2024-03-12_a9d6c34b23f1280f2d013a4b9a1b9c4d_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-12_a9d6c34b23f1280f2d013a4b9a1b9c4d_icedid
Size

559KB
MD5

a9d6c34b23f1280f2d013a4b9a1b9c4d
SHA1

a643d79cccc1316bd312fd255c6fe57db0e1d29f
SHA256

e1badb21703f16455c320ca69cdeea759473d28389d0ca5af283517479a53f08
SHA512

3e838b166b6680db41b05537398f0d0d6c9c64f9ac5ae68259b2808461f15d43c8a7d7a6e12e0b793dd28f58072eba8054bdb8cf13881adff3e72fa92b1d0623
SSDEEP

12288:s6ra5AVsSf+7IyCFGlsVmr/fFoQyFwYZxlH:DrMAVsSm7b2wsE9yFwYZx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-12_a9d6c34b23f1280f2d013a4b9a1b9c4d_icedid

Files

2024-03-12_a9d6c34b23f1280f2d013a4b9a1b9c4d_icedid
.exe windows:5 windows x86 arch:x86

8614487d0a4972633e003dcceed6a4af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFileTimeToFileTime
GetFileSizeEx
GetSystemDirectoryW
SetErrorMode
GetStartupInfoW
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
HeapReAlloc
Sleep
ExitProcess
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
GetFileAttributesExW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
FileTimeToLocalFileTime
GetShortPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
lstrcmpiW
GetStringTypeExW
DeleteFileW
MoveFileW
WritePrivateProfileStringW
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
lstrlenA
GlobalFlags
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalGetAtomNameW
ReleaseMutex
CreateMutexW
GetModuleHandleA
GetProfileIntW
GetTickCount
GetDiskFreeSpaceW
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
lstrcmpW
GetVersionExA
WaitForSingleObject
GetCurrentThreadId
GlobalFree
FormatMessageW
LocalFree
lstrlenW
MulDiv
CreateFileW
WriteFile
LoadLibraryA
CloseHandle
FreeLibrary
GetLastError
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
lstrcpynW
GlobalAlloc
GlobalLock
GlobalUnlock
MultiByteToWideChar
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
VirtualFree
SizeofResource

user32

ReuseDDElParam
UnpackDDElParam
IsZoomed
GetSysColorBrush
UnregisterClassW
DestroyIcon
CharUpperW
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
SetRectEmpty
WindowFromPoint
ClientToScreen
SetRect
ShowOwnedPopups
SetCursor
GetWindowThreadProcessId
DestroyMenu
GetMenuItemInfoW
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
RemovePropW
GetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
MapWindowPoints
TrackPopupMenu
SetMenu
SetScrollPos
GetScrollPos
SetForegroundWindow
PostMessageW
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetParent
EqualRect
DeferWindowPos
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
GetWindowLongW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
PeekMessageW
ValidateRect
GetMenuStringW
GetMenuItemID
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorW
LoadCursorW
DestroyCursor
SetCursorPos
ReleaseCapture
SetCapture
EndPaint
GetPropW
BeginPaint
UpdateWindow
EnableWindow
GetCursorPos
CheckMenuItem
EnableMenuItem
GetMenuItemCount
GetSubMenu
RemoveMenu
LoadMenuW
SendMessageW
PostQuitMessage
IsWindowVisible
IsWindow
ModifyMenuW
CopyRect
PtInRect
InflateRect
GetClientRect
ScreenToClient
GetDC
ReleaseDC
InvalidateRect
GetMessagePos
CloseClipboard
SetClipboardData
EmptyClipboard
GetWindowRect
GetMenuState
RegisterWindowMessageW
KillTimer
SetTimer
DeleteMenu
GetKeyState
ShowScrollBar
SystemParametersInfoW
CreateIconFromResourceEx
SetParent
RedrawWindow
GetSysColor
OpenClipboard
SetFocus

gdi32

Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
CreatePatternBrush
TextOutW
GetTextMetricsW
PtVisible
RectVisible
GetPixel
GetStockObject
CreateFontIndirectW
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
PatBlt
CreateCompatibleBitmap
StretchDIBits
DeleteDC
CreateFontW
SelectObject
GetCharWidthW
DeleteObject
GetBkColor
ExtTextOutW
BitBlt
CreateCompatibleDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateSolidBrush
GetTextExtentPoint32W
GetCurrentObject
GetObjectW

comdlg32

GetFileTitleW

advapi32

RegSetValueExW
RegCreateKeyW
RegCreateKeyExW
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegSetValueW
RegCloseKey

shell32

DragAcceptFiles
DragFinish
DragQueryFileW
ExtractIconW
SHGetFileInfoW
ShellExecuteW

shlwapi

PathFindExtensionW
PathRemoveFileSpecW
PathStripToRootW
PathFindFileNameW
PathIsUNCW

ole32

CoUninitialize
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoTaskMemFree
CoInitializeEx
CoCreateInstance
CoInitialize

oleaut32

SysAllocStringLen
VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 413KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8614487d0a4972633e003dcceed6a4af

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

shlwapi

ole32

oleaut32

Sections

.text Size: 413KB - Virtual size: 413KB

.rdata Size: 84KB - Virtual size: 84KB

.data Size: 10KB - Virtual size: 25KB

.rsrc Size: 49KB - Virtual size: 49KB

.text
Size: 413KB - Virtual size: 413KB

.rdata
Size: 84KB - Virtual size: 84KB

.data
Size: 10KB - Virtual size: 25KB

.rsrc
Size: 49KB - Virtual size: 49KB