2024-03-26_32eb3219b9e70807e3a9f7939a0f58cc_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-26_32eb3219b9e70807e3a9f7939a0f58cc_icedid
Size

240KB
MD5

32eb3219b9e70807e3a9f7939a0f58cc
SHA1

c8ec372f246219ca744532165a2aaaf05f286b66
SHA256

020aaad4129c108db23ff3ad2d5030e451f477b31ac2e4fde24f89adf2dbe06e
SHA512

ccdafb7270fdf1b40a061fe8a60544078a79a87cff2deeb08552307e2d837dcff1eeb144dab466d37b292d410f867605c693d792db5ef4a6b41fa98276a201e2
SSDEEP

3072:Csa8jQe4bQnxQoruCZBnb7ndQnJOD9nt6ayvJ8Uf7l1c4qyW+ZsD:Csa8jWQjruCZB3OJCtJwxqyrZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-26_32eb3219b9e70807e3a9f7939a0f58cc_icedid

Files

2024-03-26_32eb3219b9e70807e3a9f7939a0f58cc_icedid
.exe windows:4 windows x86 arch:x86

25a2b17d9c99066fab8b09c43646bf4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dinput8

DirectInput8Create

d3d9

Direct3DCreate9

kernel32

GetStartupInfoW
ExitProcess
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
TerminateProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
IsBadWritePtr
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
MultiByteToWideChar
GetVolumeInformationA
GetDriveTypeA
SetErrorMode
lstrlenA
WideCharToMultiByte
WritePrivateProfileStringA
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileStringA
SizeofResource
LockResource
LoadResource
FindResourceW
lstrcpyW
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
lstrcatW
CloseHandle
lstrcpynW
QueryPerformanceCounter
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleFileNameW
Beep
lstrcpyA
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
lstrcmpiW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
InterlockedDecrement
GetCurrentThread
GetModuleHandleW
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
SetLastError
MulDiv
GlobalAlloc
FormatMessageW
LocalFree
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetModuleHandleA
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetCurrentDirectoryA
LoadLibraryA
SetCurrentDirectoryA
FindFirstFileA
CreateDirectoryA
ReleaseMutex
CreateMutexA
GetLastError

user32

DestroyMenu
LoadCursorW
GetSysColorBrush
EndPaint
BeginPaint
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetCursor
PostQuitMessage
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
wsprintfW
ReleaseDC
GetDC
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
ShowWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
PostMessageW
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
ScreenToClient
GetClassInfoW
RegisterClassW
UnregisterClassW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
CopyRect
PtInRect
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
WinHelpW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetParent
GetWindowRect
OffsetRect
GetSystemMetrics
SetTimer
LoadIconW
GetClientRect
IsIconic
DrawIcon
MessageBoxW
PeekMessageW
GetAsyncKeyState
SendMessageW
LoadStringW
IsWindow
EnableWindow
SendDlgItemMessageA

gdi32

PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCloseKey
RegCreateKeyExW

shell32

ShellExecuteExW

comctl32

ord17
ImageList_Destroy

shlwapi

PathFindFileNameW
PathFindExtensionW

oleaut32

VariantInit
VariantClear
VariantChangeType

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25a2b17d9c99066fab8b09c43646bf4b

Headers

File Characteristics

Imports

dinput8

d3d9

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Sections

.text Size: 132KB - Virtual size: 128KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 16KB - Virtual size: 34KB

.rsrc Size: 52KB - Virtual size: 48KB

.text
Size: 132KB - Virtual size: 128KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 16KB - Virtual size: 34KB

.rsrc
Size: 52KB - Virtual size: 48KB