2024-02-25_a81939aa94278a4a6b0891ae5042bed3_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-02-25_a81939aa94278a4a6b0891ae5042bed3_icedid
Size

408KB
MD5

a81939aa94278a4a6b0891ae5042bed3
SHA1

194d16869e170832d5323d7b78848caad761ecb3
SHA256

3c61d412cfd10e1895f97325be2dfec0382e600fb472e60919eac6e3528edadf
SHA512

043b9c8c751c403a9b25c83db34dfb6ddfd61fe40baff24052f3ec3b355b658bae7f4b3a3d6a7784b7e3dfc8ae61f426eb5b47f48a06155f48405425f8829203
SSDEEP

6144:d2qlNLCisiPk8grohb/V4tl9R50hEzaNoFvff4Sf7/t5D+vDPxjjT6ZRGu:DzL6iPkHohW55aMPYD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-25_a81939aa94278a4a6b0891ae5042bed3_icedid

Files

2024-02-25_a81939aa94278a4a6b0891ae5042bed3_icedid
.exe windows:4 windows x86 arch:x86

8c360cb867b4539b66db19a23b820ada

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

RtlUnwind
HeapFree
HeapAlloc
GetTimeFormatA
GetDateFormatA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
HeapSize
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
VirtualFree
ExitProcess
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
SetErrorMode
GetShortPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetCurrentDirectoryA
GetOEMCP
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GlobalFlags
GetProfileIntA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetTickCount
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetFileTime
GetFileSize
GetFileAttributesA
CreateFileA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
CloseHandle
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
InterlockedDecrement
CopyFileA
MulDiv
GlobalSize
FormatMessageA
lstrcpynA
LocalFree
GlobalFree
FreeResource
lstrcpyA
GetStringTypeExA
CompareStringW
CompareStringA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
FreeLibrary
GlobalLock
GlobalUnlock
lstrcatA
GlobalAlloc
GetModuleFileNameA
GetLocalTime
CreateMutexA
lstrlenW
LoadLibraryA
OutputDebugStringA
GetModuleFileNameW
SetLastError
GetLastError
LoadLibraryW
GetCPInfo
lstrlenA
lstrcmpiA
MultiByteToWideChar
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetVersion
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange

user32

GetDCEx
LockWindowUpdate
SetParent
ReleaseCapture
SetCapture
IsRectEmpty
ShowOwnedPopups
SetCursor
PostQuitMessage
InvalidateRect
SetRectEmpty
EndPaint
BeginPaint
GetWindowDC
GetMessageA
TranslateMessage
ValidateRect
DestroyMenu
InflateRect
SetMenuItemBitmaps
EnableMenuItem
GetMenuCheckMarkDimensions
ShowWindow
IsDialogMessageA
SetDlgItemTextA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
MessageBoxA
TrackPopupMenu
IsWindowVisible
GetClientRect
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
IsIconic
GetWindowPlacement
GetWindow
UnhookWindowsHookEx
GetMenuStringA
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
UnregisterClassA
CharUpperA
SetClipboardData
EnumDisplaySettingsA
RegisterClipboardFormatA
EmptyClipboard
CloseClipboard
SetForegroundWindow
OpenClipboard
KillTimer
SetTimer
ClientToScreen
PostMessageA
LoadMenuA
IsMenu
wsprintfA
SetWindowTextA
GetCursorPos
LoadIconA
GetWindowRect
PtInRect
CheckMenuItem
RegisterWindowMessageA
PostThreadMessageA
WindowFromPoint
LoadCursorA
IsZoomed
UnpackDDElParam
SendMessageTimeoutA
UpdateWindow
SetMenu
GetMenu
GetMenuItemInfoA
DrawIconEx
DestroyIcon
GetSysColorBrush
GetSysColor
GetSystemMetrics
SystemParametersInfoA
GrayStringA
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
GetKeyState
TranslateAcceleratorA
DrawTextExA
DrawTextA
TabbedTextOutA
GetDesktopWindow
ReleaseDC
GetDC
ModifyMenuA
InsertMenuA
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
DeleteMenu
CreatePopupMenu
CreateMenu
DrawEdge
FillRect
LoadBitmapA
CopyRect
SetRect
LoadImageA
SendMessageA
EnableWindow

gdi32

CreatePatternBrush
GetStockObject
StretchDIBits
GetCharWidthA
CreateFontA
CreateRectRgnIndirect
SetRectRgn
CombineRgn
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetBkColor
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
StartDocA
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
MoveToEx
CreateFontIndirectA
CreateSolidBrush
DPtoLP
CreatePen
CreateDCA
CopyMetaFileA
GetTextMetricsA
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
GetTextExtentPoint32W
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextExtentPoint32A
SetPixel
GetPixel
BitBlt
PatBlt
Ellipse
GetBkMode
GetDeviceCaps
CreateCompatibleDC
GetObjectA
CreateCompatibleBitmap
LineTo

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
PrintDlgA
CommDlgExtendedError

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter
GetJobA

advapi32

GetFileSecurityA
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
RegCloseKey
SetFileSecurityA

shell32

SHGetFileInfoA
Shell_NotifyIconA
DragFinish
DragQueryFileA
ExtractIconA
ShellExecuteA

comctl32

ord17
ImageList_Destroy
ImageList_Create
ImageList_GetImageInfo

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

DoDragDrop
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CoRegisterMessageFilter
CoTaskMemFree
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CreateStreamOnHGlobal

oleaut32

SysAllocStringLen
VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c360cb867b4539b66db19a23b820ada

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 260KB - Virtual size: 259KB

.rdata Size: 72KB - Virtual size: 70KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 64KB - Virtual size: 62KB

.text
Size: 260KB - Virtual size: 259KB

.rdata
Size: 72KB - Virtual size: 70KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 64KB - Virtual size: 62KB