2024-03-26_c8c53bb4c32a9e9d0d54ff8e94cfa8f5_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-26_c8c53bb4c32a9e9d0d54ff8e94cfa8f5_icedid
Size

292KB
MD5

c8c53bb4c32a9e9d0d54ff8e94cfa8f5
SHA1

ee61192edb8d3cf6f3759ab6e642b90a5d37d57b
SHA256

4a58f758aeb6c19a525be81acc56984701a41c990c16e98b0aca02ec246194e2
SHA512

53aac3beb40657be7fa21cc831f118ba5f4142a133ca3106d724934cb8c53b99a4ac977c0ebf83b60935500c253757783fbf2ab0900fdec124fd23fe71a1defe
SSDEEP

6144:APWmRxw9OFjG3itAs1PGmX+cPeoyuUjCDLX39nu+8Q5MDRDX:ThitJe/juUjCtuQMD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-26_c8c53bb4c32a9e9d0d54ff8e94cfa8f5_icedid

Files

2024-03-26_c8c53bb4c32a9e9d0d54ff8e94cfa8f5_icedid
.exe windows:5 windows x86 arch:x86

fbd0a9f783c0d5446a32a36ed7ecb785

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetCPInfo
GetOEMCP
SetErrorMode
GetFileSizeEx
GetTickCount
RtlUnwind
RaiseException
HeapAlloc
GetCommandLineA
GetStartupInfoA
HeapFree
VirtualProtect
VirtualQuery
HeapReAlloc
ExitProcess
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetFilePointer
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapCreate
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
MoveFileA
GlobalFlags
WritePrivateProfileStringA
GetThreadLocale
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetModuleHandleW
InterlockedDecrement
GetModuleFileNameW
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
FreeResource
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryExA
CompareStringA
InterlockedExchange
lstrcmpA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MultiByteToWideChar
MulDiv
lstrlenA
CreateThread
SetThreadPriority
ResumeThread
CreateNamedPipeA
CreateEventA
ConnectNamedPipe
ResetEvent
WaitForMultipleObjects
ReadFile
OutputDebugStringA
WriteFile
DisconnectNamedPipe
SetFileAttributesA
GetFileAttributesA
DeleteFileA
CopyFileA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetExitCodeProcess
TerminateProcess
Sleep
GetSystemInfo
CreateMutexA
LoadLibraryA
FreeLibrary
VirtualAlloc
GetLastError
VirtualFree
GetCurrentProcessId
GetCurrentProcess
DuplicateHandle
OpenProcess
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
GetUserDefaultLangID
WideCharToMultiByte
FileTimeToLocalFileTime
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetSystemDirectoryA
CreateFileA
GetFileTime
FileTimeToSystemTime
GetTimeZoneInformation
CloseHandle

user32

PostThreadMessageA
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
CharUpperA
ReleaseCapture
SetCapture
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
RegisterWindowMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
DefWindowProcA
CallWindowProcA
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
SetWindowPos
SetFocus
ShowWindow
MoveWindow
SetWindowLongA
RegisterClipboardFormatA
GetDlgCtrlID
IsWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
GetWindow
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetSystemMetrics
LoadIconA
EnableWindow
GetClientRect
IsIconic
GetSystemMenu
SendMessageA
AppendMenuA
DrawIcon
GetWindowThreadProcessId
GetWindowTextA
PtInRect

gdi32

GetStockObject
DeleteDC
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
GetBkColor
GetDeviceCaps
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
ExtTextOutA
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
PtVisible

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegQueryValueA
RegOpenKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
RegCreateKeyA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyExA

shell32

SHGetSpecialFolderPathA

shlwapi

PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA

oledlg

ord8

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleFlushClipboard
CoTaskMemAlloc
CoTaskMemFree
CoRegisterMessageFilter
CoRevokeClassObject
CLSIDFromProgID
OleIsCurrentClipboard
CLSIDFromString

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocStringLen

rpcrt4

UuidCreate
UuidToStringA
RpcStringFreeA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbd0a9f783c0d5446a32a36ed7ecb785

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

rpcrt4

version

Sections

.text Size: 212KB - Virtual size: 212KB

.rdata Size: 53KB - Virtual size: 52KB

.data Size: 10KB - Virtual size: 25KB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 212KB - Virtual size: 212KB

.rdata
Size: 53KB - Virtual size: 52KB

.data
Size: 10KB - Virtual size: 25KB

.rsrc
Size: 15KB - Virtual size: 15KB