2024-03-11_ae3669e8bb25e2defa613676dbffb2b1_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-11_ae3669e8bb25e2defa613676dbffb2b1_icedid
Size

387KB
MD5

ae3669e8bb25e2defa613676dbffb2b1
SHA1

e6210ba7c20c481a6e64c1cbb7e5d21f94803339
SHA256

26bda82c91c993184ec46f4daccecd18ea82b6a1431ac4bbff4c976051a481d7
SHA512

653d36fab21599831d4bc72b02fa41b675ae84bdd8d926a96dc74b89dd9884e5e703eb45c72ec418167e419963c6b77bbc92973d10461d8747c4b793f7f3b479
SSDEEP

6144:Lc4sOmFPBb0HFgc8qwk5uHM9ZRVQ89uDNSZ8xWW98VF0Zonblg1K:IdjFZ5qweaM9ZRV9uDNSS98VF3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-11_ae3669e8bb25e2defa613676dbffb2b1_icedid

Files

2024-03-11_ae3669e8bb25e2defa613676dbffb2b1_icedid
.exe windows:5 windows x86 arch:x86

ddbdc6acc88644e4d1d7b0048b52ee40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\source\parser3412-englische oberfläche\Release\GuideLogParser.pdb

Imports

kernel32

RtlUnwind
Sleep
ExitProcess
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
RaiseException
VirtualAlloc
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStdHandle
TerminateProcess
IsDebuggerPresent
GetACP
IsValidCodePage
GetFileTime
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
GetModuleHandleW
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
InterlockedDecrement
GetModuleFileNameW
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
FileTimeToSystemTime
WritePrivateProfileStringA
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
LocalFree
MulDiv
lstrlenA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
SetLastError
MultiByteToWideChar
lstrcmpW
GetModuleHandleA
GetProcAddress
GetVersionExA
GlobalFree
FreeResource
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
GetLastError
FormatMessageA
GetLocalTime
CopyFileA
DeleteFileA
CreateFileA
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentDirectoryA
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
GetExitCodeThread
SetEvent
WaitForSingleObject
CloseHandle
CreateEventA
CreateThread

user32

CharUpperA
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetWindowThreadProcessId
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
PostMessageA
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EnableWindow
SendMessageA
GetSystemMetrics
CloseClipboard
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
UnregisterClassA
GetDesktopWindow
GetActiveWindow
GetSysColorBrush
WindowFromPoint
DestroyMenu
GetClassNameA
SetClipboardData
EmptyClipboard
GetCursorPos
GetMessagePos
DrawIcon
AppendMenuA
GetMenuItemID
GetSubMenu
ModifyMenuA
LoadMenuA
GetSystemMenu
IsIconic
GetWindowRect
GetClientRect
ScreenToClient
RedrawWindow
OpenClipboard
LoadIconA
ReleaseCapture
LoadCursorA
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetFocus
GetParent
SetCapture
InvalidateRect
PtInRect
SetCursor
SetWindowLongA
SetWindowsHookExA

gdi32

DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetStockObject
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetObjectA
CreateFontIndirectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegCloseKey

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
DragQueryFileA
ShellExecuteA
SHGetMalloc

comctl32

ord17

shlwapi

PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathFindExtensionA
PathIsUNCA

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx
CoTaskMemFree

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 262KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ddbdc6acc88644e4d1d7b0048b52ee40

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

Sections

.text Size: 262KB - Virtual size: 261KB

.rdata Size: 68KB - Virtual size: 68KB

.data Size: 9KB - Virtual size: 23KB

.rsrc Size: 46KB - Virtual size: 45KB

.text
Size: 262KB - Virtual size: 261KB

.rdata
Size: 68KB - Virtual size: 68KB

.data
Size: 9KB - Virtual size: 23KB

.rsrc
Size: 46KB - Virtual size: 45KB