2024-04-10_98b42c95e5a23f995d6d5e22d6da5bbc_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-10_98b42c95e5a23f995d6d5e22d6da5bbc_icedid
Size

1.0MB
MD5

98b42c95e5a23f995d6d5e22d6da5bbc
SHA1

6fc80c92e4826c8d1348d26779374304b85b2d26
SHA256

8389f5ac3ce619519f9455c4cf7c88a4294101a1362adf9e7392289c73c4ad7f
SHA512

5884048ee88b924ef8a200c394ed8975d601fafb60d61e0610370f6dae75b8e714b7724df0ce090ecff5735ac972d0c39291914ca0c5eeefd5c8fbc5d19aed4c
SSDEEP

24576:ivT8qOrfzQ49028Dp0Th9cZlpERayxVW2M4dfVsa:1Hr7VYyxVW2M4ddsa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-10_98b42c95e5a23f995d6d5e22d6da5bbc_icedid

Files

2024-04-10_98b42c95e5a23f995d6d5e22d6da5bbc_icedid
.exe windows:4 windows x86 arch:x86

c004c0e0794d9113df089cbb954011ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
GetCPInfo
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
IsBadWritePtr
QueryPerformanceCounter
LCMapStringA
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetOEMCP
IsBadCodePtr
SetStdHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
InterlockedExchange
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
HeapSize
TerminateProcess
HeapReAlloc
ExitProcess
HeapFree
HeapAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetSystemTimeAsFileTime
RtlUnwind
GetStartupInfoW
GetTickCount
FileTimeToLocalFileTime
SetErrorMode
GetFileTime
GetFileAttributesW
WritePrivateProfileStringW
FileTimeToSystemTime
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
CreateFileW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
DeleteFileW
MoveFileW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
CloseHandle
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
SetLastError
FormatMessageW
LocalFree
GetVersion
GlobalGetAtomNameW
lstrcpynW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetModuleHandleA
LoadLibraryA
lstrcatW
lstrcmpW
GetModuleHandleW
GetVersionExA
InterlockedDecrement
GetTempPathW
GetTempFileNameW
CopyFileW
lstrlenA
lstrlenW
Sleep
MulDiv
GlobalFree
LoadLibraryW
GetProcAddress
FreeLibrary
DeleteFileA
GetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
IsBadStringPtrA
IsBadReadPtr
lstrcpyW
WideCharToMultiByte
FindFirstFileW
FindNextFileW
FindClose
LoadResource
LockResource
SizeofResource
FindResourceW
MultiByteToWideChar
GetModuleFileNameW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
GetCurrentProcessId

user32

CharUpperW
SetTimer
SetParent
DeleteMenu
IsZoomed
SystemParametersInfoW
GetMenuItemInfoW
InflateRect
GetMessageW
TranslateMessage
ValidateRect
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GrayStringW
DrawTextExW
TabbedTextOutW
SetMenuItemBitmaps
GetMenuState
CheckMenuItem
GetMenuCheckMarkDimensions
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemInt
GetDlgItemTextW
UnpackDDElParam
ReuseDDElParam
DestroyMenu
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
GetDesktopWindow
IsWindowEnabled
wsprintfW
TranslateAcceleratorW
TranslateMDISysAccel
GetActiveWindow
DrawMenuBar
DefFrameProcW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextW
GetForegroundWindow
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
GetKeyState
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
AdjustWindowRectEx
EqualRect
DeferWindowPos
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
UnhookWindowsHookEx
DrawTextW
LoadBitmapW
ClipCursor
RemoveMenu
GetSystemMetrics
AppendMenuW
GetWindow
GetSystemMenu
EnableMenuItem
RegisterWindowMessageW
MessageBeep
ReleaseCapture
SetCursor
ShowWindow
LoadCursorW
PeekMessageW
WindowFromPoint
ShowScrollBar
SetCapture
KillTimer
EnableScrollBar
GetDC
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
GetDCEx
ScreenToClient
ClientToScreen
SetRectEmpty
SetRect
PtInRect
IsRectEmpty
GetWindowRect
InvalidateRect
PostThreadMessageW
RegisterClipboardFormatW
GetWindowTextLengthW
LockWindowUpdate
GetClassInfoW
RegisterClassW
UnregisterClassW
GetCursorPos
IsWindowVisible
SetMenu
GetMenu
PostMessageW
MessageBoxW
LoadMenuW
ModifyMenuW
GetSubMenu
GetMenuItemID
GetMenuItemCount
SetDlgItemTextW
CopyRect
DrawFocusRect
GetSysColor
FillRect
GetSysColorBrush
GetWindowDC
ReleaseDC
EnableWindow
GetLastActivePopup
FindWindowW
UpdateWindow
BringWindowToTop
IsIconic
LoadIconW
GetParent
GetClientRect
SendMessageW
SendDlgItemMessageW

gdi32

ExtSelectClipRgn
CreatePatternBrush
CreateFontIndirectW
ScaleViewportExtEx
GetBkColor
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetRgnBox
ScaleWindowExtEx
SetWindowExtEx
SetROP2
RoundRect
GetTextAlign
FloodFill
Polygon
Ellipse
GetTextColor
SetViewportExtEx
TextOutW
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
GetPixel
BitBlt
CreateRectRgn
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateDCW
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetCharWidthW
CreatePen
CreateHatchBrush
PatBlt
SetStretchBltMode
DeleteDC
DeleteObject
GetCurrentObject
GetObjectW
CreateFontW
SelectObject
StretchDIBits
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocW
StretchBlt
DPtoLP
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
GetWindowExtEx
GetViewportExtEx
GetViewportOrgEx
GetMapMode
GetStockObject
CreateSolidBrush
GetTextMetricsW
GetTextExtentPoint32W
Rectangle

comdlg32

GetFileTitleW
PrintDlgW
GetSaveFileNameW
CommDlgExtendedError
FindTextW
GetOpenFileNameW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueW
RegCloseKey
RegSetValueExA
RegSetValueExW
RegCreateKeyExW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegCreateKeyExA

shell32

ShellExecuteW
DragFinish
DragQueryFileW
ShellExecuteExW

comctl32

ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
CoTaskMemAlloc
CoTaskMemFree
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysAllocStringLen
OleCreateFontIndirect
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysFreeString
VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 728KB - Virtual size: 727KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c004c0e0794d9113df089cbb954011ad

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 728KB - Virtual size: 727KB

.rdata Size: 116KB - Virtual size: 113KB

.data Size: 20KB - Virtual size: 34KB

.rsrc Size: 180KB - Virtual size: 176KB

.text
Size: 728KB - Virtual size: 727KB

.rdata
Size: 116KB - Virtual size: 113KB

.data
Size: 20KB - Virtual size: 34KB

.rsrc
Size: 180KB - Virtual size: 176KB