2024-03-19_326f169f7b6cd3b73bb14a96ddd04fe5_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-19_326f169f7b6cd3b73bb14a96ddd04fe5_icedid
Size

524KB
MD5

326f169f7b6cd3b73bb14a96ddd04fe5
SHA1

9180e62149b03debeae5c4b7bf531c5a762ee2dc
SHA256

488d8daa43de8ca52984a3fa84bb87bfa41fdf0268fcf70a3cf5741944dec048
SHA512

5292d28271b3759429dffdb7ae6ce2c03f373a04925d539dcb1d3620ec36b58f8bd5c91a2bcbcb9a21242cc51d2c852b02545ad338dfd691d1535a8aca3e8968
SSDEEP

12288:vQrzL9p6PfhJ68LzM4g8WREOgeRy+oIR4qCi:vf36EMRZmnhjxi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-19_326f169f7b6cd3b73bb14a96ddd04fe5_icedid

Files

2024-03-19_326f169f7b6cd3b73bb14a96ddd04fe5_icedid
.exe windows:4 windows x86 arch:x86

39091665a70c6b9da9bdbc8e57ea1cc9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Ascentive\APC_NewUI\APC Main\Release\ApcMain.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

GetStartupInfoW
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
SetStdHandle
GetFileType
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
IsBadWritePtr
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetErrorMode
GetFileTime
GetFileAttributesW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetTickCount
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
WideCharToMultiByte
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
LoadLibraryA
lstrcatW
lstrcmpW
GetVersionExA
GetModuleHandleA
GetCurrentThreadId
lstrcpyW
lstrlenW
FormatMessageW
lstrcpynW
LocalFree
CreateEventW
CreateThread
WaitForSingleObject
Sleep
SetEvent
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetModuleFileNameW
GetUserDefaultLangID
FileTimeToLocalFileTime
FileTimeToSystemTime
InterlockedDecrement
InterlockedIncrement
LoadLibraryW
GetProcAddress
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CloseHandle
MulDiv
SetUnhandledExceptionFilter
SetLastError
CreateMutexW
ExitProcess
LoadLibraryExW
GetCommandLineW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetModuleHandleW
GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
GlobalFree
OutputDebugStringW
GetLastError
FreeLibrary
GetLocaleInfoW
CreateFileW
DeleteFileW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCommandLineA

user32

SetWindowContextHelpId
MapDialogRect
PostQuitMessage
wsprintfW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
ShowWindow
IsDialogMessageW
WinHelpW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
GetFocus
SetFocus
IsChild
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
GetMenu
AdjustWindowRectEx
EqualRect
GetClassInfoW
RegisterClassW
DefWindowProcW
PostThreadMessageW
IntersectRect
SystemParametersInfoA
EndPaint
GetWindowDC
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetWindowsHookExW
CallNextHookEx
GetMessageW
IsWindowVisible
GetKeyState
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
EndDialog
SystemParametersInfoW
TranslateMessage
DispatchMessageW
PeekMessageW
GetTopWindow
GetWindow
UnregisterClassW
EnumChildWindows
GetWindowTextW
GetDlgCtrlID
SetWindowTextW
GetWindowPlacement
MoveWindow
SetWindowPos
SetWindowRgn
GetCursorPos
GetMenuDefaultItem
SetMenuDefaultItem
SetMenuItemBitmaps
AppendMenuW
CreatePopupMenu
FindWindowExW
UpdateWindow
RegisterWindowMessageW
LoadIconW
KillTimer
SetTimer
IsIconic
GetSystemMenu
InsertMenuW
LoadBitmapW
MessageBoxW
CopyImage
SetForegroundWindow
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
SetRect
IsRectEmpty
CharNextW
FindWindowW
SetWindowLongW
ReleaseCapture
SetCapture
RedrawWindow
PtInRect
LoadImageW
GetSysColor
GetSubMenu
TrackPopupMenuEx
PostMessageW
SetCursor
GetSysColorBrush
CharUpperW
CallWindowProcW
RegisterClipboardFormatW
DestroyCursor
DestroyMenu
LoadCursorW
GetWindowLongW
WindowFromPoint
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
DrawFocusRect
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
DrawStateW
DestroyIcon
EnableWindow
GetParent
GetDesktopWindow
ReleaseDC
GetDC
GetWindowRect
SendMessageW
BeginPaint

gdi32

CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
GetViewportExtEx
MoveToEx
LineTo
ExtSelectClipRgn
GetWindowExtEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetStockObject
DeleteObject
GetTextExtentPoint32W
CreateSolidBrush
GetClipBox
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
CreateRoundRectRgn
CreatePen
CreateFontIndirectW
GetObjectW
CreateCompatibleBitmap
GetPixel
SetPixel
CreateBitmap
CreateCompatibleDC
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteDC

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
RegOpenKeyW
RegDeleteValueW
RegEnumKeyW
RegQueryValueW
RegCloseKey

shell32

FindExecutableW
ShellExecuteExW
Shell_NotifyIconW
ShellExecuteW

comctl32

_TrackMouseEvent
ord17

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathFileExistsW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoRevokeClassObject
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
CoUninitialize
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemFree
StgCreateDocfileOnILockBytes

oleaut32

OleLoadPicture
OleCreateFontIndirect
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VarUdateFromDate
VarDateFromStr
VariantTimeToSystemTime
GetErrorInfo

winmm

PlaySoundW

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39091665a70c6b9da9bdbc8e57ea1cc9

Headers

File Characteristics

PDB Paths

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

winmm

Sections

.text Size: 324KB - Virtual size: 323KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 100KB - Virtual size: 96KB

.text
Size: 324KB - Virtual size: 323KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 100KB - Virtual size: 96KB