2024-04-11_62815f99d8a01f489027bbddf069c089_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-11_62815f99d8a01f489027bbddf069c089_icedid
Size

256KB
MD5

62815f99d8a01f489027bbddf069c089
SHA1

16b2d27e31fc279aa367a7c7dfa179acdd6d6e33
SHA256

a01be8a8c65166281bf07b9a622a8883de775376c873156d465a8d963a5b1aa8
SHA512

c6507de8cd5812af7c989ce061daecea7f24bcd9b41868ee7cdac4dc6e25f7ac1d0ac5c2b3e92ce3ba8e154eed722f040a1dd62f64cd14644f3b414dbc2d5ce6
SSDEEP

6144:koaPInOp1JLl2dGF9sVgb//eK7OQM4hBdL9:RaBJLMngLx7coB/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-11_62815f99d8a01f489027bbddf069c089_icedid

Files

2024-04-11_62815f99d8a01f489027bbddf069c089_icedid
.exe windows:4 windows x86 arch:x86

d70a324e4527bc3e85f017886c6df939

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Request_Device_EjectW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList

kernel32

GetCurrentProcessId
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetThreadLocale
GlobalFlags
GetModuleHandleA
InterlockedExchange
GetLocaleInfoW
GetVersion
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapReAlloc
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
QueryPerformanceCounter
GetSystemTimeAsFileTime
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateFileA
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryA
lstrcmpW
GetModuleHandleW
GetVersionExA
WideCharToMultiByte
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
MultiByteToWideChar
CreateEventW
CreateThread
WaitForSingleObject
FormatMessageW
LocalFree
SetEvent
WaitForMultipleObjects
FindResourceW
LoadResource
LockResource
SizeofResource
GetTickCount
GetProcessHeap
HeapAlloc
HeapFree
GetModuleFileNameW
FindFirstFileW
FindClose
GetVersionExW
GetProcAddress
FreeLibrary
LoadLibraryW
Sleep
CreateFileW
DeviceIoControl
OutputDebugStringW
GetCurrentProcess
GetLastError
CloseHandle

user32

PostQuitMessage
UnregisterClassA
ValidateRect
ClientToScreen
SetWindowTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
IsWindowEnabled
LoadCursorW
GetDC
ReleaseDC
GetSysColorBrush
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
EnableWindow
SetForegroundWindow
GetClientRect
GetMenu
MessageBoxW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetParent
RegisterDeviceNotificationW
UnregisterDeviceNotification
IsWindow
PostMessageW
EnumWindows
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
GrayStringW
DrawTextExW
DrawTextW
SendMessageW
GetClassNameW
IsWindowVisible
EnumChildWindows
TabbedTextOutW
DestroyMenu
GetFocus
GetSubMenu
GetMenuItemCount
GetMenuItemID
CallWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
GetMenuState
CreateWindowExW

advapi32

CreateProcessAsUserW
RegOpenKeyExW
RegCloseKey
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
DeleteService
CreateServiceW
StartServiceW
ChangeServiceConfigW
OpenSCManagerW
EnumDependentServicesW
OpenServiceW
ControlService
QueryServiceStatusEx
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

gdi32

SetWindowExtEx
GetStockObject
DeleteDC
SetMapMode
RestoreDC
SaveDC
ExtTextOutW
DeleteObject
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
ScaleWindowExtEx

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d70a324e4527bc3e85f017886c6df939

Headers

File Characteristics

Imports

setupapi

kernel32

user32

advapi32

gdi32

winspool.drv

oleaut32

Sections

.text Size: 192KB - Virtual size: 191KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 4KB - Virtual size: 312B

.text
Size: 192KB - Virtual size: 191KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 4KB - Virtual size: 312B