2024-02-25_a09a7457f46005c41cc9dd1f76b6ff65_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-25_a09a7457f46005c41cc9dd1f76b6ff65_icedid
Size

652KB
MD5

a09a7457f46005c41cc9dd1f76b6ff65
SHA1

bdd28a65afeac181eb57c9ab997e7d71be0e0c5d
SHA256

3e6fd60a24e0224426de5f57111570341157026acf27217718f7c41465adf507
SHA512

d9dc4698f19b8e334bb467503c9c61db31f6aebf0d6d6a632dedbb39f75969d984bde61abcaccd8eb5112648b898ec2861edb5a3c326add61d181e6ca898ba77
SSDEEP

12288:JSCSq6mHDT7/dFub9uaXOOkOs+pgdgo8u6lcO16I4Hoh6CTLWXS:7kbYa+OMwzo8uQGXS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-25_a09a7457f46005c41cc9dd1f76b6ff65_icedid

Files

2024-02-25_a09a7457f46005c41cc9dd1f76b6ff65_icedid
.exe windows:4 windows x86 arch:x86

f5f0606027dc633a3ad618fbcebee62d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Documents and Settings\MKSagiroglu\Desktop\KKSRedist\TestPrg\Release\TestPrg.pdb

Imports

wsock32

gethostbyname
ioctlsocket
WSAStartup

winhttp

WinHttpConnect
WinHttpOpenRequest
WinHttpSetOption
WinHttpOpen
WinHttpReadData
WinHttpReceiveResponse
WinHttpWriteData
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpAddRequestHeaders

iphlpapi

GetIfTable
GetAdaptersInfo

chartdir41

CBaseChart_makeChart3
CBaseChart_destroy
CDrawArea_destroy
CImageMapHandler_getValue2
CImageMapHandler_getKey
CXYChart_setPlotArea
CXYChart_swapXY
CLayer_set3D
CAxis_setLabels
CAxis_setTitle
CAxis_setLabelStyle
CBaseChart_linearGradientColor
CBaseChart_addLegend
LegendBox2TextBox
TextBox2Box
CBox_setBackground
Box2DrawObj
CChart_setLicenseCode
CViewPortManager_startDrag
CViewPortManager_zoomTo
CViewPortManager_zoomAt
CViewPortManager_canZoomOut
CViewPortManager_canZoomIn
BarLayer2Layer
CViewPortManager_inPlotArea
CViewPortManager_setChartMetrics
CBaseChart_makeChart2
CBaseChart_getChartMetrics
CImageMapHandler_create
CImageMapHandler_destroy
CImageMapHandler_getHotSpot
CImageMapHandler_getValue
CViewPortManager_create
CViewPortManager_destroy
CViewPortManager_validateViewPort
CXYChart_addAreaLayer
CXYChart_addLineLayer
CXYChart_addBarLayer
CXYChart_xAxis
CXYChart_yAxis
LineLayer2Layer
AreaLayer2Layer
XYChart2BaseChart
CXYChart_create

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

lstrcmpW
lstrcatA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
FreeResource
InterlockedDecrement
lstrcpyA
EnumResourceLanguagesA
ConvertDefaultLocale
lstrcmpA
GetCurrentThread
WaitForSingleObject
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
CreateFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
GetModuleHandleA
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetFileAttributesA
GetFileTime
WritePrivateProfileStringA
GetCurrentDirectoryA
SetErrorMode
FindNextFileA
GetTickCount
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
HeapSize
SetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
SetUnhandledExceptionFilter
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
GetTempPathA
DeleteFileA
SuspendThread
ResumeThread
GetProcAddress
OutputDebugStringA
SetCurrentDirectoryA
TerminateThread
ExitThread
CreateEventA
FindResourceA
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
CopyFileA
Sleep
CreateMutexA
ExitProcess
LoadLibraryA
FreeLibrary
CloseHandle
CreateThread
GetProcessHeap
HeapAlloc
HeapFree
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
EnumResourceTypesA
EnumResourceNamesA
TlsSetValue

user32

SetWindowTextA
MoveWindow
ShowWindow
IsWindowEnabled
LoadBitmapA
GetMenuCheckMarkDimensions
CheckMenuItem
ModifyMenuA
SetMenuItemBitmaps
wsprintfA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
WindowFromPoint
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetActiveWindow
PostQuitMessage
ShowOwnedPopups
ValidateRect
TranslateMessage
GetMessageA
MapDialogRect
SetWindowContextHelpId
InflateRect
GetMenuItemInfoA
DestroyMenu
GetSysColorBrush
TranslateAcceleratorA
SetMenu
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
DeleteMenu
DestroyIcon
CharNextA
SetRect
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
GetDCEx
LockWindowUpdate
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
IsDialogMessageA
GetMessagePos
PeekMessageA
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetMenu
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
CopyRect
PtInRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindow
IsWindow
SetFocus
IsChild
EnableMenuItem
RedrawWindow
UpdateWindow
GetSystemMetrics
LoadIconA
GetDesktopWindow
SetActiveWindow
GetClientRect
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
FindWindowA
FindWindowExA
MessageBoxA
LoadStringA
GetFocus
GetWindowRect
GetSysColor
InvalidateRect
PostMessageA
ReleaseCapture
SetCursor
CreateCursor
DestroyCursor
LoadCursorA
SetParent
GetParent
SetCapture
KillTimer
ReleaseDC
GetDC
MapWindowPoints
SendMessageA
RegisterWindowMessageA
UnregisterClassA
EnableWindow
SetTimer
CharUpperA
GetMessageTime
LoadImageA
SetMenuDefaultItem
EnumChildWindows
DrawAnimatedRects
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
DrawStateA
GetCursorPos
ClientToScreen
SetWindowRgn
FillRect
IsRectEmpty
WinHelpA
GetKeyState
GetCapture
SetWindowPos

gdi32

SetTextColor
SetBkColor
GetObjectA
CreateEllipticRgn
LPtoDP
Ellipse
SaveDC
RestoreDC
SetBkMode
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
GetClipBox
TextOutA
ExtTextOutA
GetDeviceCaps
BitBlt
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
CreatePen
CreateRectRgnIndirect
PatBlt
CreateFontIndirectA
GetTextExtentPoint32A
SetRectRgn
CombineRgn
GetMapMode
GetTextMetricsA
GetBkColor
GetTextColor
GetRgnBox
StretchDIBits
CreateCompatibleDC
Polygon
SetPixel
EnumFontFamiliesExA
CreateDIBSection
CreateCompatibleBitmap
CreateBitmap
CreateDIBitmap
DeleteObject
CreateSolidBrush
RectVisible
FloodFill

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueExA

shell32

SHAppBarMessage
DragQueryFileA
DragFinish
ShellExecuteA
Shell_NotifyIconA

comctl32

ImageList_GetImageInfo
ImageList_Draw
_TrackMouseEvent
InitCommonControlsEx
ImageList_Create
ImageList_Destroy
ord17
ImageList_ReplaceIcon

shlwapi

PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathFindExtensionA

oledlg

ord8

ole32

CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

VariantClear
VariantChangeType
VariantInit
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen

gdiplus

GdipCloneImage
GdiplusShutdown
GdipFree
GdiplusStartup
GdipCreateFromHDC
GdipDrawImageRectI
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromResource

wininet

InternetConnectA
FtpFindFirstFileA
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
InternetFindNextFileA
FtpGetFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA

Sections

.text
Size: 336KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5f0606027dc633a3ad618fbcebee62d

Headers

File Characteristics

PDB Paths

Imports

wsock32

winhttp

iphlpapi

chartdir41

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

wininet

Sections

.text Size: 336KB - Virtual size: 332KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 12KB - Virtual size: 28KB

.rsrc Size: 212KB - Virtual size: 212KB

.text
Size: 336KB - Virtual size: 332KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 12KB - Virtual size: 28KB

.rsrc
Size: 212KB - Virtual size: 212KB