2024-03-26_88d6a4821127ca38d7588562d3cbac6c_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-26_88d6a4821127ca38d7588562d3cbac6c_icedid
Size

1.2MB
MD5

88d6a4821127ca38d7588562d3cbac6c
SHA1

95e202f644c6d92cad427f106f6f9e76ae086de1
SHA256

1a453aa9d014aa7e2e5cfe42bf20e2e5f3d1717d9974348eeeb0a78e470c30cf
SHA512

ee4c4fda9c1983eb9aa75c2f27c59fcebc26552d413e12f90253bdca354e95dee6217f644fd1d1da4723149defd5f15acf07a2694391c6d2e8f13cc4b7c2cd43
SSDEEP

24576:19Iw2NCKtnHeS3qbs/pNzVIBcOnf+Wuc:TronH4s/2Ff+Wuc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-26_88d6a4821127ca38d7588562d3cbac6c_icedid

Files

2024-03-26_88d6a4821127ca38d7588562d3cbac6c_icedid
.exe windows:4 windows x86 arch:x86

e2cca90144db45012df2a8c163c97a5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
SetHandleCount
GetFileType
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
LCMapStringA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetEnvironmentVariableA
GetACP
GetStdHandle
HeapCreate
HeapDestroy
VirtualFree
GetTimeZoneInformation
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapSize
ExitProcess
GetStartupInfoA
GetProcessHeap
GetCommandLineA
GetDateFormatA
GetTimeFormatA
CreateDirectoryA
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
SetErrorMode
GetShortPathNameA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
FindResourceExA
GetThreadLocale
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalReAlloc
TlsGetValue
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
GetProfileIntA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
GetFileSize
GetFileAttributesA
SetFileAttributesA
CreateFileA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
CloseHandle
GetCurrentProcessId
VirtualProtect
FreeResource
GetCurrentThreadId
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetVersionExA
InterlockedDecrement
GetModuleFileNameW
FormatMessageA
RaiseException
LocalFree
GetLogicalDrives
GetDriveTypeA
GetVolumeInformationA
MoveFileA
CopyFileA
GetModuleHandleA
GetPrivateProfileStringA
ExpandEnvironmentStringsA
CreateEventA
GetCurrentProcess
WaitForSingleObject
ResetEvent
FreeLibrary
CreateThread
LocalAlloc
Beep
GlobalGetAtomNameA
WinExec
GetTempPathA
lstrcmpA
GetModuleFileNameA
CreateMutexA
SetLastError
Sleep
ReleaseMutex
GetCurrentDirectoryA
MulDiv
GetTickCount
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
GetComputerNameA
FindFirstFileA
FindNextFileA
FindClose
GetStringTypeExA
CompareFileTime
lstrcmpiA
CompareStringW
CompareStringA
GetProcAddress
lstrlenA
LoadLibraryA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
FreeEnvironmentStringsA
InterlockedExchange

user32

DestroyWindow
SetActiveWindow
RemovePropA
GetPropA
SetPropA
CallNextHookEx
SetWindowsHookExA
IsChild
WinHelpA
ModifyMenuA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetAsyncKeyState
MapDialogRect
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
ValidateRect
TranslateAcceleratorA
InsertMenuItemA
LoadAcceleratorsA
ReuseDDElParam
UnpackDDElParam
ShowOwnedPopups
SetWindowRgn
IsZoomed
GetSysColorBrush
UnregisterClassA
DestroyIcon
CopyAcceleratorTableA
PostThreadMessageA
GetTabbedTextExtentA
RegisterClipboardFormatA
GetMessageTime
GetMessagePos
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
SetScrollInfo
SetWindowPlacement
DefWindowProcA
CallWindowProcA
GetWindowPlacement
GetWindowTextLengthA
GetFocus
SetFocus
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemTextA
GetDlgItemInt
GetDlgItem
CheckRadioButton
CheckDlgButton
EndPaint
BeginPaint
GrayStringA
DrawTextExA
TabbedTextOutA
UnhookWindowsHookEx
GetMenuStringA
SetMenuItemInfoA
IsMenu
GetMenuItemInfoA
GetDialogBaseUnits
AdjustWindowRectEx
GetActiveWindow
IntersectRect
GetClassLongA
DrawIconEx
LoadMenuA
DestroyMenu
GetMenuState
LockWindowUpdate
SetWindowLongA
GetSystemMetrics
SetParent
GetDCEx
MapWindowPoints
DeleteMenu
IsRectEmpty
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetTopWindow
SetWindowPos
GetDlgCtrlID
DrawFrameControl
FindWindowExA
WindowFromPoint
DestroyCursor
GetParent
LoadImageA
GetSysColor
RemoveMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CheckMenuItem
CreateMenu
GetKeyState
LoadBitmapA
DrawTextA
SetClipboardData
RegisterWindowMessageA
GetSystemMenu
EmptyClipboard
CloseClipboard
GetCursor
keybd_event
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
LoadCursorA
GetForegroundWindow
OpenClipboard
GetLastActivePopup
KillTimer
SetTimer
RedrawWindow
IsIconic
SetMenu
GetMenu
InsertMenuA
EnableMenuItem
WindowFromDC
GetWindow
FindWindowA
LoadStringA
EnumWindows
GetMessageA
TranslateMessage
ClipCursor
ShowCursor
PostQuitMessage
ScreenToClient
ChildWindowFromPointEx
GetWindowDC
GetWindowTextA
ClientToScreen
EqualRect
UnionRect
SetCursorPos
PeekMessageA
DispatchMessageA
SystemParametersInfoA
GetDesktopWindow
GetCursorPos
CreatePopupMenu
AppendMenuA
ReleaseCapture
SetCursor
DrawEdge
IsWindow
SetCapture
OffsetRect
SetRect
UpdateWindow
PostMessageA
PtInRect
DrawFocusRect
InflateRect
EnableWindow
FillRect
SetRectEmpty
EnumChildWindows
IsWindowVisible
GetWindowLongA
GetClassNameA
MessageBoxA
GetScrollInfo
wsprintfA
CharUpperA
GetDC
ReleaseDC
LoadIconA
InvalidateRect
GetClientRect
GetWindowRect
BringWindowToTop
SendMessageA
DrawIcon
CopyRect
GetCapture

gdi32

CreateBitmap
StretchBlt
CreatePatternBrush
CreateDIBitmap
SaveDC
RestoreDC
SetBkColor
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
CreateRectRgnIndirect
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
StartDocA
PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GetTextExtentPointA
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
GetDCOrgEx
GetBkColor
SetRectRgn
DPtoLP
CreateEllipticRgn
LPtoDP
GetViewportOrgEx
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
EnumFontFamiliesExA
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetWindowOrgEx
Arc
GetNearestPaletteIndex
RectInRegion
GetStockObject
GetCharWidthA
GetTextMetricsA
OffsetRgn
SetBkMode
StretchDIBits
GetTextExtentPoint32A
GetPixel
GetTextColor
CreateFontA
SetPixel
Ellipse
Polyline
CreateDCA
GetSystemPaletteEntries
GetClipBox
ExtTextOutA
PatBlt
CreateHatchBrush
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
CombineRgn
CreateRoundRectRgn
CreatePolygonRgn
SetWindowOrgEx
CreateFontIndirectA
GetNearestColor
CreateSolidBrush
CreatePen
BitBlt
RealizePalette
SelectPalette
DeleteObject
GetDeviceCaps
RoundRect
Rectangle
GetObjectA
CreateRectRgn

comdlg32

GetFileTitleA

advapi32

RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
GetFileSecurityA
SetFileSecurityA
RegOpenKeyA
RegSetValueA
RegCloseKey
GetUserNameA
RegFlushKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenSCManagerA
CreateServiceA
CloseServiceHandle
OpenServiceA
StartServiceA
ControlService
DeleteService
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
RegCreateKeyA

shell32

ExtractIconA
DragAcceptFiles
ShellExecuteA
Shell_NotifyIconA
DragFinish
DragQueryFileA
SHGetFileInfoA

shlwapi

PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

winmm

PlaySoundA

Exports

Exports

gbIstGK
gbIstRegistriert
gszLastSettings

Sections

.text
Size: 792KB - Virtual size: 790KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2cca90144db45012df2a8c163c97a5a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

shlwapi

winmm

Exports

Exports

Sections

.text Size: 792KB - Virtual size: 790KB

.rdata Size: 224KB - Virtual size: 222KB

.data Size: 28KB - Virtual size: 74KB

.rsrc Size: 152KB - Virtual size: 151KB

.text
Size: 792KB - Virtual size: 790KB

.rdata
Size: 224KB - Virtual size: 222KB

.data
Size: 28KB - Virtual size: 74KB

.rsrc
Size: 152KB - Virtual size: 151KB