2024-02-25_f531f0e9d1b2d70a77f49958e70824c6_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-25_f531f0e9d1b2d70a77f49958e70824c6_icedid
Size

448KB
MD5

f531f0e9d1b2d70a77f49958e70824c6
SHA1

b3092789d745986eb3bd0a19c7571e6c5318be86
SHA256

05582f40b306859a73a66300f5d9962a27ef379663755544aa6f853dee64d20f
SHA512

84d184c9a72147a91d5bf56beed962f2343757c3e7b94dd84f903f4a291e45da09335f7ac6fa603696ff5b070c971912308073e6a1f3096861b2e97c5f8365d3
SSDEEP

6144:3lNeV7FVBzLz9kOmQZi0RozP1W4jnIOn0jDH//dX7aiQaO0bQoIn:IhVhdkOmQcvQ4jnTwPQGI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-25_f531f0e9d1b2d70a77f49958e70824c6_icedid

Files

2024-02-25_f531f0e9d1b2d70a77f49958e70824c6_icedid
.exe windows:4 windows x86 arch:x86

61c64353096734bcea85f352aa76380e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Documents and Settings\MKSagiroglu\Desktop\KKSRedist\KolayKurulumSihirbazi\Release\KolayKurulumSihirbazi.pdb

Imports

winmm

PlaySoundA

wsock32

WSAGetLastError
socket
closesocket
ioctlsocket
gethostbyname
htons
send
recv
WSAStartup
connect

winhttp

WinHttpSendRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpConnect
WinHttpOpen
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpReceiveResponse

iphlpapi

GetIfTable
GetAdaptersInfo

kernel32

GetFullPathNameA
CreateFileA
InterlockedIncrement
GlobalFlags
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
FileTimeToSystemTime
GetCPInfo
GetOEMCP
GetFileAttributesA
GetFileTime
GetVolumeInformationA
FileTimeToLocalFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
GetStartupInfoA
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
InterlockedDecrement
WritePrivateProfileStringA
FreeResource
ResumeThread
GlobalAddAtomA
GlobalFree
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
CreateProcessA
GetTickCount
GetProcessHeap
HeapAlloc
HeapFree
CreateToolhelp32Snapshot
Process32First
OpenProcess
Process32Next
GetExitCodeProcess
TerminateProcess
DeleteFileA
GetModuleHandleA
OutputDebugStringA
CreateEventA
CreateThread
SetEvent
WaitForSingleObject
ExitThread
TerminateThread
GetProcAddress
SetLastError
lstrcpyA
GetCurrentProcessId
GetPrivateProfileStringA
MulDiv
GetCommandLineA
GetModuleFileNameA
SetCurrentDirectoryA
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
CreateMutexA
Sleep
CloseHandle
FreeLibrary
LoadLibraryA
ExitProcess
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetErrorMode

user32

SetWindowRgn
SetCapture
GetSysColorBrush
CharNextA
SetRect
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
SetMenu
TranslateAcceleratorA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetMenu
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
IsRectEmpty
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
GetWindowPlacement
PtInRect
GetSysColor
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
InflateRect
CopyRect
UnhookWindowsHookEx
SetWindowContextHelpId
MapDialogRect
SetWindowPos
wsprintfA
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
CharUpperA
SendMessageA
ReleaseDC
GetDC
LoadStringA
GetActiveWindow
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetLastActivePopup
IsWindowEnabled
ShowOwnedPopups
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
WindowFromPoint
UnpackDDElParam
ReuseDDElParam
LoadMenuA
ReleaseCapture
PostQuitMessage
PostMessageA
IsWindowVisible
ClipCursor
LoadCursorA
GetWindowLongA
SetWindowLongA
SetForegroundWindow
KillTimer
SetTimer
UpdateWindow
SetCursor
GetFocus
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
GetClassInfoA
BringWindowToTop
MessageBoxA
SetFocus
GetWindow
GetDesktopWindow
VkKeyScanA
keybd_event
RegisterWindowMessageA
DrawIcon
AppendMenuA
GetSystemMenu
IsIconic
GetWindowRect
GetClientRect
RedrawWindow
FindWindowA
FindWindowExA
EnableWindow
LoadIconA
UnregisterClassA
GetSystemMetrics
InvalidateRect
GetParent

gdi32

ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
CreateSolidBrush
CreateRectRgnIndirect
CreateEllipticRgn
LPtoDP
Ellipse
GetBkColor
GetTextColor
GetRgnBox
GetMapMode
ScaleWindowExtEx
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPoint32A
ExtTextOutA
CreateFontIndirectA
GetObjectA
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
GetDeviceCaps
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
DeleteObject
SetMapMode
OffsetViewportOrgEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey

shell32

ShellExecuteA
DragFinish
DragQueryFileA
SHGetFolderPathA

comctl32

InitCommonControlsEx
_TrackMouseEvent
ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleUninitialize
CreateILockBytesOnHGlobal
OleInitialize
StgCreateDocfileOnILockBytes
CoFreeUnusedLibraries
CoRevokeClassObject
CoUninitialize
CoInitialize
CoTaskMemFree
CoGetClassObject
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
StgOpenStorageOnILockBytes

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
SysAllocString
OleCreateFontIndirect

gdiplus

GdipDeleteFont
GdipCreateSolidFill
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipDrawString
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipGetFamily
GdipCloneBrush
GdipDeleteFontFamily
GdipDeleteBrush
GdipDrawImageI
GdipCloneImage
GdipDrawImageRectI
GdipCreateFromHDC
GdipCreateBitmapFromResource
GdipGetImageHeight
GdiplusShutdown
GdipGetImageWidth
GdiplusStartup
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage

Sections

.text
Size: 304KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61c64353096734bcea85f352aa76380e

Headers

File Characteristics

PDB Paths

Imports

winmm

wsock32

winhttp

iphlpapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

Sections

.text Size: 304KB - Virtual size: 302KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 48KB - Virtual size: 48KB

.text
Size: 304KB - Virtual size: 302KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 48KB - Virtual size: 48KB