2024-03-06_c673476eab91869390e306d53e246e4c_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-06_c673476eab91869390e306d53e246e4c_icedid
Size

1.4MB
MD5

c673476eab91869390e306d53e246e4c
SHA1

acd9cc2b4b5956f94e059da6bf4eadb68a06c23b
SHA256

7031dd28c1aa87f62208880aa55bccb80188be6b45e187166dc32d6f47be123b
SHA512

20a8e09ac88e6c5977114b09e5bc7186bb173e017ea0570d5127e4d1dfe21ffeefd5ffc1c85a3609afb4b77c147d27d852746761977e9ed069823f781c23c115
SSDEEP

24576:SxRMReEBUjgVllCBq68gTfXP2JiwXOoPDggU9UPet6/80pZJP9ZR:SxR0rBUjgVllGzE/DPU9UPec/80pZJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-06_c673476eab91869390e306d53e246e4c_icedid

Files

2024-03-06_c673476eab91869390e306d53e246e4c_icedid
.exe windows:4 windows x86 arch:x86

7582af66e65990beda0f0a42b9224534

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
TerminateProcess
SetStdHandle
GetFileType
HeapSize
QueryPerformanceCounter
GetCurrentProcessId
GetTimeZoneInformation
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetCommandLineA
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetStartupInfoA
FindNextFileA
GetVersionExA
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetDateFormatA
GetTimeFormatA
VirtualQuery
GetSystemInfo
VirtualAlloc
RtlUnwind
ExitProcess
SetErrorMode
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
GlobalFlags
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
VirtualProtect
lstrcmpA
GetModuleFileNameA
InterlockedDecrement
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
SetLastError
CopyFileA
FormatMessageA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
lstrcpynA
GetModuleHandleA
GetTickCount
MulDiv
GlobalSize
CreateFileA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileSize
CloseHandle
SetFilePointer
WriteFile
ReadFile
GetProcAddress
GlobalReAlloc
RaiseException
DeleteCriticalSection
InitializeCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceA
GetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentDirectoryA
SetCurrentDirectoryA
FreeLibrary
LoadLibraryA
LocalAlloc
LocalLock
GlobalFree
LocalFree
lstrlenA
lstrcmpiA
WideCharToMultiByte
lstrlenW
CompareStringA
CompareStringW
MultiByteToWideChar
GetVersion
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetStringTypeW

user32

GetSystemMenu
SetParent
PostQuitMessage
ShowOwnedPopups
RegisterClipboardFormatA
LockWindowUpdate
PostThreadMessageA
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
GetDesktopWindow
TranslateAcceleratorA
IsZoomed
SetRectEmpty
EndPaint
BeginPaint
GetWindowDC
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
IsDialogMessageA
CheckRadioButton
GetMenuState
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
MapWindowPoints
TrackPopupMenu
SetScrollPos
GetScrollPos
SetForegroundWindow
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
RegisterClassA
SetWindowPlacement
CallWindowProcA
SetWindowLongA
IsIconic
GetWindowPlacement
GetDoubleClickTime
DeleteMenu
InvertRect
GetMessagePos
IsClipboardFormatAvailable
IntersectRect
GetClassInfoA
DefWindowProcA
FrameRect
GetDC
GetDCEx
ReleaseDC
RedrawWindow
GetWindow
FillRect
GetClassLongA
GetWindowLongA
BeginDeferWindowPos
EndDeferWindowPos
GetSysColorBrush
GetKeyState
OffsetRect
InflateRect
IsChild
GetWindowTextLengthA
wsprintfA
wvsprintfA
GetFocus
MessageBoxA
EqualRect
IsWindow
SetRect
SetWindowPos
TrackMouseEvent
DrawStateA
CharUpperA
GetLastActivePopup
EnableWindow
UpdateWindow
InvalidateRect
GetUpdateRect
GetSysColor
SendMessageA
CheckMenuItem
GetMenuItemID
GetSubMenu
GetMenu
DestroyIcon
LoadBitmapA
SetMenuItemInfoA
GetMenuItemCount
CopyRect
GetMenuItemInfoA
WindowFromPoint
ScreenToClient
SetCapture
GetCapture
PtInRect
GetMessageA
DispatchMessageA
ReleaseCapture
GetDlgCtrlID
CreateDialogIndirectParamA
GetNextDlgTabItem
GetParent
DrawFrameControl
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
IsRectEmpty
ShowScrollBar
LoadIconA
PeekMessageA
SystemParametersInfoA
DrawEdge
GetSystemMetrics
SetWindowTextA
GetWindowTextA
IsWindowEnabled
EndDialog
TranslateMessage
ValidateRect
GetActiveWindow
ClipCursor
UnpackDDElParam
EnableScrollBar
AppendMenuA
EnableMenuItem
ModifyMenuA
CreateMenu
CreatePopupMenu
SetCursor
LoadCursorA
DestroyMenu
LoadMenuA
SetMenu
GetWindowRect
mouse_event
PostMessageA
SetTimer
KillTimer
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SetCursorPos
ClientToScreen
GetClientRect
IsWindowVisible
GetCursorPos
UnregisterClassA

gdi32

ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreatePatternBrush
SetViewportExtEx
StretchDIBits
CreateRectRgnIndirect
SetRectRgn
CombineRgn
DPtoLP
OffsetViewportOrgEx
SetViewportOrgEx
CreateRectRgn
SelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetROP2
SetBkMode
RestoreDC
SaveDC
CreateBitmap
CopyMetaFileA
BitBlt
SetTextColor
CreateFontA
EndDoc
AbortDoc
EndPage
StartPage
StartDocA
GetBkColor
PatBlt
GetTextColor
EnumFontFamiliesA
Ellipse
DeleteObject
SetPixel
GetPixel
Rectangle
GetCurrentObject
CreateSolidBrush
GetStockObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
GetCharWidthA
GetTextMetricsA
CreateFontIndirectA
GetDeviceCaps
SetDIBits
Arc
SelectObject
GetTextExtentPoint32A
CreateCompatibleDC
GetObjectA
CreateCompatibleBitmap
CreatePen
StretchBlt
SetBkColor

comdlg32

PrintDlgA
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey

shell32

DragFinish
DragQueryFileA
ShellExecuteA

comctl32

ord17
ImageList_Draw
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_Destroy

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleUninitialize
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CoFreeUnusedLibraries
CoTaskMemFree
OleInitialize
OleGetClipboard
CoRegisterMessageFilter
CoRevokeClassObject
CreateStreamOnHGlobal

oleaut32

SystemTimeToVariantTime
VarUdateFromDate
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen

Sections

.text
Size: 1012KB - Virtual size: 1010KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 868KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7582af66e65990beda0f0a42b9224534

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 1012KB - Virtual size: 1010KB

.rdata Size: 244KB - Virtual size: 240KB

.data Size: 32KB - Virtual size: 868KB

.rsrc Size: 112KB - Virtual size: 108KB

.text
Size: 1012KB - Virtual size: 1010KB

.rdata
Size: 244KB - Virtual size: 240KB

.data
Size: 32KB - Virtual size: 868KB

.rsrc
Size: 112KB - Virtual size: 108KB