2024-02-28_1e439861e140f4250e4577294d287908_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-02-28_1e439861e140f4250e4577294d287908_icedid
Size

43.8MB
MD5

1e439861e140f4250e4577294d287908
SHA1

9b3a24e45b04c82aef1b85085414b8d3302c1af1
SHA256

d3e4b0b7c96a4890bee894537aab2ad78b49b6b85a97246d4bf2537e21aa82d2
SHA512

2db9e062cd76d154a83d0e0141ec2706961594f7522730ac03b932df20b793cc10e41d718270c95921b4ff27f683c0703e5c2cfffbf939877071921ad7a5b3cc
SSDEEP

98304:aWopJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJM:7oM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-28_1e439861e140f4250e4577294d287908_icedid

Files

2024-02-28_1e439861e140f4250e4577294d287908_icedid
.exe windows:5 windows x86 arch:x86

d9dd3c0a524792fe91088d8a3a3f087c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
UnmapViewOfFile
OpenProcess
MapViewOfFile
CreateFileMappingA
SetEnvironmentVariableA
CompareStringW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetACP
HeapReAlloc
HeapSize
HeapAlloc
VirtualFree
HeapFree
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
QueryPerformanceCounter
LoadLibraryW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
OutputDebugStringW
GetFileType
WriteConsoleW
GetStdHandle
DebugBreak
VirtualQuery
GetSystemInfo
VirtualAlloc
RaiseException
RtlUnwind
IsBadReadPtr
HeapValidate
GetSystemTimeAsFileTime
GetFileSizeEx
GetTickCount
GetFileTime
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetModuleHandleW
FileTimeToSystemTime
GetThreadLocale
WritePrivateProfileStringA
VirtualProtect
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
GetOEMCP
GetCPInfo
GlobalFlags
GetAtomNameA
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
SetEvent
FormatMessageA
LocalFree
GlobalFree
InterlockedExchange
GlobalAlloc
lstrcmpA
GetCurrentThread
GetLocaleInfoA
ConvertDefaultLocale
EnumResourceLanguagesA
CompareStringA
MultiByteToWideChar
FreeResource
lstrcmpW
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
SetLastError
SizeofResource
WideCharToMultiByte
Sleep
FindResourceA
LockResource
LoadResource
ExitProcess
GetModuleFileNameA
lstrlenA
lstrcpyA
FreeLibrary
CloseHandle
GetProcAddress
LoadLibraryA
OutputDebugStringA
GetCommandLineA
GetStartupInfoA
GetLastError
OpenEventA

advapi32

SetThreadToken
OpenThreadToken
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SetSecurityInfo
InitializeAcl
RevertToSelf

comctl32

_TrackMouseEvent

comdlg32

GetFileTitleA

gdi32

GetWindowExtEx
PtVisible
RectVisible
RoundRect
BitBlt
GetPixel
TextOutA
ExtTextOutA
GetTextExtentPoint32A
Escape
DeleteDC
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
MoveToEx
LineTo
DeleteObject
ExtSelectClipRgn
GetViewportExtEx
GetMapMode
GetTextColor
GetBkColor
SelectObject
GetDeviceCaps
CreateCompatibleDC
GetRgnBox
GetObjectA
GetStockObject
GetObjectType
CreatePen
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateBitmap
CreateFontIndirectA
CreatePatternBrush
CreateSolidBrush

ole32

OleIsCurrentClipboard
CoRegisterMessageFilter
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
StringFromGUID2
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleFlushClipboard

oleaut32

SystemTimeToVariantTime
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
SafeArrayDestroy
SysAllocString
VariantCopy
VariantTimeToSystemTime
SysAllocStringLen

oledlg

ord8

shell32

DragFinish
DragQueryFileA

shlwapi

PathFindFileNameA
PathIsUNCA
PathFindExtensionA
PathStripToRootA

user32

CharNextA
LoadAcceleratorsA
ReleaseCapture
SetRectEmpty
UnpackDDElParam
GetClipboardFormatNameA
DestroyMenu
GetWindowThreadProcessId
SetCursor
GetCursorPos
GetMessageA
TranslateMessage
EndDialog
CreateDialogIndirectParamA
PostQuitMessage
GetMenuCheckMarkDimensions
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
SendDlgItemMessageA
PeekMessageA
DispatchMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
WinHelpA
TrackPopupMenu
GetDlgItem
GetKeyState
DestroyWindow
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSysColor
CopyAcceleratorTableA
LoadMenuA
SetMenuItemBitmaps
ModifyMenuA
InsertMenuItemA
GetSubMenu
GetMenuItemInfoA
GetMenuState
GetMenuItemID
GetMenuItemCount
EnableMenuItem
CheckMenuItem
AppendMenuA
IsMenu
CreatePopupMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DrawStateA
DrawIcon
FillRect
LoadBitmapA
GetSysColorBrush
LoadIconA
LoadCursorA
PostThreadMessageA
GetWindowLongA
MapDialogRect
EnableWindow
SetWindowContextHelpId
GetForegroundWindow
SetForegroundWindow
GetWindowTextA
GetSystemMetrics
DrawFocusRect
SendMessageA
IsWindow
GetParent
IsChild
GetLastActivePopup
GetWindow
GetTopWindow
MessageBeep
TranslateAcceleratorA
ReuseDDElParam
GetNextDlgTabItem
RegisterClipboardFormatA
IsRectEmpty
PostMessageA
InflateRect
SetRect
PtInRect
GetSystemMenu
IsIconic
BringWindowToTop
GetWindowRect
GetClientRect
MapWindowPoints
ClientToScreen
ScreenToClient
BeginPaint
EndPaint
GetDC
GetWindowDC
ReleaseDC
UpdateWindow
InvalidateRect
InvalidateRgn
ValidateRect
IsWindowVisible
ShowOwnedPopups
GetActiveWindow
SetActiveWindow
GetCapture
SetCapture
GetFocus
GetDesktopWindow
GetNextDlgGroupItem
CharUpperA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Sections

.text
Size: 532KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

gu_idata
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

gu_rsrcs
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9dd3c0a524792fe91088d8a3a3f087c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

comctl32

comdlg32

gdi32

ole32

oleaut32

oledlg

shell32

shlwapi

user32

winspool.drv

Sections

.text Size: 532KB - Virtual size: 532KB

.rdata Size: 124KB - Virtual size: 124KB

.data Size: 32KB - Virtual size: 32KB

.rsrc Size: 44KB - Virtual size: 44KB

gu_idata Size: 8KB - Virtual size: 12KB

gu_rsrcs Size: 39KB - Virtual size: 39KB

.text
Size: 532KB - Virtual size: 532KB

.rdata
Size: 124KB - Virtual size: 124KB

.data
Size: 32KB - Virtual size: 32KB

.rsrc
Size: 44KB - Virtual size: 44KB

gu_idata
Size: 8KB - Virtual size: 12KB

gu_rsrcs
Size: 39KB - Virtual size: 39KB