2024-02-24_3391055248c34499c8cd523206cb1305_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-24_3391055248c34499c8cd523206cb1305_icedid
Size

2.4MB
MD5

3391055248c34499c8cd523206cb1305
SHA1

f1db131f33a86b14cb61805a60d986a843b9ef6f
SHA256

d67ce05810e8a4f7d69779ce1bfba08319018e04ab1020ddd301578eef5759ce
SHA512

36b7a0435a6386b02065c4fac51373ca1654366459eb6c14fc0f8201c035e8943593ef6cb5e0c1c9d6024e8c68584cdcf8086977f1ab534775327bf8d29dd1e7
SSDEEP

24576:oYntQRDU0FvQUkqWWzmK+90wxm6jm6l9Y+5vocq9KH6+7ooL+jkgF2:Vt0pWAwxm6jB9Y+5vccX7oc+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-24_3391055248c34499c8cd523206cb1305_icedid

Files

2024-02-24_3391055248c34499c8cd523206cb1305_icedid
.exe windows:4 windows x86 arch:x86

8a515941d3a24a4259f32a423457ad7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiInClose
midiInGetDevCapsA
midiInGetNumDevs
midiInStart
midiInStop
midiInOpen

kernel32

VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
ExitThread
CreateThread
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
VirtualProtect
SetUnhandledExceptionFilter
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetComputerNameA
HeapAlloc
GetSystemTimeAsFileTime
HeapFree
RtlUnwind
GetFileTime
GetFileAttributesA
SetErrorMode
GetOEMCP
GetCPInfo
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
GetProfileIntA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetTickCount
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
CreateEventA
SuspendThread
ResumeThread
SetThreadPriority
CloseHandle
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
FreeResource
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalFree
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
lstrcmpA
RaiseException
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
GetProcAddress
InterlockedDecrement
SetLastError
lstrcpynA
DeleteFileA
MoveFileA
WaitForSingleObject
WaitForMultipleObjects
LocalFree
SetEvent
GetStringTypeExA
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
GetCurrentThreadId
Sleep
SetCurrentDirectoryA
WideCharToMultiByte
GetCurrentDirectoryA
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetStringTypeW
GetWindowsDirectoryA

user32

GetNextDlgGroupItem
MessageBeep
SetParent
GetMenuItemInfoA
DestroyMenu
UnpackDDElParam
ReuseDDElParam
InsertMenuItemA
SetMenu
TranslateMDISysAccel
BringWindowToTop
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetMessageA
TranslateMessage
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
CheckDlgButton
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
LoadIconA
PeekMessageA
MapWindowPoints
TrackPopupMenu
SetForegroundWindow
PostMessageA
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
CallWindowProcA
SetWindowLongA
SetWindowPos
GetWindowPlacement
GetDlgCtrlID
GetCursorPos
WindowFromPoint
IsChild
DeferWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
EndDialog
InvalidateRgn
GetLastActivePopup
IsWindowEnabled
wsprintfA
GetMenuState
GetMenuStringA
UnregisterClassA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
UnhookWindowsHookEx
MessageBoxA
LoadAcceleratorsA
TranslateAcceleratorA
DrawFocusRect
EqualRect
CheckMenuItem
SetCursor
LoadCursorA
GetNextDlgTabItem
FillRect
DestroyCaret
ShowCaret
HideCaret
SetCaretPos
CreateCaret
ModifyMenuA
EnableMenuItem
SetCursorPos
ShowCursor
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
IsWindowVisible
IntersectRect
GetFocus
RedrawWindow
CreatePopupMenu
IsWindow
FrameRect
ScreenToClient
CopyRect
IsRectEmpty
GetSysColor
GetMessagePos
ReleaseCapture
GetSystemMetrics
CopyAcceleratorTableA
CharNextA
PostThreadMessageA
DeleteMenu
LockWindowUpdate
GetDCEx
SystemParametersInfoA
GetCapture
InvalidateRect
DrawEdge
OffsetRect
InflateRect
SetRect
PtInRect
UnionRect
SetRectEmpty
CharUpperA
GetWindow
GetSysColorBrush
MapDialogRect
RegisterClipboardFormatA
ShowOwnedPopups
SendMessageA
GetParent
GetWindowContextHelpId
SetCapture
GetActiveWindow
UpdateWindow
IsIconic
KillTimer
SetTimer
GetClientRect
GetWindowRect
GetMenu
LoadMenuA
RemoveMenu
InsertMenuA
GetSubMenu
GetMenuItemID
GetMenuItemCount
AppendMenuA
GetKeyState
SetWindowContextHelpId
EnableWindow
GetWindowLongA
PostQuitMessage
LoadBitmapA
DefWindowProcA
SetWindowTextA

gdi32

SetWindowExtEx
ExcludeClipRect
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
SelectPalette
PatBlt
CopyMetaFileA
GetBkColor
SetRectRgn
CombineRgn
GetTextColor
GetRgnBox
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetBkMode
SetBkColor
RestoreDC
SaveDC
Ellipse
FillRgn
SelectObject
CreatePolygonRgn
CreateRectRgnIndirect
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
MoveToEx
LineTo
GetDeviceCaps
CreatePalette
CreateFontIndirectA
CreatePatternBrush
CreateSolidBrush
CreatePen
GetStockObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
PaintRgn
FrameRgn
LPtoDP
SetBrushOrgEx
CreateRoundRectRgn
BitBlt
DPtoLP
GetMapMode
CreateCompatibleDC
GetObjectA
CreateCompatibleBitmap
CreateBitmap
GetTextExtentPoint32A
Rectangle
RealizePalette

comdlg32

ChooseColorA
GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey

shell32

ShellExecuteA
DragFinish
DragQueryFileA
DragAcceptFiles

comctl32

ImageList_AddMasked
ImageList_Draw
_TrackMouseEvent
ImageList_GetIcon
ImageList_Destroy
ImageList_Create
ord17
ImageList_GetImageInfo

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
SHDeleteKeyA
PathFindExtensionA
UrlUnescapeA

oledlg

ord8

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
StgOpenStorageOnILockBytes
CLSIDFromProgID
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromString
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CoGetClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CreateStreamOnHGlobal

oleaut32

SafeArrayAccessData
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringByteLen
SysStringLen
SysFreeString
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString
VariantCopy
OleCreateFontIndirect
SafeArrayCreateVector

wininet

InternetCanonicalizeUrlA
InternetQueryOptionA
InternetQueryDataAvailable
InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetOpenUrlA
InternetCrackUrlA

Sections

.text
Size: 868KB - Virtual size: 866KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a515941d3a24a4259f32a423457ad7f

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

Sections

.text Size: 868KB - Virtual size: 866KB

.rdata Size: 204KB - Virtual size: 203KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 868KB - Virtual size: 866KB

.rdata
Size: 204KB - Virtual size: 203KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB