2024-04-15_a10cff43a4cfd664373a705b3c03b119_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-15_a10cff43a4cfd664373a705b3c03b119_icedid
Size

682KB
MD5

a10cff43a4cfd664373a705b3c03b119
SHA1

5ef252616d7d9fd917552cf205d6f77d8898ed46
SHA256

8ae219d36e941f5af8b0f254537fade0674a560031b386e49f34f4b21d71a333
SHA512

126ddb0ee8a24d990d4b88f79fbe6d15e37b8e3b7fc8eed60ef028f6c5f99cf27e944cf4e6a69967bd1fde9ef37d8d6d24ee97ef704667d98ad68547d6832882
SSDEEP

12288:aj4I0RveI0jAd6usXW0z+fqpIsIx+TSQE90sMNpYNPIXn+1EydhKpiIFsM:FI0RVd6usXROqpfIgT/EGFnYNPC+1Eyy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-15_a10cff43a4cfd664373a705b3c03b119_icedid

Files

2024-04-15_a10cff43a4cfd664373a705b3c03b119_icedid
.exe windows:4 windows x86 arch:x86

c8040e1c5ce2a0f8a739893a5652b76a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
WritePrivateProfileStringW
GlobalFlags
SetErrorMode
GetTickCount
HeapFree
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RaiseException
HeapReAlloc
ExitProcess
ExitThread
CreateThread
HeapSize
VirtualProtect
VirtualAlloc
VirtualQuery
GetStdHandle
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryA
GetDriveTypeA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
SuspendThread
ResumeThread
SetThreadPriority
InterlockedDecrement
GetCurrentProcessId
GetModuleHandleA
FreeResource
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalDeleteAtom
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
CompareStringA
InterlockedExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFree
MulDiv
CompareFileTime
SetFileTime
DosDateTimeToFileTime
CreateDirectoryW
SetEvent
CreateEventW
SetFileAttributesW
CopyFileW
WriteProfileStringW
GetTempFileNameW
DeleteFileW
GetCurrentThreadId
HeapAlloc
FormatMessageW
GetProcessHeap
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileSectionW
Sleep
FindNextFileW
FindFirstFileW
FindClose
lstrcmpA
GetLogicalDrives
lstrcmpW
GetPrivateProfileStringW
lstrcpyA
GetTempPathW
lstrlenA
LoadLibraryExW
lstrcatW
SetCurrentDirectoryW
GetCurrentDirectoryW
FreeLibrary
GlobalUnlock
GlobalLock
lstrcmpiW
lstrlenW
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
CreateMutexW
GlobalFree
GlobalAlloc
GetCurrentProcess
GetLastError
GetCurrentThread
GetSystemInfo
GetVersionExW
ReleaseMutex
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
FindResourceW
LoadResource
LockResource
SizeofResource
lstrcpyW
GetUserDefaultLangID
lstrcpynW
GetFileSize
GetFileTime
CreateFileW
GetFileAttributesW
CloseHandle
FreeEnvironmentStringsA

user32

MessageBeep
RegisterClipboardFormatW
PostThreadMessageW
GetSysColorBrush
WindowFromPoint
SetWindowContextHelpId
MapDialogRect
GetMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
UnregisterClassA
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
GetNextDlgGroupItem
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
IsWindowVisible
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
CopyRect
PtInRect
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetCursor
DispatchMessageW
TranslateMessage
PeekMessageW
IsWindow
LoadCursorW
PostMessageW
RegisterWindowMessageW
GetDlgCtrlID
BringWindowToTop
SetForegroundWindow
SystemParametersInfoW
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
CharUpperW
CharLowerW
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
UnregisterClassW
DestroyMenu
DestroyWindow
GetKeyState
DrawIcon
GetSystemMetrics
IsIconic
LoadIconW
CloseWindow
GetDesktopWindow
GetWindowRect
GetParent
MessageBoxW
EnableWindow
ReleaseDC
SendMessageW
GetWindowLongW
GetClientRect
ClientToScreen
GetDC
wsprintfW
GetClassInfoExW
SetPropW

gdi32

CreateRectRgnIndirect
RectVisible
GetMapMode
GetTextColor
GetRgnBox
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
GetStockObject
CreateBitmap
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
GetBkColor
GetDeviceCaps
SetMapMode
RestoreDC
SaveDC
GetObjectW
SetBkColor
SetTextColor
GetClipBox
TextOutW

comdlg32

GetFileTitleW

winspool.drv

AddPrinterDriverExW
OpenPrinterW
GetPrinterDataW
ClosePrinter
SetPrinterDataW
EnumPrintersW
GetPrinterDriverDirectoryW
AddPrinterW
DeletePrinterDriverExW
DeletePrinter
EnumPrinterDriversW
EnumPrintProcessorDatatypesW
DocumentPropertiesW

advapi32

RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegDeleteKeyW
RegFlushKey
OpenThreadToken
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHFileOperationW
DoEnvironmentSubstW

comctl32

InitCommonControlsEx

shlwapi

PathAppendW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathFileExistsW
PathIsDirectoryW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CoGetClassObject
CoTaskMemFree
CoGetMalloc
StgOpenStorageOnILockBytes
CoInitialize
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal

oleaut32

SysFreeString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringLen
VariantInit
VariantChangeType
SysStringLen
VariantClear
SysAllocString

Sections

.text
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c8040e1c5ce2a0f8a739893a5652b76a

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 368KB - Virtual size: 367KB

.rdata Size: 100KB - Virtual size: 99KB

.data Size: 16KB - Virtual size: 38KB

.rsrc Size: 188KB - Virtual size: 188KB

.text
Size: 368KB - Virtual size: 367KB

.rdata
Size: 100KB - Virtual size: 99KB

.data
Size: 16KB - Virtual size: 38KB

.rsrc
Size: 188KB - Virtual size: 188KB