows x86 arch:x86

c66bf1b28ac9f4f88afe73fe2bedcec7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessVersion
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
SetStdHandle
GetFileType
CreateThread
ExitThread
HeapReAlloc
HeapSize
CompareStringW
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
SetUnhandledExceptionFilter
GetACP
CompareStringA
SetErrorMode
GlobalAddAtomA
GetLocaleInfoA
GetLocaleInfoW
SetEnvironmentVariableA
GetWindowsDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetSystemDirectoryA
GetLastError
GetTempPathA
GetModuleFileNameA
Sleep
WaitForSingleObject
CreateEventA
CreateFileA
GetVersionExA
GetFullPathNameA
CloseHandle
GetOverlappedResult
DeviceIoControl
CopyFileA
lstrcatA
lstrcpyA
DeleteFileA
CreateProcessA
SetFileAttributesA
GetFileAttributesA
LoadLibraryA
FreeLibrary
lstrlenA
LocalAlloc
LocalFree
GetExitCodeProcess
OpenProcess
TerminateProcess
GetFileTime
GetFileSize
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalFlags
MulDiv
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
lstrcmpA
GetVersion
GlobalGetAtomNameA
GlobalFindAtomA
CreateDirectoryA
SuspendThread
SetThreadPriority
ResumeThread
GlobalDeleteAtom
IsBadCodePtr
GetCurrentThread
WritePrivateProfileStringA
GetProcAddress
GetCurrentThreadId
lstrcmpiA
SetEndOfFile
GetVolumeInformationA
MoveFileA
FlushFileBuffers
UnlockFile
LockFile
DuplicateHandle
SetFilePointer
GetCurrentProcess
GlobalLock
lstrcpynA
SetLastError
FindResourceA
GlobalUnlock
LockResource
WideCharToMultiByte
LoadResource
MultiByteToWideChar
GlobalFree
InterlockedDecrement
InterlockedIncrement
GetProcessHeap
CreateSemaphoreA
FormatMessageA
GetCommState
HeapAlloc
HeapFree
SetupComm
SetCommState
SetCommTimeouts
WriteFile
EscapeCommFunction
ReadFile
OpenEventA
GetCurrentProcessId
GlobalAlloc
SetEvent
IsBadReadPtr
IsBadWritePtr

user32

ReleaseDC
GetDC
ShowWindow
GetClassNameA
PtInRect
ClientToScreen
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetSysColorBrush
DestroyMenu
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
AdjustWindowRectEx
GetClientRect
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
SetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
SetCursor
PostQuitMessage
PostMessageA
CharUpperA
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetWindowRect
LoadIconA
KillTimer
SetTimer
EnableWindow
LoadBitmapA
LoadStringA
MessageBoxA
wsprintfA
GetCursorPos
GetSystemMetrics
EnumWindows
GetWindowTextA
GetFocus
SetFocus
SendMessageA
IsWindow
IsDialogMessageA
GetMessageTime
RemovePropA
UnhookWindowsHookEx
GetWindowPlacement
UnregisterClassA

gdi32

SetBkColor
GetObjectA
SetTextColor
DeleteObject
SelectObject
GetDeviceCaps
GetStockObject
SaveDC
DeleteDC
RestoreDC
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
CreateBitmap
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetClipBox

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

OpenSCManagerA
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetKeySecurity
FreeSid
RegCreateKeyExA
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
OpenServiceA
QueryServiceStatus
ControlService
DeleteService
CloseServiceHandle
RegOpenKeyA
RegEnumValueA
RegSetValueExA
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey

shell32

ord680

comctl32

ord17

Sections

.text
Size: 352KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c66bf1b28ac9f4f88afe73fe2bedcec7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 352KB - Virtual size: 348KB

.rdata Size: 56KB - Virtual size: 52KB

.data Size: 52KB - Virtual size: 63KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.text
Size: 352KB - Virtual size: 348KB

.rdata
Size: 56KB - Virtual size: 52KB

.data
Size: 52KB - Virtual size: 63KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB