2024-02-24_a5e50955a880e6c166f2a4995e081aa2_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-24_a5e50955a880e6c166f2a4995e081aa2_icedid
Size

544KB
MD5

a5e50955a880e6c166f2a4995e081aa2
SHA1

18069399285346fcaa49cc22cdf814e174957cfb
SHA256

3423a2b559ea34d18f323c23edfc58d6876b6be4a1933581ef84f21d56c14dfa
SHA512

e70b73fd422cdaff0ff43ed0f5222fdb19acf58ea55cc2ad1e74165be4f2ddf1c53702ecfa8daccf01db23771f41df331e1bd0712a56839a0cb59a5091bcc48b
SSDEEP

12288:OMrN/EAxhe+ZW2lksgd/xi3JkQXn7G3MQFI5aRKeLOpMjp0wqNeLiO0LoMItpfgB:OMJEt+ZAa8g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-24_a5e50955a880e6c166f2a4995e081aa2_icedid

Files

2024-02-24_a5e50955a880e6c166f2a4995e081aa2_icedid
.exe windows:4 windows x86 arch:x86

14961f31b5bc8b8aa751b150e3eafe9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
HeapReAlloc
GetVersionExA
ExitProcess
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
RtlUnwind
HeapAlloc
SetErrorMode
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringA
GetOEMCP
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetTickCount
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
lstrcmpA
CloseHandle
InterlockedDecrement
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
lstrcpynA
GetModuleHandleA
FreeResource
CompareStringW
CompareStringA
GetLastError
GetModuleFileNameA
FindFirstFileA
FindNextFileA
FindClose
LoadLibraryA
GetProcAddress
FreeLibrary
HeapFree
GetProcessHeap
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
GetCPInfo
lstrlenA
lstrcmpiA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
MultiByteToWideChar
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersion
GetFileType

user32

SetParent
ReleaseCapture
wsprintfA
RegisterClipboardFormatA
CreateDialogIndirectParamA
EndDialog
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GetMessageA
TranslateMessage
ValidateRect
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
IsWindowEnabled
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
MessageBoxA
TrackPopupMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
AdjustWindowRectEx
EqualRect
GetClassInfoA
RegisterClassA
CallWindowProcA
SetWindowPos
IntersectRect
GetWindowPlacement
GetWindow
DefWindowProcA
GetDlgCtrlID
GetKeyState
GetCursorPos
IsChild
GetCapture
KillTimer
SetTimer
ScreenToClient
DeferWindowPos
IsWindow
SetRectEmpty
PtInRect
SetWindowLongA
GetMenuStringA
DestroyMenu
LoadIconA
IsIconic
GetSystemMenu
DrawIcon
UnregisterClassA
PostMessageA
SetCursor
DestroyCursor
GetWindowLongA
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
PostThreadMessageA
SetCapture
LockWindowUpdate
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
DrawFocusRect
FrameRect
OffsetRect
InflateRect
IsMenu
DrawStateA
GetMenuItemInfoA
GetSystemMetrics
SystemParametersInfoA
DrawIconEx
DestroyIcon
GrayStringA
GetDCEx
LoadCursorA
DrawTextExA
DrawTextA
TabbedTextOutA
EnableWindow
GetDesktopWindow
ReleaseDC
GetDC
ModifyMenuA
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
CreatePopupMenu
CreateMenu
DrawEdge
LoadBitmapA
GetSysColorBrush
FillRect
GetSysColor
CopyRect
SetRect

gdi32

CreatePatternBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
SaveDC
GetClipBox
GetBkColor
CreateFontA
GetCharWidthA
StretchDIBits
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
GetTextExtentPoint32W
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
RestoreDC
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateRectRgn
SelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
DeleteDC
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextExtentPoint32A
SetPixel
GetPixel
PatBlt
Ellipse
GetBkMode
GetDeviceCaps
GetObjectA
CreateCompatibleBitmap
CreateFontIndirectA
CreatePen
CreateCompatibleDC
CreateDIBSection
SelectObject
BitBlt
CreateSolidBrush
DeleteObject
SetBkMode

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegQueryValueExA

shell32

ShellExecuteExA

comctl32

ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Draw
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Create
ImageList_AddMasked

shlwapi

PathFindFileNameA
PathFindExtensionA

oledlg

ord8

ole32

OleUninitialize
CoFreeUnusedLibraries
CoCreateInstance
OleInitialize
CoRevokeClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard

oleaut32

SysAllocStringLen
VariantChangeType
VariantClear
VariantInit

winmm

PlaySoundA

Sections

.text
Size: 176KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 308KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

14961f31b5bc8b8aa751b150e3eafe9a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

winmm

Sections

.text Size: 176KB - Virtual size: 172KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 12KB - Virtual size: 23KB

.rsrc Size: 308KB - Virtual size: 304KB

.text
Size: 176KB - Virtual size: 172KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 12KB - Virtual size: 23KB

.rsrc
Size: 308KB - Virtual size: 304KB