2024-04-08_e9e68aa838bcaf65d175924b380b39d4_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-08_e9e68aa838bcaf65d175924b380b39d4_icedid
Size

1.2MB
MD5

e9e68aa838bcaf65d175924b380b39d4
SHA1

70d05a8afd94963bba0ff88246bdd02147c6b1f4
SHA256

35baf5e6c37d98853f5577c9d62019d3d034fb1edf0e666039c2a3960fd15ace
SHA512

3b4d36e7a4c38d8f8313e7383ef8ec41b35ba945f57ce94fb1bf17884fba31c2760f4d2e1dccc7fab6fbb83a1dbbe0008eff6195dba97cacf16ea39f2ace0c46
SSDEEP

24576:cAvSKITfi0B4E0JVK+FuoVA4aZHaUsTBvEn1/iFjRAopkPJUfp2k+jo+:cAvSKITfi0mVK+Fu4kaUWBvzIPJUfp9U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-08_e9e68aa838bcaf65d175924b380b39d4_icedid

Files

2024-04-08_e9e68aa838bcaf65d175924b380b39d4_icedid
.exe windows:6 windows x86 arch:x86

716878dd074df6cc7452349a9c08f32b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
socket
inet_addr
htons
WSAGetLastError
WSAStartup
shutdown
setsockopt
send
recv
connect
closesocket

kernel32

OutputDebugStringA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
CreateEventW
SuspendThread
ResumeThread
GlobalDeleteAtom
lstrcmpA
lstrcmpW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalAddAtomW
MulDiv
EncodePointer
GetSystemDirectoryW
GlobalFindAtomW
CompareStringW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GlobalFlags
GetCurrentDirectoryW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
DeleteFileW
GetFullPathNameW
FileTimeToSystemTime
DefineDosDeviceA
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesExW
SetFileAttributesW
SystemTimeToTzSpecificLocalTime
GetUserDefaultLCID
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
InitializeSListHead
IsDebuggerPresent
GetProfileStringA
WriteConsoleW
CopyFileA
DeviceIoControl
GetStartupInfoW
CreateProcessW
Beep
SetFilePointerEx
SetEnvironmentVariableA
GetEnvironmentVariableA
OpenMutexW
GetVolumeInformationW
GetFileAttributesW
GetDiskFreeSpaceW
CreateFileMappingA
CreateSemaphoreA
GetModuleHandleA
UnmapViewOfFile
MapViewOfFileEx
GetSystemTimeAsFileTime
SwitchToThread
GetProcessTimes
CreateMutexA
WaitForSingleObject
ReleaseMutex
ReleaseSemaphore
QueryPerformanceFrequency
QueryPerformanceCounter
SetLastError
DuplicateHandle
SetEndOfFile
RemoveDirectoryA
GetFileSizeEx
FindNextFileA
CreateFileA
CreateDirectoryA
GlobalFree
GetPriorityClass
SetThreadPriority
GetCurrentThread
GetCurrentProcess
GetCurrentThreadId
FindFirstFileA
CreateEventA
OutputDebugStringW
RaiseException
LCMapStringEx
GetStringTypeW
GetCPInfo
WaitForSingleObjectEx
OpenEventA
RtlUnwind
InterlockedPushEntrySList
SetStdHandle
GetFileType
GetModuleHandleExW
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
GetTimeZoneInformation
FreeLibraryAndExitThread
SetEvent
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
ExitThread
CreateThread
FlushFileBuffers
MoveFileExW
GetCommandLineW
GetACP
WideCharToMultiByte
MultiByteToWideChar
VirtualFree
VirtualAlloc
WriteFile
SetFilePointer
GetCommandLineA
HeapQueryInformation
GetConsoleMode
ReadConsoleW
ReadFile
CreateFileW
ResetEvent
GetLocalTime
FormatMessageW
FormatMessageA
LocalFree
GlobalLock
GlobalUnlock
GlobalAlloc
LoadLibraryW
LoadLibraryA
LoadLibraryExW
GetProcAddress
FreeLibrary
GetVersionExW
FindNextFileW
FindFirstFileW
FindClose
GetSystemInfo
Sleep
CloseHandle
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetLastError
DecodePointer
FindResourceW
SizeofResource
LockResource
LoadResource
SetConsoleTitleW
SetConsoleScreenBufferSize
GetConsoleScreenBufferInfo
AllocConsole
GetStdHandle
GetModuleHandleW
GetTickCount
ExitProcess
GetCurrentProcessId
GetConsoleOutputCP
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CreateDirectoryW

user32

CharUpperW
KillTimer
SetTimer
GetSysColorBrush
RealChildWindowFromPoint
IsDialogMessageW
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetWindow
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextW
RemovePropW
GetPropW
SetPropW
GetScrollPos
SetForegroundWindow
UpdateWindow
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
CopyRect
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
TabbedTextOutW
GrayStringW
DrawTextExW
GetMenuItemID
GetSubMenu
GetLastActivePopup
PostQuitMessage
CallNextHookEx
SetWindowsHookExW
ValidateRect
IsWindowVisible
DispatchMessageW
TranslateMessage
GetMessageW
GetDesktopWindow
SetActiveWindow
RedrawWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
GetFocus
UnhookWindowsHookEx
GetParent
OffsetRect
SetRectEmpty
SendDlgItemMessageA
wsprintfA
GetCursorPos
GetForegroundWindow
TrackPopupMenu
SetMenuItemBitmaps
GetMenuItemCount
EnableMenuItem
CheckMenuItem
DestroyMenu
CreatePopupMenu
GetMenuStringA
LoadCursorW
SetCursor
InvalidateRect
GetSysColor
DrawTextW
GetWindowThreadProcessId
GetKeyState
EnumWindows
FindWindowA
GetWindowLongW
AppendMenuA
MessageBoxW
MessageBoxA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
PeekMessageW
UnregisterClassW
ReleaseDC
GetDC
SetWindowPos
LoadIconW
GetWindowRect
GetClientRect
DrawIcon
AppendMenuW
GetSystemMenu
GetSystemMetrics
EnableWindow
IsIconic
SetWindowTextA
SetWindowTextW
GetDlgItem
PostMessageW
SendMessageW
GetClassInfoW

gdi32

TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetMapMode
RectVisible
PtVisible
DeleteObject
GetStockObject
GetClipBox
CreateBitmap
EndDoc
StartDocA
Escape
CreateDCA
SetDIBits
SelectPalette
RealizePalette
GetDIBits
GetDeviceCaps
DeleteDC
CreatePalette
CreateDIBitmap
CreateCompatibleDC
BitBlt
ExtTextOutW
GetTextMetricsW
SetTextColor
SetBkColor
GetTextColor
GetBkColor
GetObjectW
GetTextExtentPoint32W
RestoreDC
SaveDC
SelectObject
CreateFontIndirectW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegEnumValueW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

shell32

ShellExecuteW

shlwapi

PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW

ole32

CoInitialize
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoCreateGuid

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear
VariantChangeType

oleacc

CreateStdAccessibleObject
LresultFromObject

Exports

Exports

exportedHeapusageDiagnostic

Sections

.text
Size: 1006KB - Virtual size: 1006KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

716878dd074df6cc7452349a9c08f32b

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

oleacc

Exports

Exports

Sections

.text Size: 1006KB - Virtual size: 1006KB

.rdata Size: 177KB - Virtual size: 177KB

.data Size: 24KB - Virtual size: 4.6MB

.rsrc Size: 25KB - Virtual size: 24KB

.text
Size: 1006KB - Virtual size: 1006KB

.rdata
Size: 177KB - Virtual size: 177KB

.data
Size: 24KB - Virtual size: 4.6MB

.rsrc
Size: 25KB - Virtual size: 24KB