2024-03-11_8253932b0cf3c9908fc768bf9ce5feb0_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-11_8253932b0cf3c9908fc768bf9ce5feb0_icedid
Size

6.2MB
MD5

8253932b0cf3c9908fc768bf9ce5feb0
SHA1

14c26b2012430923ba8210311dce34fa0c6b1060
SHA256

0650b10063c0a5e7520ce863c276ab880ebca50031e5f80fdfbb810cba085a01
SHA512

1c4088f7ec5118f1f2ead83ef65d2973753f875558f0bc720436571b565316ffa3f921652bce4e8296786b80b8a3e71870908a6110725b563ba650b867100fd9
SSDEEP

98304:rpIZwpprowhX7EbfAHc+ByVBf/jKAP2SLdqmwDEwEb/oopoLKa/anjJIpehHy0p7:rlf7E7z+By3NLsOpoInjKpexFtwCoQEs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-11_8253932b0cf3c9908fc768bf9ce5feb0_icedid

Files

2024-03-11_8253932b0cf3c9908fc768bf9ce5feb0_icedid
.exe windows:4 windows x86 arch:x86

1a82249825e4e5a4e2e63382cfafa3a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameA
GetTempPathA
ExitProcess
GetFileAttributesA
GlobalAddAtomA
GetComputerNameA
lstrcatA
SetUnhandledExceptionFilter
SystemTimeToFileTime
LocalFileTimeToFileTime
GetCurrentThread
TerminateProcess
GetSystemDirectoryA
GetCurrentDirectoryA
GetCurrentProcessId
ResumeThread
GetCurrentThreadId
LoadLibraryExA
IsDBCSLeadByte
RaiseException
GetVersionExA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetSystemTime
SetEndOfFile
lstrcpyA
lstrcmpA
IsBadWritePtr
CreateDirectoryA
CopyFileA
CreateEventA
InterlockedIncrement
CreateThread
TerminateThread
FreeLibrary
GetShortPathNameA
InterlockedDecrement
GetCurrentProcess
WaitForSingleObject
GetModuleFileNameA
WriteFile
SetFileTime
SetFilePointer
ReadFile
GetFileTime
UnmapViewOfFile
CloseHandle
CreateFileA
CreateFileMappingA
MapViewOfFile
GetFileSize
lstrcpynA
FindNextFileA
FindFirstFileA
FindClose
CreateProcessA
GetExitCodeProcess
GetTickCount
MoveFileA
MoveFileExA
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FormatMessageA
LocalFree
DeleteFileA
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
GetStringTypeExA
GetEnvironmentVariableA
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetVersion
GetLastError
SetEnvironmentVariableA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetHandleCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetACP
HeapCreate
HeapDestroy
HeapSize
SetStdHandle
GetStartupInfoA
GetCommandLineA
VirtualFree
GetDateFormatA
GetTimeFormatA
ExitThread
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
IsDebuggerPresent
UnhandledExceptionFilter
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapAlloc
SetErrorMode
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
FindResourceExA
GetOEMCP
GetCPInfo
GlobalFlags
GetProfileIntA
GetDiskFreeSpaceA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetVolumeInformationA
DuplicateHandle
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
VirtualProtect
GetModuleFileNameW
FreeResource
GlobalGetAtomNameA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GlobalFree
GlobalSize
MulDiv
HeapValidate
HeapWalk
GetProcessHeaps
HeapFree
GetProcessHeap
ReleaseMutex
CreateMutexA
GetFileType
GetStdHandle
QueryPerformanceCounter
GlobalMemoryStatus
LoadLibraryW
GetVersionExW
SetEvent
GetExitCodeThread
WaitForMultipleObjects
GetFullPathNameA
QueryPerformanceFrequency
HeapUnlock
HeapLock

user32

CloseClipboard
SetClipboardData
CharUpperA
EmptyClipboard
OpenClipboard
SendMessageA
EnableWindow
PostMessageA
GetParent
InflateRect
OffsetRect
FillRect
DrawFrameControl
CreatePopupMenu
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxW
MsgWaitForMultipleObjects
RemoveMenu
GetSubMenu
InsertMenuA
GetMenuItemID
GetMenuStringA
SetFocus
SetScrollPos
GetScrollPos
GetWindowTextLengthA
GetDlgItem
SendDlgItemMessageA
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
SetWindowLongA
MoveWindow
IsWindowEnabled
SetWindowPos
GetWindowPlacement
SystemParametersInfoA
CallWindowProcA
DefWindowProcA
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
GetSysColor
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
GetMenu
ShowScrollBar
GetScrollRange
SetScrollRange
GetKeyState
TrackPopupMenu
ScrollWindow
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetCapture
IsChild
WinHelpA
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetActiveWindow
CheckMenuItem
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindowThreadProcessId
MapDialogRect
ValidateRect
GetMessageA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
GetMenuItemInfoA
DestroyMenu
PostQuitMessage
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
RedrawWindow
SetRectEmpty
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
WaitMessage
SetRect
SetCursorPos
DestroyCursor
IsClipboardFormatAvailable
CountClipboardFormats
FindWindowA
IsRectEmpty
DrawIcon
SetWindowRgn
UnionRect
SetWindowContextHelpId
GetNextDlgGroupItem
CopyAcceleratorTableA
InvalidateRgn
DestroyIcon
ShowOwnedPopups
GetSysColorBrush
UnregisterClassA
SetParent
GetDCEx
LockWindowUpdate
SendNotifyMessageA
PostThreadMessageA
AppendMenuA
ModifyMenuA
GetSystemMenu
GetWindowRect
GetClientRect
MapWindowPoints
ClientToScreen
InvalidateRect
SetCapture
SetCursor
LoadCursorA
ReleaseCapture
DrawIconEx
LoadImageA
GetSystemMetrics
GetCursorPos
LoadBitmapA
EnumWindows
ShowWindow
GetWindowTextA
LoadIconA
SetForegroundWindow
MessageBoxA
RegisterWindowMessageA
AdjustWindowRectEx
BringWindowToTop
RegisterClipboardFormatA
DrawMenuBar
GetWindow
KillTimer
ChildWindowFromPoint
TranslateAcceleratorA
GetWindowLongA
SetClassLongA
CharNextA
TranslateMessage
DispatchMessageA
EnableMenuItem
GetCaretPos
PtInRect
CopyRect
IntersectRect
GetFocus
IsZoomed
IsIconic
SetMenu
GetMenuState
GetMenuItemCount
DeleteMenu
IsWindowVisible
IsWindow
SetTimer
PeekMessageA
MessageBeep
GetDlgCtrlID
GetDC
ReleaseDC
GetMessagePos
GetAsyncKeyState
DestroyCaret
ShowCaret
HideCaret
SetCaretPos
CreateCaret
WindowFromPoint
GetDesktopWindow
UpdateWindow
ScreenToClient

gdi32

CreateRectRgnIndirect
PatBlt
SaveDC
RestoreDC
SetBkMode
CreatePalette
RealizePalette
StretchBlt
CreateCompatibleBitmap
CreateFontIndirectA
GetTextMetricsA
GetTextExtentPoint32A
GetNearestColor
CreateBrushIndirect
CreateHalftonePalette
SelectPalette
UpdateColors
DeleteObject
GetDIBits
Ellipse
Polyline
CreatePen
CreateDIBitmap
SetBkColor
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
Rectangle
CreateSolidBrush
GetStockObject
SetMapMode
ExcludeClipRect
IntersectClipRect
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetTextColor
GetClipBox
CreateDCA
CopyMetaFileA
GetDeviceCaps
DeleteDC
CreateBitmap
EnumFontFamiliesExA
GetTextColor
StretchDIBits
CreateFontA
GetCharWidthA
GetRgnBox
LPtoDP
CreateEllipticRgn
GetBkColor
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA
ord202

comdlg32

GetFileTitleA

advapi32

RegQueryValueExA
RegOpenKeyA
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegEnumKeyA
RegCreateKeyA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
GetUserNameA
RegQueryValueA
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumKeyExA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
DragAcceptFiles
DragQueryFileA
FindExecutableA
ExtractAssociatedIconA
SHGetFileInfoA
DragFinish
ExtractIconA
ShellExecuteA

ole32

OleCreateStaticFromData
OleCreate
OleLoad
ReleaseStgMedium
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
OleSetMenuDescriptor
CoRevokeClassObject
OleCreateLinkFromData
OleCreateFromData
OleLockRunning
OleSaveToStream
WriteClassStm
OleDuplicateData
OleSave
CreateFileMoniker
CoFreeUnusedLibraries
OleUninitialize
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleGetClipboard
CoDisconnectObject
CreateILockBytesOnHGlobal
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateStreamOnHGlobal
CLSIDFromString
CoRegisterMessageFilter
CoGetMalloc
CoGetClassObject
CoTaskMemFree
CoTaskMemRealloc
OleInitialize
CoTaskMemAlloc
StringFromGUID2
CoInitialize
CLSIDFromProgID
CoCreateInstance
GetHGlobalFromILockBytes

oleaut32

OleCreateFontIndirect
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
SafeArrayCreateVector
VarUI4FromStr
SafeArrayAccessData
SafeArrayDestroy
VarBstrCat
SysStringLen
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SysFreeString
VarBstrFromDate
VariantChangeType
SysStringByteLen
VariantClear
VariantInit
VariantCopy
SysAllocStringLen
SysAllocStringByteLen

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetCrackUrlA
HttpOpenRequestA
InternetConnectA
InternetCloseHandle
HttpSendRequestA
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetCanonicalizeUrlA
HttpAddRequestHeadersA
InternetErrorDlg
InternetSetOptionExA
InternetQueryOptionA
InternetOpenA
InternetSetCookieA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

shlwapi

PathFindFileNameA
UrlUnescapeA
PathFindExtensionA
PathIsUNCA
PathStripToRootA
AssocQueryStringA

psapi

EnumProcessModules

comctl32

ImageList_Create

oledlg

ord4
ord8
ord11
ord3

urlmon

CoInternetGetSession

ws2_32

setsockopt
bind
WSAGetLastError
listen
closesocket
WSAStartup
WSACleanup
select
htonl
WSASetLastError
sendto
recvfrom
WSAAsyncSelect
shutdown
getpeername
ntohs
inet_ntoa
send
recv
gethostbyname
connect
accept
inet_addr
htons
socket

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Exports

Exports

_gbm_deinit@0
_gbm_err@4
_gbm_guess_filetype@8
_gbm_init@0
_gbm_io_close@4
_gbm_io_create@8
_gbm_io_lseek@12
_gbm_io_open@8
_gbm_io_read@12
_gbm_io_setup@24
_gbm_io_write@12
_gbm_query_filetype@8
_gbm_query_n_filetypes@4
_gbm_read_data@16
_gbm_read_header@20
_gbm_read_palette@16
_gbm_version@0
_gbm_write@28

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 612KB - Virtual size: 608KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a82249825e4e5a4e2e63382cfafa3a8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

wininet

version

shlwapi

psapi

comctl32

oledlg

urlmon

ws2_32

oleacc

Exports

Exports

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 612KB - Virtual size: 608KB

.data Size: 184KB - Virtual size: 225KB

.rsrc Size: 368KB - Virtual size: 365KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 612KB - Virtual size: 608KB

.data
Size: 184KB - Virtual size: 225KB

.rsrc
Size: 368KB - Virtual size: 365KB