2024-02-28_7f77adef83d8f696c11aecdebc142dab_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-28_7f77adef83d8f696c11aecdebc142dab_icedid
Size

1.7MB
MD5

7f77adef83d8f696c11aecdebc142dab
SHA1

9ece6f7716518f74ab4659fd6f92de504c363a92
SHA256

20724708c8f549a738bdcc69adc6101c3fef2c1448d4c9a6e6d3f440dfe0021f
SHA512

3d292c40b9b8e1e16f4da640f9ae0f807032ae7072b1705145db223b609043346ffcaef555f7e1500dece9a610117021192d02875d9fefc980718254273e27c3
SSDEEP

24576:jyKUboDxsL4KPT9Rm0n5N66tXQOF1BmT9mRDH+9mKWkX+:OKOoDxsLDT7m0LziOnBmT9mRDH+9mFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-28_7f77adef83d8f696c11aecdebc142dab_icedid

Files

2024-02-28_7f77adef83d8f696c11aecdebc142dab_icedid
.exe windows:5 windows x86 arch:x86

cd67a88df5cb79c6aff4604dcef50e48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

wininet

InternetQueryDataAvailable
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA

d3d8

Direct3DCreate8

ws2_32

gethostbyname
inet_addr
WSACleanup
gethostname
WSAStartup

kernel32

InterlockedIncrement
GetThreadLocale
GlobalFree
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
ResumeThread
GetCurrentProcessId
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
FreeResource
DeleteCriticalSection
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
WritePrivateProfileStringA
GetModuleHandleW
SetErrorMode
GetFileSizeEx
GetTickCount
ExitThread
CreateThread
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapReAlloc
HeapSize
GetACP
IsValidCodePage
SetHandleCount
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
GetVersionExA
InterlockedDecrement
GetModuleFileNameW
GetModuleHandleA
LocalFileTimeToFileTime
SetFileTime
GetTimeZoneInformation
SystemTimeToFileTime
RemoveDirectoryA
SetCurrentDirectoryA
SetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
WriteFile
CreateDirectoryA
GetFileAttributesA
CopyFileA
lstrcmpA
Process32First
TerminateProcess
WinExec
Process32Next
CreateToolhelp32Snapshot
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
FindFirstFileA
FindNextFileA
DeleteFileA
FindClose
lstrcatA
FindResourceA
LoadResource
LockResource
SizeofResource
MulDiv
Sleep
lstrcpynA
CreateProcessA
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameA
SetFileAttributesA
GetLocalTime
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalAlloc
ReadFile
CreateFileA
GetFileSize
GetLastError
CloseHandle
FormatMessageA
LocalFree
SuspendThread
GetCurrentDirectoryA
LocalReAlloc

user32

DrawTextExA
GrayStringA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
PostQuitMessage
ValidateRect
GetCursorPos
TranslateMessage
GetMessageA
SetCursor
GetWindowThreadProcessId
MapDialogRect
SetWindowContextHelpId
CharUpperA
UnregisterClassA
DestroyMenu
GetSysColorBrush
LoadCursorA
CopyAcceleratorTableA
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
CheckMenuItem
RegisterWindowMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TabbedTextOutA
SetMenu
IsWindowVisible
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
OffsetRect
IntersectRect
GetWindowPlacement
GetFocus
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
GetDlgCtrlID
IsWindow
SetWindowTextA
GetWindowLongA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
GetWindow
UnhookWindowsHookEx
GetDC
ReleaseDC
GetClassNameA
GetParent
GetDesktopWindow
GetWindowTextA
MessageBoxExA
LoadBitmapA
RegisterClipboardFormatA
EmptyClipboard
SetClipboardData
CloseClipboard
SystemParametersInfoA
GetSystemMetrics
DrawTextA
LoadIconA
SetForegroundWindow
OpenClipboard
FindWindowA
KillTimer
SetTimer
UpdateWindow
IsIconic
PostMessageA
SendMessageA
DrawIcon
MessageBoxA
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
CharNextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
GetKeyState
EnableMenuItem
TrackMouseEvent
ReleaseCapture
SetRect
EnableWindow
InvalidateRect
SetCapture
GetClientRect
GetWindowRect
SetWindowLongA

gdi32

CreateBitmap
GetStockObject
GetBkColor
GetTextColor
SaveDC
RestoreDC
SetMapMode
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SetBkColor
ExtSelectClipRgn
CreateRectRgnIndirect
GetRgnBox
GetMapMode
GetClipBox
GetWindowExtEx
GetViewportExtEx
CreateFontIndirectA
CreateCompatibleBitmap
DeleteObject
DeleteDC
GetDeviceCaps
CreateCompatibleDC
GetObjectA
GetTextMetricsA
SetTextColor
SetBkMode
SelectObject
BitBlt
PtVisible

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oledlg

ord8

ole32

OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
CLSIDFromProgID
CoRegisterMessageFilter
CLSIDFromString
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree

oleaut32

OleLoadPicture
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringByteLen
SysFreeString
OleCreateFontIndirect
SysAllocStringLen
VariantChangeType
SysStringLen
SysAllocString
VariantClear
VariantInit
SafeArrayDestroy
VariantCopy

Sections

.text
Size: 281KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cd67a88df5cb79c6aff4604dcef50e48

Headers

DLL Characteristics

File Characteristics

Imports

winmm

wininet

d3d8

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 281KB - Virtual size: 280KB

.rdata Size: 73KB - Virtual size: 72KB

.data Size: 11KB - Virtual size: 51KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 281KB - Virtual size: 280KB

.rdata
Size: 73KB - Virtual size: 72KB

.data
Size: 11KB - Virtual size: 51KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB