2024-03-15_80d3e827cd37248c8ececb9ca4185200_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-15_80d3e827cd37248c8ececb9ca4185200_icedid
Size

2.4MB
MD5

80d3e827cd37248c8ececb9ca4185200
SHA1

97c09954139c0bbc531e407253402a2cdff8406e
SHA256

ce2b50b769270ab0d759e85bcd54d09b19b3dce05d1f405466fdd803067287c8
SHA512

e060772d439bdf9fc187f95fa0514d0ddd27fd467af58b44876f7edde44a94c77046e118b55cc13dae251c3ad8409456e3b8afbadb3eb3d378c4dbccee367bc8
SSDEEP

49152:FoWelVy7GIJYHdJRfuhbOvDrPYMWDudmlrG0uHYkE5Evtm/k7:+lTy7GIOHdnGhb+DrPY8dmpTuHYkuEvx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-15_80d3e827cd37248c8ececb9ca4185200_icedid

Files

2024-03-15_80d3e827cd37248c8ececb9ca4185200_icedid
.exe windows:6 windows x86 arch:x86

37088d3ed7baeb5e662ca4f5c67739e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Eviles\Desktop\AutoPatch TOP3\bin\kop.pdb

Imports

kernel32

ReadConsoleW
IsValidCodePage
GetTimeZoneInformation
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStringTypeW
SetFilePointerEx
LCMapStringW
IsValidLocale
EnumSystemLocalesW
WriteConsoleW
OutputDebugStringW
CreateFileW
SetEnvironmentVariableA
GetFileAttributesExW
GetStartupInfoW
GetStdHandle
GetConsoleMode
GetConsoleCP
GetFileType
SetStdHandle
HeapQueryInformation
IsProcessorFeaturePresent
IsDebuggerPresent
AreFileApisANSI
GetModuleHandleExW
ExitThread
VirtualQuery
VirtualAlloc
GetSystemInfo
GetCommandLineA
GetSystemTimeAsFileTime
RtlUnwind
GetUserDefaultLCID
SearchPathA
GetProfileIntA
GetTempFileNameA
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
lstrcpyA
GetWindowsDirectoryA
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetCPInfo
GetOEMCP
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetUserDefaultUILanguage
FindResourceExW
GetACP
GetCurrentProcessId
GetPrivateProfileStringA
lstrcmpA
GetVersionExA
GetCurrentThread
ResumeThread
SuspendThread
SetThreadPriority
CreateEventA
SetEvent
FileTimeToSystemTime
LocalAlloc
FileTimeToLocalFileTime
GetVolumeInformationA
lstrcmpiA
GetModuleFileNameA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
GetThreadLocale
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
EncodePointer
MultiByteToWideChar
FormatMessageA
MulDiv
LocalFree
GlobalSize
FindResourceA
LoadLibraryW
LoadLibraryA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
VirtualProtect
SetLastError
OutputDebugStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
WriteConsoleA
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
DecodePointer
GetDiskFreeSpaceExA
DeleteFileA
CopyFileA
GetLastError
SetFileAttributesA
GetFileAttributesA
GetCurrentDirectoryA
GetTickCount
GetExitCodeThread
TerminateThread
CreateThread
Sleep
WaitForSingleObject
WideCharToMultiByte
FindResourceW
GetStartupInfoA
SizeofResource
LockResource
LoadResource
CreateProcessA
ExitProcess
CloseHandle
CreateDirectoryW

user32

LoadCursorW
WindowFromPoint
DestroyIcon
DeleteMenu
IsRectEmpty
IntersectRect
SetRect
InvalidateRgn
InvalidateRect
CopyAcceleratorTableA
ReleaseCapture
SetCapture
CopyImage
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
SystemParametersInfoA
InflateRect
GetMenuItemInfoA
DestroyMenu
FillRect
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
WaitMessage
ReleaseDC
GetDC
MapVirtualKeyA
GetKeyNameTextA
SetWindowContextHelpId
GetWindowThreadProcessId
SetCursor
ShowOwnedPopups
PostQuitMessage
GetCursorPos
TranslateMessage
GetMessageA
CharUpperA
OffsetRect
CharNextA
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
CheckDlgButton
MoveWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
DefMDIChildProcA
GetWindowTextLengthA
GetWindowTextA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
GetNextDlgGroupItem
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetKeyState
GetDlgCtrlID
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
SendDlgItemMessageA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
MapDialogRect
GetParent
GetWindowLongA
RemovePropA
GetPropA
SetPropA
SetActiveWindow
DefFrameProcA
DrawMenuBar
SendMessageA
EnableWindow
IsIconic
SetTimer
KillTimer
IsWindowEnabled
GetCapture
GetAsyncKeyState
GetFocus
GetActiveWindow
SetFocus
GetDlgItem
SetWindowPos
ShowWindow
MessageBoxA
UnregisterClassA
PostMessageA
LoadIconW
GetWindowRect
GetClientRect
DrawIcon
FrameRect
CharUpperBuffA
ModifyMenuA
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
SetClassLongA
LockWindowUpdate
SetCursorPos
MessageBeep
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
EnableMenuItem
GetSystemMenu
GetWindowRgn
DestroyCursor
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
SetScrollPos
TranslateMDISysAccel
GetSystemMetrics
ToAsciiEx
GetKeyboardState
SetParent
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
PostThreadMessageA
IsZoomed
GetComboBoxInfo
LoadMenuW
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
LoadImageW
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
RegisterClipboardFormatA
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DrawIconEx
LoadImageA
SetRectEmpty
DrawFocusRect
GetMenuDefaultItem
CreatePopupMenu
AdjustWindowRectEx

gdi32

CreateSolidBrush
DeleteDC
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
CreateRectRgn
GetTextMetricsA
EnumFontFamiliesExA
GetRgnBox
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
Rectangle
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceA
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
PatBlt
CreateRectRgnIndirect
GetTextColor
GetStockObject
GetBkColor
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
GetTextExtentPoint32A
CopyMetaFileA
CreateDCA

msimg32

AlphaBlend
TransparentBlt

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueExA
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA

shell32

DragFinish
DragQueryFileA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetFileInfoA
ShellExecuteA
SHAppBarMessage
SHBrowseForFolderA

comctl32

ord17

shlwapi

PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFileExistsA
StrFormatKBSizeA

uxtheme

IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetThemePartSize
GetThemeSysColor
GetWindowTheme
GetThemeColor
DrawThemeText
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
GetCurrentThemeName

ole32

StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoInitializeEx
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CoRevokeClassObject
OleFlushClipboard
StgCreateDocfileOnILockBytes
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
DoDragDrop
CoRegisterMessageFilter
OleLockRunning
OleIsCurrentClipboard

oleaut32

OleCreateFontIndirect
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantChangeType
VariantCopy
VarBstrFromDate
SysAllocString
VariantClear
VariantInit
SysAllocStringByteLen
SysAllocStringLen
SysFreeString

oledlg

ord8

ws2_32

WSAStartup
WSACleanup
WSASetLastError

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

wininet

FtpOpenFileA
InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetSetOptionExA
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetReadFile

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 339KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 622KB - Virtual size: 621KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

37088d3ed7baeb5e662ca4f5c67739e2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

ws2_32

oleacc

wininet

gdiplus

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 339KB - Virtual size: 339KB

.data Size: 32KB - Virtual size: 62KB

.rsrc Size: 622KB - Virtual size: 621KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 339KB - Virtual size: 339KB

.data
Size: 32KB - Virtual size: 62KB

.rsrc
Size: 622KB - Virtual size: 621KB