2024-03-09_c5e70285a036e94af8a0825e1bc88266_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-03-09_c5e70285a036e94af8a0825e1bc88266_icedid
Size

1.8MB
MD5

c5e70285a036e94af8a0825e1bc88266
SHA1

b3118e780cd2910bc729843b32a8d1ad27bca49c
SHA256

9850145a7f04a5546f2a2c1820974a99a269021aa8edb1aa7f03700d53316d33
SHA512

9ed689caf9618b6d50d8b59b3b195db42473049c2c85afebf98d09f02042a91a6f7eb1c051b3f49e4e6436f78fdfe26fd0d2550d4ca900eb3d501242dcc0c37e
SSDEEP

24576:pyqHE8+Qr+XCq8Xe7nNG1klWEkhQHpd14+lgHpnk:pyqHEkSiuhYEkepd14tG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-09_c5e70285a036e94af8a0825e1bc88266_icedid

Files

2024-03-09_c5e70285a036e94af8a0825e1bc88266_icedid
.exe windows:4 windows x86 arch:x86

a03e3f2299c48a84d480c097588b0c00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CertGetNameStringW
CertVerifyTimeValidity
CertFreeCertificateContext
CertCreateCertificateContext

ws2_32

WSASetLastError
setsockopt
socket
WSAStartup
recv
ntohl
closesocket
__WSAFDIsSet
send
sendto
recvfrom
gethostbyname
inet_addr
getsockopt
connect
accept
shutdown
select
htons
ioctlsocket
WSAGetLastError

kernel32

SizeofResource
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetFileSize
GetFileTime
SetErrorMode
WritePrivateProfileStringW
GetStartupInfoW
ExitProcess
HeapFree
HeapAlloc
RtlUnwind
CreateThread
ExitThread
RaiseException
HeapReAlloc
GetDriveTypeA
GetTimeZoneInformation
GetSystemTime
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
SetConsoleCtrlHandler
TerminateProcess
HeapSize
SetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
SetHandleCount
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetFullPathNameA
GetCurrentDirectoryA
CreateFileA
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
FindResourceA
GlobalAddAtomA
GetProfileStringA
InterlockedExchange
GetFileAttributesW
MultiByteToWideChar
LocalAlloc
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryW
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetWindowsDirectoryW
Sleep
GetModuleFileNameW
WaitForSingleObject
GetLastError
GetTempPathW
CloseHandle
SetLastError
lstrlenW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FindClose
FindFirstFileW
GetLocalTime
SystemTimeToFileTime
SuspendThread
ResumeThread
CreateMutexW
GetCommandLineW
FormatMessageA
GetCurrentThreadId
GetVersion
GetFileType
GetStdHandle
GetCurrentProcessId
GlobalMemoryStatus
QueryPerformanceCounter
GetTickCount
LoadLibraryA
GetVersionExA
FlushConsoleInputBuffer
FindFirstFileA
LoadResource
FindResourceW
LockResource
GlobalFree
GlobalUnlock
GlobalLock
GetModuleHandleA
MulDiv
GetModuleHandleW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
lstrcatW
lstrlenA
InterlockedIncrement
InterlockedDecrement
lstrcpynW
SetEvent
SetThreadPriority
CreateEventW
LocalFree
FormatMessageW
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
FileTimeToLocalFileTime
DuplicateHandle
GetCurrentProcess
CreateFileW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationW
GetFullPathNameW
GetThreadLocale
lstrcmpiW
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalAlloc
lstrcmpW
GlobalFlags

user32

CharNextW
CopyAcceleratorTableW
SetRect
GetNextDlgGroupItem
RegisterClipboardFormatW
PostThreadMessageW
IsWindowVisible
GetTopWindow
MessageBoxW
IsChild
GetCapture
WinHelpW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
GetKeyState
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoW
GetWindowPlacement
CopyRect
GrayStringW
DrawTextW
GetSysColorBrush
EndPaint
BeginPaint
SetWindowContextHelpId
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetParent
GetWindowLongW
IsWindowEnabled
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
IsIconic
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuW
SetWindowPos
SetActiveWindow
RegisterWindowMessageW
GetClassInfoW
FindWindowW
GetDesktopWindow
GetWindowRect
MessageBeep
GetDlgItem
InvalidateRect
RedrawWindow
LoadCursorW
SetCursor
IsWindow
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
DrawFocusRect
GetSystemMetrics
PostMessageW
wsprintfW
GetFocus
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendDlgItemMessageA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
InflateRect
PtInRect
GetClassNameW
DestroyMenu
LoadStringW
TabbedTextOutW
MapDialogRect
SetPropA
GetPropA
EnableWindow
LoadIconW
SendMessageW
SetTimer
PostQuitMessage
CharUpperW
GetMessageW
TranslateMessage
ValidateRect
GetCursorPos
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
UpdateWindow
SendDlgItemMessageW
MapWindowPoints
GetSysColor
PeekMessageW
DispatchMessageW
SetFocus
AdjustWindowRectEx
GetWindowDC

gdi32

ExtTextOutA
GetTextExtentPointA
LPtoDP
GetBkColor
GetTextColor
DPtoLP
GetMapMode
CreateBitmap
GetObjectW
PatBlt
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
IntersectClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkMode
SetBkColor
GetStockObject
RestoreDC
SaveDC
CreateCompatibleDC
GetDeviceCaps
SelectObject
BitBlt
DeleteObject
DeleteDC
CreateSolidBrush
CreateFontIndirectW
CreateFontW
CreateDIBitmap

comdlg32

GetOpenFileNameW
GetFileTitleW
GetSaveFileNameW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
DeregisterEventSource
ReportEventA
RegisterEventSourceA

shell32

ShellExecuteExW
ord680
SHGetSpecialFolderPathA

comctl32

ImageList_ReplaceIcon
ord17
ImageList_Create
ImageList_Destroy

oledlg

OleUIBusyW

ole32

CLSIDFromProgID
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
CoGetClassObject
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
CoCreateGuid
StgOpenStorageOnILockBytes

olepro32

ord253

oleaut32

VariantClear
VariantCopy
SysAllocString
VariantChangeType
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen

wininet

InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenUrlW
InternetCloseHandle
InternetOpenW
InternetQueryOptionW
InternetGetLastResponseInfoW
HttpQueryInfoW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetGetConnectedState

Sections

.text
Size: 996KB - Virtual size: 992KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 500KB - Virtual size: 497KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a03e3f2299c48a84d480c097588b0c00

Headers

File Characteristics

Imports

crypt32

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wininet

Sections

.text Size: 996KB - Virtual size: 992KB

.rdata Size: 244KB - Virtual size: 243KB

.data Size: 112KB - Virtual size: 162KB

.rsrc Size: 500KB - Virtual size: 497KB

.text
Size: 996KB - Virtual size: 992KB

.rdata
Size: 244KB - Virtual size: 243KB

.data
Size: 112KB - Virtual size: 162KB

.rsrc
Size: 500KB - Virtual size: 497KB