2024-03-28_9984269f47cd4cb383f7e41a1a8a0a23_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-03-28_9984269f47cd4cb383f7e41a1a8a0a23_icedid
Size

4.4MB
MD5

9984269f47cd4cb383f7e41a1a8a0a23
SHA1

096894ffe604fd29e52bd248d32b55dcdab4edd1
SHA256

f6458edaccf8943b62916a393d125ad2f3a30efaaf3effa58100146a3f9f1699
SHA512

4d2cdd80ed9301c94ef31e9bc8f6af3d9298512214e0561177853cacb0ff312b7cd2eee0762221a6efd636e0272115fd3032d8c88191261a2e577c787238120c
SSDEEP

24576:eK5LfqbD9MMLsvMbnLX5/M6AQJMGtrNTqbI+5OTwe+AGf4X1tauKh0Edc6fFXx2k:eKRSbDtLsypAQaluKCEdcAeXkyse6Us

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-28_9984269f47cd4cb383f7e41a1a8a0a23_icedid

Files

2024-03-28_9984269f47cd4cb383f7e41a1a8a0a23_icedid
.exe windows:4 windows x86 arch:x86

5e7dd30054c3282f71db22123a1616e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\project\lnp\vc71\lnp1x\Release\alsr1x.pdb

Imports

kernel32

lstrcmpiA
lstrcmpiW
GetStringTypeExA
GetStringTypeExW
lstrlenW
CompareStringA
CompareStringW
GetEnvironmentVariableA
MultiByteToWideChar
GetVersion
GetEnvironmentVariableW
lstrcatA
lstrlenA
WinExec
GetWindowsDirectoryA
WritePrivateProfileSectionA
WritePrivateProfileStringA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
_lread
_lopen
_lclose
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
WriteFile
EscapeCommFunction
ClearCommError
ReadFile
GetCommState
SetLastError
SetThreadPriority
ResumeThread
GetCurrentThreadId
WaitForSingleObject
SetEvent
SuspendThread
RaiseException
InitializeCriticalSection
DeleteCriticalSection
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
GetModuleHandleA
lstrcpynA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
MulDiv
InterlockedDecrement
LocalFree
FormatMessageA
GlobalAlloc
GlobalSize
CopyFileA
GetModuleFileNameA
MoveFileA
DeleteFileA
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
EnumResourceLanguagesA
ConvertDefaultLocale
lstrcmpA
GetCurrentThread
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileAttributesA
GetFileTime
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
InterlockedIncrement
GetCPInfo
GetOEMCP
SetErrorMode
GetPrivateProfileIntA
GetPrivateProfileStringA
GetCurrentDirectoryA
LocalUnlock
LocalLock
GetTickCount
GetTempFileNameA
GetDiskFreeSpaceA
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
ExitThread
CreateThread
SetStdHandle
GetFileType
HeapReAlloc
TerminateProcess
HeapSize
GetTimeZoneInformation
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetConsoleCtrlHandler
SetEnvironmentVariableA
GetLocaleInfoW
SetCommState
lstrcpyA
CreateFileA
SetupComm
PurgeComm
SetCommTimeouts
CreateEventA
SetCommMask
WaitCommEvent
CloseHandle
Sleep
GetProcAddress
LoadLibraryA
GetLastError
FreeLibrary

user32

SendDlgItemMessageA
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassInfoExA
GetClassLongA
CreateWindowExA
WinHelpA
RegisterWindowMessageA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
ScrollWindowEx
GetMenuCheckMarkDimensions
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
GetKeyNameTextA
MapVirtualKeyA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
RemoveMenu
InsertMenuA
GetMenuStringA
WindowFromPoint
PostQuitMessage
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
GetMenuItemInfoA
DestroyMenu
GetDialogBaseUnits
GetSysColorBrush
GetWindowThreadProcessId
DeleteMenu
DestroyIcon
CharNextA
IsRectEmpty
SetRect
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
IsClipboardFormatAvailable
GetTabbedTextExtentA
TranslateAcceleratorA
SetMenu
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
ReuseDDElParam
UnpackDDElParam
LoadMenuA
RegisterClipboardFormatA
UnionRect
PostThreadMessageA
GetDCEx
LockWindowUpdate
SetParent
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
BeginDeferWindowPos
ShowScrollBar
SetFocus
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
CopyRect
GetWindow
GetDesktopWindow
SetActiveWindow
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
UnregisterClassA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
WaitMessage
PostMessageA
PeekMessageA
DispatchMessageA
SendMessageA
MessageBoxA
wsprintfA
LoadBitmapA
EnableWindow
SetTimer
KillTimer
GetClientRect
RedrawWindow
GetFocus
FillRect
GetSysColor
MessageBeep
ReleaseCapture
SetCursor
SetWindowLongA
IsWindow
CopyIcon
LoadCursorA
PtInRect
InflateRect
GetWindowRect
GetDC
ReleaseDC
InvalidateRect
GetCapture
SetCapture
GetParent
GetSystemMetrics
DrawIcon
AppendMenuA
GetSystemMenu
IsIconic
LoadIconA
CharLowerW
CharLowerA
CharUpperW
CharUpperA
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
UpdateWindow
GetLastActivePopup
GetMessageTime
SetForegroundWindow
GetMessagePos
CreateDialogIndirectParamA

gdi32

DPtoLP
GetBkColor
GetTextColor
GetRgnBox
GetCharWidthA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
StretchDIBits
CombineRgn
SetRectRgn
GetTextMetricsA
CreateDCA
CopyMetaFileA
CreateHatchBrush
ExtCreatePen
GetDeviceCaps
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreatePatternBrush
GetClipBox
SetTextColor
SetBkColor
CreateRectRgnIndirect
PatBlt
SaveDC
RestoreDC
SetBkMode
CreateDIBPatternBrushPt
SetROP2
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
DeleteObject
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocA
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
CreateCompatibleDC
BitBlt
CreateSolidBrush
GetStockObject
CreateFontIndirectA
GetObjectA
GetTextExtentPoint32A
CreateBitmap
CreateCompatibleBitmap
PathToRegion
GetMapMode
BeginPath
EndPath
CreatePen
CreateFontA
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
OffsetViewportOrgEx
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetPolyFillMode
GetDCOrgEx
SetViewportExtEx

advapi32

RegSetValueA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
GetFileSecurityA
RegOpenKeyExA
RegQueryValueA
RegCloseKey
RegOpenKeyA
SetFileSecurityA

shell32

ExtractIconA
DragFinish
DragQueryFileA
ShellExecuteA
SHGetFileInfoA

comctl32

ImageList_Draw
ImageList_GetImageInfo
ImageList_Merge
ImageList_AddMasked
ord17
ord13
ImageList_Read
ImageList_Write
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA

shlwapi

PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathRemoveExtensionA

oledlg

ord8

ws2_32

closesocket
accept
socket
select
htonl
htons
inet_addr
bind
WSAGetLastError
WSACleanup
getpeername
WSASetLastError
connect
sendto
recvfrom
WSAAsyncSelect
send
recv
gethostname
WSAStartup
inet_ntoa
ntohs
getsockname
listen
gethostbyname

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

ReplaceTextA
FindTextA
PageSetupDlgA
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA

ole32

CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleRun
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
StringFromGUID2
CoCreateInstance
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
SysReAllocStringLen
VarDateFromStr
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
OleCreateFontIndirect
LoadTypeLi
SysFreeString

Sections

.text
Size: 664KB - Virtual size: 660KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5e7dd30054c3282f71db22123a1616e6

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

comctl32

shlwapi

oledlg

ws2_32

winspool.drv

comdlg32

ole32

oleaut32

Sections

.text Size: 664KB - Virtual size: 660KB

.rdata Size: 168KB - Virtual size: 164KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 3.6MB - Virtual size: 3.6MB

.text
Size: 664KB - Virtual size: 660KB

.rdata
Size: 168KB - Virtual size: 164KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 3.6MB - Virtual size: 3.6MB