2024-04-05_43f124dbabab76e5c5febf8866fab6b8_icedid_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-05_43f124dbabab76e5c5febf8866fab6b8_icedid_magniber
Size

4.3MB
MD5

43f124dbabab76e5c5febf8866fab6b8
SHA1

3cc09610e215d3d1aff99762450dfd657fe33cf1
SHA256

74ab0c37b746820c368022b3e76ac38203883714be23076054a7dc848cedfed9
SHA512

0c079d7a2eb74e906daa61ed51fe81542e056b49b812bf28eb0924d96c01945e8d7bc618ac4fa05959e74c8cb857f3cfabe5cd616571b653506a29c57d10f4ac
SSDEEP

98304:ubhgE+AB+dNvGaJD9qlp9SOI5jxfy8yVX:ubhT5B+qC9qlp9StHqbVX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-05_43f124dbabab76e5c5febf8866fab6b8_icedid_magniber

Files

2024-04-05_43f124dbabab76e5c5febf8866fab6b8_icedid_magniber
.exe windows:4 windows x86 arch:x86

1f55c7b0403789600acf62dd5b82e2c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasGetConnectionStatistics
RasGetErrorStringW
RasConnectionNotificationW
RasDialW
RasSetEntryPropertiesW
RasSetCredentialsW
RasGetConnectStatusW
RasGetProjectionInfoW
RasEnumConnectionsW
RasHangUpW
RasDeleteEntryW

kernel32

HeapSize
SetStdHandle
GetFileType
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
GetThreadPriority
WaitForMultipleObjects
MultiByteToWideChar
FindResourceW
ExitThread
LockResource
HeapFree
GetFileTime
GetFileAttributesW
SetFileAttributesW
SetErrorMode
lstrlenA
LoadLibraryA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
LocalAlloc
CreateDirectoryW
TerminateThread
RemoveDirectoryW
CreatePipe
GetFileAttributesExW
OpenFileMappingW
ReleaseSemaphore
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetExitCodeThread
ResetEvent
GetSystemDirectoryW
LoadResource
InterlockedIncrement
InterlockedDecrement
SetLastError
GetLastError
GetProcAddress
LoadLibraryW
GetModuleHandleW
CompareStringW
FreeLibrary
GlobalDeleteAtom
HeapReAlloc
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
RtlUnwind
GetStartupInfoW
GetProcessHeap
SizeofResource
HeapAlloc
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
CreateThread
CloseHandle
WaitForSingleObject
Sleep
OpenSemaphoreW
GlobalFindAtomW
ExitProcess
OpenProcess
GetLocaleInfoW
CreateSemaphoreW
FreeResource
CreateMutexW
ReleaseMutex
CreateProcessW
GetModuleFileNameW
MoveFileExW
GetTempFileNameW
GetTempPathW
GetTickCount
TerminateProcess
GetCurrentProcess
FindNextFileW
FindFirstFileW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExW
DeviceIoControl
CreateFileW
GlobalUnlock
lstrcpyW
GlobalLock
GlobalAlloc
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GlobalFree
GetVersionExA
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
DeleteFileW
GetCurrentProcessId
CreateEventW
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
CompareStringA
InterlockedExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
WideCharToMultiByte
FormatMessageW
LocalFree
MulDiv
GetModuleHandleA
lstrlenW
GetCurrentThreadId
GlobalAddAtomW
lstrcmpW

user32

IsRectEmpty
CopyAcceleratorTableW
ReleaseCapture
SetCapture
UnregisterClassW
LoadCursorW
GetSysColorBrush
CharNextW
CharUpperW
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
SetCursor
GetMessageW
TranslateMessage
ValidateRect
PostQuitMessage
SystemParametersInfoW
DestroyMenu
InsertMenuW
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetRect
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
MsgWaitForMultipleObjects
GetQueueStatus
EnableWindow
SendMessageW
SetDlgItemTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
CreatePopupMenu
SystemParametersInfoA
GetWindowPlacement
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
GetClientRect
LoadBitmapW
GetWindowRect
ClientToScreen
SetWindowLongW
GetWindowLongW
DrawIconEx
GetSysColor
GetCursorPos
CopyRect
InflateRect
FillRect
FrameRect
GetSubMenu
LoadMenuW
InvalidateRect
KillTimer
WindowFromPoint
GetParent
LoadIconW
LoadImageW
MessageBoxW
LoadStringW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
GetScrollPos
IsWindowVisible
UpdateWindow
GetMenu
GetMenuItemID
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
RegisterHotKey
AppendMenuW
PostMessageW
DrawFrameControl
wsprintfA
GetWindowRgn
RegisterClassExW
DestroyCursor
SetCursorPos
DrawFocusRect
SwitchToThisWindow
SetLayeredWindowAttributes
GetWindowInfo
RedrawWindow
SetWindowRgn
IntersectRect
SetWindowPos
CallWindowProcW
DefWindowProcW
SetWindowPlacement
PtInRect
EqualRect
ScreenToClient
AdjustWindowRectEx
EndDialog
OpenClipboard
RemoveMenu
GetMenuItemInfoW
GetMenuItemCount
GetFocus
GetDlgCtrlID
SetFocus
UnregisterHotKey
EmptyClipboard
SetClipboardData
CloseClipboard
DrawIcon
GetSystemMetrics
GetWindow
SetForegroundWindow
SetTimer
IsIconic
GetSystemMenu
wsprintfW
DispatchMessageA
PeekMessageA
UnregisterClassA
CopyIcon
OffsetRect

gdi32

GetClipBox
CreateSolidBrush
GetObjectW
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
SetTextColor
CreatePatternBrush
CreateCompatibleDC
GetStockObject
CreateBitmap
GetDeviceCaps
CreatePen
CreateRectRgnIndirect
PatBlt
CreateFontIndirectW
GetTextExtentPoint32W
GetBkColor
GetTextColor
SetRectRgn
CombineRgn
GetMapMode
GetRgnBox
CreateCompatibleBitmap
CreateFontW
StretchDIBits
DeleteDC
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetStretchBltMode
SetMapMode
LineTo
MoveToEx
CreateDIBitmap
CreateDIBSection
GetDIBits
RealizePalette
SetDIBitsToDevice
StretchBlt
CreateRoundRectRgn
PtInRegion
Rectangle
RoundRect
DeleteObject
SelectClipRgn

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegQueryValueW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegCreateKeyExW
RegCloseKey
RegEnumKeyW
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyW
RegQueryValueExW

shell32

SHGetSpecialFolderPathW
Shell_NotifyIconW
ShellExecuteExW
ShellExecuteW

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
UrlUnescapeW
PathFindExtensionW
StrCatW

oledlg

OleUIBusyW

ole32

StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoGetClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemFree
OleRun
CoCreateInstance
CoInitializeEx
CreateStreamOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
CoUninitialize
CoInitialize
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes

oleaut32

SysFreeString
SysAllocString
SysAllocStringByteLen
SysStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromStr
VarUdateFromDate
SysStringByteLen
VariantInit
VariantClear
VariantChangeType
SysAllocStringLen
OleCreateFontIndirect
VariantCopy
SafeArrayDestroy
OleLoadPicture
GetErrorInfo

gdiplus

GdipFree
GdipCloneBrush
GdipAlloc
GdipCreateLineBrushFromRectWithAngleI
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetSmoothingMode
GdipFillPolygon
GdipFillEllipse
GdiplusShutdown
GdiplusStartup
GdipDeleteBrush

winmm

timeSetEvent
sndPlaySoundW
timeKillEvent
timeBeginPeriod
timeEndPeriod
timeGetTime

wininet

HttpSendRequestExW
HttpEndRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
HttpAddRequestHeadersW
InternetQueryDataAvailable
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetConnectW
DeleteUrlCacheEntryW
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
HttpOpenRequestW

wsock32

setsockopt
WSAGetLastError
htonl
inet_addr
socket
htons
ioctlsocket
gethostbyname
closesocket
sendto
select
__WSAFDIsSet
recvfrom
bind
listen
ntohs
inet_ntoa
accept
connect
recv
send
WSAStartup

iphlpapi

GetIfTable
GetIfEntry
CreateIpForwardEntry
GetBestRoute
DeleteIpForwardEntry
GetIpForwardTable
GetPerAdapterInfo
GetInterfaceInfo
GetAdaptersInfo

rpcrt4

UuidCreate

ws2_32

WSCWriteProviderOrder
WSCInstallProvider
shutdown
getsockopt
WSASetLastError
WSCDeinstallProvider
WSCEnumProtocols

mprapi

MprConfigServerConnect
MprConfigGetFriendlyName

msimg32

AlphaBlend

comctl32

_TrackMouseEvent

uxtheme

CloseThemeData
DrawThemeBackground

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 376KB - Virtual size: 375KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f55c7b0403789600acf62dd5b82e2c6

Headers

File Characteristics

Imports

rasapi32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

gdiplus

winmm

wininet

wsock32

iphlpapi

rpcrt4

ws2_32

mprapi

msimg32

comctl32

uxtheme

version

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 376KB - Virtual size: 375KB

.data Size: 28KB - Virtual size: 58KB

.rsrc Size: 2.4MB - Virtual size: 2.4MB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 376KB - Virtual size: 375KB

.data
Size: 28KB - Virtual size: 58KB

.rsrc
Size: 2.4MB - Virtual size: 2.4MB