2024-03-19_e1b9fb367e74a0496b937fb41cfe2d7b_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-03-19_e1b9fb367e74a0496b937fb41cfe2d7b_icedid
Size

2.2MB
MD5

e1b9fb367e74a0496b937fb41cfe2d7b
SHA1

14b1ee99584d6d6f2374d0e779d9a895952f3682
SHA256

a25ee0e1d9ca987970efe2804f98c4708d33f174618b61f046e6ba0baaf01feb
SHA512

73778e06ed25839e4da6909893e9fba76ee8e6bf39790b37114150687c751a59a2e42d01aff1dac4509a9c2f44e70646704a2c0f394eaa63fe62f4250e62b9c5
SSDEEP

24576:19Rwf1IuattJ4u33C3Bjly2KOLyLHXZy/MANEY3K/dKpfZVhREEKuo9l3YZOF204:19kIuavJ4u33ClGGGGjGGGGkJ0INnLQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-19_e1b9fb367e74a0496b937fb41cfe2d7b_icedid

Files

2024-03-19_e1b9fb367e74a0496b937fb41cfe2d7b_icedid
.exe windows:4 windows x86 arch:x86

340ce977f7eee4810a5291dfb9d58816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

q:\digicheck50\Release\digicheck.pdb

Imports

winmm

waveOutGetNumDevs
timeSetEvent
timeGetTime
waveInGetNumDevs
timeKillEvent

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces

kernel32

GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
TerminateProcess
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
HeapDestroy
VirtualAlloc
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
VirtualProtect
HeapAlloc
HeapFree
RtlUnwind
SetErrorMode
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SystemTimeToFileTime
FileTimeToSystemTime
GetShortPathNameA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
GlobalFlags
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
FormatMessageA
GetCurrentThread
GlobalAlloc
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
SetLastError
InterlockedDecrement
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetStringTypeExA
CompareStringW
CompareStringA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
RaiseException
LoadLibraryA
GetProcAddress
FreeLibrary
GetVolumeInformationA
SetFilePointer
GetFileSize
MoveFileExA
GetDiskFreeSpaceExA
GetDiskFreeSpaceA
DeleteFileA
ReadFile
WriteFile
GetOverlappedResult
ExitProcess
GetCurrentDirectoryA
FindFirstFileA
CreateDirectoryA
FindClose
MoveFileA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
MulDiv
CreateThread
SetThreadPriority
SwitchToThread
GetTickCount
InterlockedExchange
lstrcpyA
lstrcpynA
lstrcmpiA
CreateFileA
DeviceIoControl
CloseHandle
Sleep
lstrlenA
GetLastError
LocalAlloc
LocalFree
MultiByteToWideChar
OpenFile
HeapCreate

user32

InvalidateRgn
GetNextDlgGroupItem
GetDCEx
LockWindowUpdate
SetParent
IsZoomed
WindowFromPoint
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
DestroyMenu
GetMenuItemInfoA
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
PostQuitMessage
InflateRect
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetCursor
DestroyCursor
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
IsChild
GetWindowTextLengthA
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
CharNextA
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetSysColorBrush
SetScrollPos
GetScrollPos
IsWindowVisible
UpdateWindow
GetMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
SetWindowPlacement
GetDlgCtrlID
CallWindowProcA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
CopyRect
PtInRect
GetWindow
GetDesktopWindow
CreateDialogIndirectParamA
IsWindow
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
ReleaseDC
UnregisterClassA
CharUpperA
RegisterClassA
CreateWindowExA
DefWindowProcA
LoadIconA
DestroyWindow
SetWindowLongA
InvalidateRect
DialogBoxParamA
ReleaseCapture
SetCapture
SendDlgItemMessageA
MessageBeep
SetDlgItemTextA
EndDialog
GetDlgItemTextA
DrawEdge
LoadBitmapA
MoveWindow
ClientToScreen
GetKeyState
FillRect
GetDC
IsIconic
SendMessageA
KillTimer
SetTimer
DestroyIcon
GetTabbedTextExtentA
PostThreadMessageA
CreateMenu
CopyAcceleratorTableA
GetSystemMetrics
ShowScrollBar
GetWindowPlacement
GetWindowRect
SetRect
GetForegroundWindow
EnumWindows
MessageBoxA
GetCursorPos
SetActiveWindow
GetActiveWindow
LoadMenuA
SetWindowRgn
DrawIcon
GetMessagePos
FindWindowA
GetSubMenu
LoadCursorA
SetClassLongA
SetForegroundWindow
GetWindowTextA
GetWindowLongA
RedrawWindow
GetClientRect
GetSysColor
PostMessageA
wsprintfA
EnableWindow
CharLowerBuffA
GetSystemMenu
DeleteMenu
GetScrollRange
IsRectEmpty
DispatchMessageA

gdi32

CreateRectRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
EndDoc
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
StretchDIBits
GetCharWidthA
CreateFontA
CreateEllipticRgn
LPtoDP
GetNearestColor
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetTextAlign
GetTextFaceA
GetWindowOrgEx
GetRgnBox
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocA
PatBlt
Rectangle
DPtoLP
GetViewportOrgEx
GetDeviceCaps
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
SelectClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
CreateSolidBrush
DeleteObject
CreatePen
Arc
TextOutA
GetStockObject
GetTextExtentPoint32A
ExtTextOutA
SelectObject
GetTextMetricsA
CreateFontIndirectA
SetTextAlign
GetPixel
SetPixel
CreateDIBitmap
CreateCompatibleBitmap
CreateCompatibleDC
Ellipse
SetROP2
Polygon
MoveToEx
LineTo
Polyline
BitBlt
CreateDCA

comdlg32

PrintDlgA
GetFileTitleA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
CommDlgExtendedError

winspool.drv

ClosePrinter
OpenPrinterA
GetJobA
DocumentPropertiesA

advapi32

GetFileSecurityA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueA
RegQueryValueA
RegCreateKeyA
RegCloseKey
SetFileSecurityA

shell32

ExtractIconA
SHGetFolderPathA
Shell_NotifyIconA
DragFinish
DragQueryFileA
ShellExecuteA
SHGetFileInfoA

comctl32

ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoRegisterMessageFilter
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromString
OleInitialize
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromProgID

oleaut32

SysFreeString
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
OleCreateFontIndirect

Sections

.text
Size: 508KB - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

340ce977f7eee4810a5291dfb9d58816

Headers

File Characteristics

PDB Paths

Imports

winmm

setupapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 508KB - Virtual size: 504KB

.rdata Size: 160KB - Virtual size: 157KB

.data Size: 92KB - Virtual size: 1.8MB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 508KB - Virtual size: 504KB

.rdata
Size: 160KB - Virtual size: 157KB

.data
Size: 92KB - Virtual size: 1.8MB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB