2024-03-08_cdc148a0d72723521e02fb0a561083c7_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-08_cdc148a0d72723521e02fb0a561083c7_icedid
Size

2.3MB
MD5

cdc148a0d72723521e02fb0a561083c7
SHA1

c270781c61587d932cb0e95d6d7642ef50b5cfe9
SHA256

7e87c54901e90ba6b801282c4ab306e2a0b090df3e74bf25308c40cbfa00a229
SHA512

9211629c27a62a4636b32329cabfa20c1d0862e76f7e16aaa482864b33ce205a7fd2120aee6f54db7e96eca888b23afe885815cfda855a7be61531e61f7deb9a
SSDEEP

49152:Jy5OZl4SKGWU37z8YH6Jq9MbpSzE42FgUXRb:jqGl37z8Yz9MbpSzE42Xh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-08_cdc148a0d72723521e02fb0a561083c7_icedid

Files

2024-03-08_cdc148a0d72723521e02fb0a561083c7_icedid
.exe windows:4 windows x86 arch:x86

a82f388e6ea79d8dccd17292d2bb0825

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
GetUserDefaultLCID
EnumSystemLocalesA
UnhandledExceptionFilter
IsValidCodePage
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoW
SetEnvironmentVariableA
DebugBreak
GetStdHandle
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
GetSystemTime
GetNumberFormatA
SetProcessWorkingSetSize
HeapSize
GetFileType
SetStdHandle
TerminateProcess
HeapReAlloc
RtlUnwind
ExitProcess
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
GetDateFormatA
GetTimeFormatA
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
FindResourceExA
SetErrorMode
GetShortPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GlobalFlags
VirtualProtect
GetTempPathA
GetProfileIntA
SearchPathA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
GetFileSize
GetFileAttributesA
CreateFileA
SetFileTime
CloseHandle
SystemTimeToFileTime
LocalFileTimeToFileTime
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetTickCount
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrcmpA
InterlockedDecrement
GetModuleFileNameA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
SetLastError
GlobalSize
FormatMessageA
lstrcpynA
LocalFree
FreeResource
GetVersion
CompareStringA
lstrcmpiA
GetLastError
GetStringTypeExA
lstrlenW
MultiByteToWideChar
CompareStringW
lstrlenA
GlobalAlloc
_lread
GlobalReAlloc
GlobalFree
_lclose
_llseek
OpenFile
lstrcpyA
MulDiv
GlobalUnlock
GlobalLock
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
IsValidLocale
InterlockedExchange
GetProcessHeap

user32

RegisterClipboardFormatA
PostQuitMessage
GetTabbedTextExtentA
ScrollWindowEx
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
IsChild
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
PeekMessageA
MapWindowPoints
ScrollWindow
MessageBoxA
TrackPopupMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
IsWindowVisible
GetMenu
AdjustWindowRectEx
ScreenToClient
EqualRect
MapDialogRect
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
UnregisterClassA
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
GetDialogBaseUnits
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
PtInRect
wsprintfA
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
SetTimer
InflateRect
GetSysColor
InvalidateRect
KillTimer
EnableWindow
SendMessageA
UpdateWindow
GetParent
ShowScrollBar
GetKeyState
FillRect
IsRectEmpty
SetFocus
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
SetWindowContextHelpId
ValidateRect
GetCursorPos
TranslateMessage
GetMessageA
SetCursor
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
CharUpperA
CharLowerA
IsWindow
PostMessageA
GetClassNameA
GetWindow
GetClientRect
GetWindowRect
ShowOwnedPopups
SetCapture
ReleaseCapture
SetRect
DeferWindowPos
GetAsyncKeyState
RedrawWindow
DestroyCaret
CreateCaret
SetCaretPos
SubtractRect
ShowCaret
HideCaret
EnableScrollBar
EmptyClipboard
DrawFocusRect
GetClipboardData
SetClipboardData
CloseClipboard
GetOpenClipboardWindow
OpenClipboard
DrawEdge
SetCursorPos
GetUpdateRect
InvertRect
SetRectEmpty
GetDC
ReleaseDC
DestroyCursor
LoadCursorA
FindWindowA
DrawIcon
SetWindowRgn
TranslateAcceleratorA
SetMenu
BringWindowToTop
IsClipboardFormatAvailable
LockWindowUpdate
GetDCEx
WindowFromPoint
CreateMenu
WindowFromDC
DestroyIcon
MessageBeep
GetNextDlgGroupItem
CreatePopupMenu
CopyAcceleratorTableA
CharNextA
PostThreadMessageA
GetMenuItemInfoA
GetSysColorBrush
SetParent
GetSystemMenu
DeleteMenu
IsZoomed
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
LoadAcceleratorsA
OffsetRect
InsertMenuItemA
InvalidateRgn

gdi32

SetROP2
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
StartDocA
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
SetPolyFillMode
ExtSelectClipRgn
DeleteDC
CreateBitmap
CreateCompatibleDC
ExtCreatePen
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetCharWidthA
GetWindowOrgEx
GetViewportOrgEx
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CreateRectRgnIndirect
SetRectRgn
CombineRgn
PatBlt
CreateEllipticRgn
Ellipse
CreateCompatibleBitmap
CreateFontA
GetRgnBox
EnumFontFamiliesExA
SetBkMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDCA
StretchDIBits
GetTextExtentPoint32A
GetTextMetricsA
DPtoLP
Rectangle
CreateFontIndirectA
LPtoDP
Polyline
Polygon
GetTextColor
CreatePen
DeleteObject
SelectObject
GetMapMode
GetDeviceCaps
GetStockObject
CreateSolidBrush
GetNearestColor
EnumFontFamiliesA
CreateICA
SetBrushOrgEx
StretchBlt
CreatePenIndirect
CreateBrushIndirect
CreatePolygonRgn
FillRgn
FrameRgn
SetPixel
GetTextExtentPointA
CreatePatternBrush

comdlg32

ReplaceTextA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
FindTextA
CommDlgExtendedError
PrintDlgA

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegCloseKey

shell32

DragFinish
DragQueryFileA
ExtractIconA
SHGetFileInfoA
DragAcceptFiles

comctl32

ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8
ord3

ole32

OleCreateFromData
OleSave
CreateStreamOnHGlobal
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
CoRevokeClassObject
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
OleGetClipboard
StgOpenStorageOnILockBytes
OleConvertIStorageToOLESTREAM
ProgIDFromCLSID
OleConvertOLESTREAMToIStorage

oleaut32

VariantTimeToSystemTime
VarUdateFromDate
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantCopy
SafeArrayDestroy
SysAllocString
VarDateFromStr
VarBstrFromDate
OleCreateFontIndirect
VarR8FromStr
SystemTimeToVariantTime

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 844KB - Virtual size: 840KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a82f388e6ea79d8dccd17292d2bb0825

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 280KB - Virtual size: 276KB

.data Size: 28KB - Virtual size: 51KB

.rsrc Size: 844KB - Virtual size: 840KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 280KB - Virtual size: 276KB

.data
Size: 28KB - Virtual size: 51KB

.rsrc
Size: 844KB - Virtual size: 840KB