2024-03-29_ce23b4860796cfd9427c3045e43e1a35_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-03-29_ce23b4860796cfd9427c3045e43e1a35_icedid
Size

1.6MB
MD5

ce23b4860796cfd9427c3045e43e1a35
SHA1

445a30d39f9790f5a5c4ee2c781e159f2974d626
SHA256

218c45e6d636c3167d65becb5135f7e6b241398afd7b62916994d39ee76f30ce
SHA512

5595326447aed844cbcd4ce3ec20d2c7936c0fecf3e9174b22507b6df3cfed6808d0d4bfe6ca5cb1a53df38bc1647bb35384b7846e6fc8f40dbbef4be551698b
SSDEEP

49152:29Hec/AP/olqiJS48M+juBhnle5EfTsXb9Z9HxTMhoiAvCWqGQ+n1Q+9J2B:29He7P/olqiJSDjuB7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-29_ce23b4860796cfd9427c3045e43e1a35_icedid

Files

2024-03-29_ce23b4860796cfd9427c3045e43e1a35_icedid
.exe windows:4 windows x86 arch:x86

290b462476cffe5577da8124880b4d6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
SetHandleCount
GetFileType
LCMapStringA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
IsValidCodePage
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapCreate
InterlockedExchange
HeapDestroy
VirtualFree
HeapSize
ExitProcess
RaiseException
GetStartupInfoA
GetProcessHeap
GetCommandLineA
GetNumberOfConsoleInputEvents
PeekConsoleInputA
GetSystemTimeAsFileTime
RtlUnwind
VirtualAlloc
HeapReAlloc
HeapFree
HeapAlloc
GetTickCount
SetErrorMode
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetShortPathNameA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DeleteFileA
MoveFileA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
FindResourceExA
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
GetOEMCP
GlobalFlags
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GetCurrentProcessId
GetModuleFileNameA
VirtualProtect
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GetConsoleMode
SetConsoleMode
GetStdHandle
GetConsoleScreenBufferInfo
FormatMessageA
CreateThread
GetExitCodeThread
TerminateThread
DeleteCriticalSection
InitializeCriticalSection
CreateEventA
Sleep
WaitForSingleObject
PulseEvent
EnterCriticalSection
LeaveCriticalSection
GetLogicalDrives
GetDriveTypeA
GetVolumeInformationA
WriteFile
SetFilePointer
ReadFile
GetCurrentThread
GetCurrentProcess
LocalAlloc
LocalFree
GetWindowsDirectoryA
FreeLibrary
lstrcatA
WinExec
lstrcpyA
CreateFileA
CloseHandle
DeviceIoControl
SetCurrentDirectoryA
GetComputerNameA
GetCurrentDirectoryA
SetThreadLocale
GetUserDefaultLangID
GetCPInfo
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetVersionExA
FindResourceA
LoadResource
LockResource
SizeofResource
GetStringTypeExA
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
FreeEnvironmentStringsA

user32

UnregisterClassA
WaitMessage
IsZoomed
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
WindowFromPoint
SetWindowRgn
FindWindowA
ShowOwnedPopups
PostQuitMessage
SetRectEmpty
GetMessageA
ValidateRect
DestroyMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
GetWindowThreadProcessId
MapDialogRect
GetAsyncKeyState
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
DestroyWindow
GetMessageTime
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
ShowScrollBar
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
IntersectRect
IsIconic
GetWindowPlacement
UnhookWindowsHookEx
GetMenuStringA
DestroyCursor
IsWindowVisible
RedrawWindow
SetWindowPos
GetDlgItem
RegisterWindowMessageA
ReleaseCapture
SetCapture
GetTopWindow
DrawFocusRect
LoadImageA
IsMenu
SetScrollRange
GetWindowRect
GetParent
PostMessageA
CharUpperA
GetScrollRange
SetScrollPos
GetScrollPos
TranslateMessage
DispatchMessageA
SetWindowLongA
LoadCursorA
CopyIcon
IsWindow
SetCursor
GetMessagePos
GetCursorPos
GetWindowLongA
KillTimer
SetTimer
UpdateWindow
OffsetRect
PtInRect
DrawStateA
InvalidateRect
DrawIcon
GetWindow
GetKeyState
GetFocus
ScreenToClient
LoadMenuA
EnableMenuItem
InflateRect
GetClientRect
SendMessageA
SetParent
CopyAcceleratorTableA
PostThreadMessageA
GetTabbedTextExtentA
GetDCEx
MessageBeep
SetMenu
GetMenu
LockWindowUpdate
RegisterClipboardFormatA
SetForegroundWindow
EnableWindow
GetClassNameA
SetRect
CopyRect
LoadBitmapA
FillRect
DrawEdge
CreateMenu
CreatePopupMenu
DeleteMenu
AppendMenuA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSubMenu
InsertMenuA
ModifyMenuA
RemoveMenu
GetDC
ReleaseDC
GetDesktopWindow
GetSysColor
GetSysColorBrush
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
DestroyIcon
DrawIconEx
SystemParametersInfoA
GetSystemMetrics
GetMenuItemInfoA
GetActiveWindow

gdi32

SetTextAlign
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
StartDocA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
CreatePatternBrush
CreateBitmap
IntersectClipRect
GetCharWidthA
StretchDIBits
CreateRectRgnIndirect
SetRectRgn
CombineRgn
CreateEllipticRgn
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetViewportOrgEx
EnumFontFamiliesExA
GetNearestColor
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetWindowOrgEx
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
GetClipBox
CreateDCA
SetBkMode
SetBkColor
MoveToEx
LineTo
SetTextJustification
CreateRectRgn
GetCurrentObject
SelectPalette
CreateBitmapIndirect
GetDIBColorTable
FillRgn
ResizePalette
SetPaletteEntries
GetPaletteEntries
CreateHalftonePalette
CreatePalette
GetBitmapBits
GetTextMetricsA
ExtFloodFill
CreateCompatibleDC
CreatePolygonRgn
GetCurrentPositionEx
SaveDC
RestoreDC
GetStockObject
GetTextColor
SetTextColor
LPtoDP
DPtoLP
GetMapMode
GetBkColor
RealizePalette
CreateFontA
GetTextExtentPoint32W
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
GetTextExtentPoint32A
SetPixel
GetPixel
BitBlt
PatBlt
Rectangle
Ellipse
GetBkMode
GetDeviceCaps
CreatePen
CreateSolidBrush
CreateFontIndirectA
CreateCompatibleBitmap
GetObjectA
Polygon

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
GetJobA
ClosePrinter

advapi32

GetLengthSid
RegQueryValueExA
RegCreateKeyA
RegDeleteValueA
GetFileSecurityA
SetFileSecurityA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA
ImpersonateSelf
OpenThreadToken
OpenProcessToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
RegCloseKey
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
RevertToSelf
FreeSid
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA

shell32

ExtractIconA
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
DragFinish
SHGetFileInfoA
SHGetMalloc
DragQueryFileA

comctl32

ord17

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

ole32

OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocStringLen

Sections

.text
Size: 748KB - Virtual size: 745KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 416KB - Virtual size: 413KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

290b462476cffe5577da8124880b4d6f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

Sections

.text Size: 748KB - Virtual size: 745KB

.rdata Size: 360KB - Virtual size: 359KB

.data Size: 104KB - Virtual size: 123KB

.rsrc Size: 416KB - Virtual size: 413KB

.text
Size: 748KB - Virtual size: 745KB

.rdata
Size: 360KB - Virtual size: 359KB

.data
Size: 104KB - Virtual size: 123KB

.rsrc
Size: 416KB - Virtual size: 413KB