2024-02-23_b684585ce808b9ba0189da44cef2cbf3_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-02-23_b684585ce808b9ba0189da44cef2cbf3_icedid
Size

1.5MB
MD5

b684585ce808b9ba0189da44cef2cbf3
SHA1

c3d2daac50a93daa5c6e1393d860cdbe35e607da
SHA256

2352653d1b102156f2917622925cb9f8d078174fd1dd88dd649185c47d76b45f
SHA512

1bb984615d06d1d38633eafad0b64dc7af9163ead730cddd4cb18543f88dfab20c41552e7c7182731431e1ad7aaba5f794f9972f6f8e1f22e0a9c298c0bea91e
SSDEEP

24576:/ZRwjQKjJgPcoB647KeFm80hDs23DPjfQ+Nb4Af8u/HMh4:/ZGGKW0623DPlb4Ab

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-23_b684585ce808b9ba0189da44cef2cbf3_icedid

Files

2024-02-23_b684585ce808b9ba0189da44cef2cbf3_icedid
.exe windows:4 windows x86 arch:x86

35da2667a92c7a3cab5a022193109af7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
SetEnvironmentVariableA
IsBadCodePtr
SetUnhandledExceptionFilter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
InterlockedExchange
HeapCreate
HeapDestroy
HeapSize
TerminateProcess
HeapReAlloc
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
IsBadReadPtr
CreateThread
ExitThread
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
ExitProcess
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapFree
HeapAlloc
FindResourceExA
SetErrorMode
GetOEMCP
GlobalFlags
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
VirtualProtect
GetFullPathNameA
GetProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
WaitForSingleObject
ResumeThread
SystemTimeToFileTime
RaiseException
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
SetLastError
lstrcpynA
MoveFileA
CopyFileA
LocalFileTimeToFileTime
SetFileTime
GetDiskFreeSpaceA
GetShortPathNameA
lstrcpyA
IsBadWritePtr
CreateProcessA
CreateMutexA
ReleaseMutex
GetFileTime
FileTimeToLocalFileTime
DeleteFileA
GetFileSize
FindFirstFileA
FindClose
ReadFile
WriteFile
LocalFree
FileTimeToSystemTime
GetCurrencyFormatA
FormatMessageA
LocalAlloc
InterlockedIncrement
GetCPInfo
GlobalLock
GlobalUnlock
GetModuleHandleA
GetTickCount
lstrcmpA
MulDiv
InterlockedDecrement
GetTempPathA
GetTempFileNameA
CreateFileA
SetFilePointer
CloseHandle
SetThreadPriority
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SearchPathA
GetModuleFileNameA
GetFileAttributesA
GlobalAlloc
GlobalReAlloc
GlobalFree
GlobalSize
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentDirectoryA
GetCurrentThreadId
FindResourceA
LoadResource
LockResource
SizeofResource
GetStringTypeExA
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP

user32

CharNextA
GetTabbedTextExtentA
InvalidateRgn
GetWindowDC
CreateDialogIndirectParamA
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CheckDlgButton
CreateWindowExA
GetClassInfoExA
SetPropA
GetPropA
SendDlgItemMessageA
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
GetMessageTime
ScrollWindow
SetScrollRange
GetScrollRange
GetScrollPos
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
RegisterClassA
UnregisterClassA
GetDlgCtrlID
CallWindowProcA
SetWindowLongA
GetMenuStringA
WaitForInputIdle
DdeClientTransaction
DdeConnect
DdeGetLastError
DdeDisconnect
DdeUninitialize
DdeFreeStringHandle
DdeCreateStringHandleA
DdeInitializeA
FindWindowExA
MessageBoxA
GetClipCursor
ClipCursor
SetWindowRgn
RemoveMenu
InsertMenuA
CreateMenu
GetClipboardData
DestroyCaret
ShowCaret
SetCaretPos
CreateCaret
GetDoubleClickTime
GrayStringA
DrawTextExA
TabbedTextOutA
CreateIconIndirect
GetDC
GetActiveWindow
DestroyWindow
TranslateAcceleratorA
TrackPopupMenu
HideCaret
InvertRect
GetNextDlgTabItem
MapVirtualKeyExA
GetKeyNameTextA
IsCharLowerA
GetIconInfo
GetNextDlgGroupItem
CopyImage
IsWindowEnabled
SetWindowPos
EnableScrollBar
SetScrollPos
ShowScrollBar
FrameRect
GetWindowTextA
GetWindowPlacement
LockWindowUpdate
DrawTextA
DrawFocusRect
EnumChildWindows
GetClassNameA
LoadBitmapA
DrawStateA
IsClipboardFormatAvailable
DestroyCursor
wsprintfA
GetMessagePos
GetDCEx
ReleaseDC
LoadIconA
SetCursorPos
GetMessageA
SetRect
CreateAcceleratorTableA
LoadAcceleratorsA
CopyAcceleratorTableA
DrawIconEx
DestroyIcon
RegisterClipboardFormatA
DrawEdge
DrawIcon
BeginDeferWindowPos
EndDeferWindowPos
GetMenu
ModifyMenuA
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
WinHelpA
PeekMessageA
TranslateMessage
DispatchMessageA
WaitMessage
GetSysColorBrush
CharUpperA
GetWindowRect
InvalidateRect
EnableWindow
SendMessageA
IsWindow
FillRect
GetClientRect
CopyRect
GetFocus
GetSysColor
GetSubMenu
LoadMenuA
GetMenuDefaultItem
GetKeyState
SetMenuDefaultItem
GetMenuState
AppendMenuA
CreatePopupMenu
ValidateRect
UnionRect
CharUpperBuffA
LoadImageA
MapWindowPoints
GetWindow
SystemParametersInfoA
DestroyMenu
IsMenu
GetClassLongA
GetWindowLongA
GetMenuItemInfoA
PostThreadMessageA
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
SetParent
GetWindowThreadProcessId
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
KillTimer
SetTimer
GetMenuItemID
GetMenuItemCount
DrawFrameControl
IsRectEmpty
ClientToScreen
SetMenu
DestroyAcceleratorTable
RegisterWindowMessageA
GetAsyncKeyState
GetClassInfoA
DefWindowProcA
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyA
ToAsciiEx
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
IsChild
IsIconic
IsZoomed
GetCursorPos
SetCursor
UnpackDDElParam
ReuseDDElParam
InsertMenuItemA
EndPaint
BeginPaint
IsWindowVisible
GetSystemMetrics
UpdateWindow
SetForegroundWindow
BringWindowToTop
ShowWindow
FindWindowA
GetDesktopWindow
PtInRect
SetRectEmpty
InflateRect
OffsetRect
IntersectRect
EqualRect
DeleteMenu
CheckMenuItem
EnableMenuItem
PostMessageA
GetSystemMenu
ScreenToClient
RedrawWindow
GetCapture
SetCapture
GetParent
SetFocus
WindowFromPoint
LoadCursorA
ReleaseCapture
MessageBeep
RemovePropA

gdi32

SelectClipRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreateEllipticRgn
DPtoLP
LPtoDP
SetRectRgn
GetMapMode
GetViewportOrgEx
SetAbortProc
GetCharWidthA
CreateFontA
GetNearestColor
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetWindowOrgEx
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
GetClipBox
CreateDCA
CopyMetaFileA
StretchDIBits
StartDocA
EndDoc
AbortDoc
EndPage
StartPage
GetCurrentObject
CombineRgn
CreateRectRgn
GetTextExtentPoint32W
GetBkMode
EnumFontFamiliesExA
GetDIBColorTable
Escape
TextOutA
RectVisible
PtVisible
CreateHalftonePalette
SetPixelV
FrameRgn
PtInRegion
GetSystemPaletteEntries
GetStockObject
SetBkMode
SetTextColor
SetPaletteEntries
GetPaletteEntries
CreatePalette
ExtFloodFill
Rectangle
Ellipse
ExtTextOutA
Polygon
Polyline
GetBkColor
CreatePolygonRgn
GetTextExtentPoint32A
GetTextColor
SetPixel
GetPixel
StretchBlt
CreateBitmap
SelectObject
SelectPalette
RealizePalette
GetDIBits
PatBlt
SetBkColor
DeleteDC
GetRgnBox
OffsetRgn
DeleteObject
GetTextCharsetInfo
EnumFontFamiliesA
GetTextMetricsA
GetDeviceCaps
CreateRectRgnIndirect
CreateFontIndirectA
CreatePatternBrush
CreateSolidBrush
CreateDIBitmap
CreateDIBSection
GetObjectA
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreatePen
GetNearestPaletteIndex

comdlg32

PrintDlgA
GetOpenFileNameA
ChooseColorA
CommDlgExtendedError
GetFileTitleA
GetSaveFileNameA

winspool.drv

ClosePrinter
OpenPrinterA
GetJobA
DocumentPropertiesA

advapi32

RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryInfoKeyA
RegSetValueA
RegOpenKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegCloseKey

shell32

DragFinish
SHGetFileInfoA
ExtractIconA
DragQueryFileA
ShellExecuteA
ShellExecuteExA

comctl32

ImageList_AddMasked
ImageList_GetImageCount
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Draw
ImageList_Create
ImageList_Destroy
_TrackMouseEvent
ord17
ImageList_LoadImageA
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_GetImageInfo
ImageList_DrawIndirect

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoRevokeClassObject
CoRegisterClassObject
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitialize
CoCreateInstance
OleRun
CoGetClassObject
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleLockRunning
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard

oleaut32

VariantClear
SysAllocString
SysFreeString
VariantInit
VariantCopy
VariantChangeType
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VarUdateFromDate
SystemTimeToVariantTime
SysStringLen
SafeArrayDestroy
OleCreateFontIndirect
GetErrorInfo

winmm

PlaySoundA

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35da2667a92c7a3cab5a022193109af7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

winmm

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.rdata Size: 312KB - Virtual size: 311KB

.data Size: 72KB - Virtual size: 100KB

.rsrc Size: 84KB - Virtual size: 81KB

.text
Size: 1.0MB - Virtual size: 1.0MB

.rdata
Size: 312KB - Virtual size: 311KB

.data
Size: 72KB - Virtual size: 100KB

.rsrc
Size: 84KB - Virtual size: 81KB