2024-04-16_692735e8d9307cc771195c84aa1a3f0d_icedid_wapomi

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-16_692735e8d9307cc771195c84aa1a3f0d_icedid_wapomi
Size

1.4MB
MD5

692735e8d9307cc771195c84aa1a3f0d
SHA1

bda812d96d6f8fbfb05722a81aa32281a38ebf8b
SHA256

3c2167d44ac50c1efbf0a6a719a5fa65770a952a62597249ab53379ef9512cee
SHA512

111ae5a796367c58695c64461b926cd9e25541f7a077c9766ae8a2af5a5339bf9b2a1944eb516cc467e6170056bd1a8efe34bbee94618f7ce9e037100e838163
SSDEEP

24576:6vbBARGCfE5TVUUCql3jpomr6RTmBfOKpf37Q+zAV9/NaCWxI7DBRitc:qARGEvqlzpomr6RTmBfOKpf37Q+zAV9+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-16_692735e8d9307cc771195c84aa1a3f0d_icedid_wapomi

Files

2024-04-16_692735e8d9307cc771195c84aa1a3f0d_icedid_wapomi
.exe windows:4 windows x86 arch:x86

caf305b68aad926d2599f8ceb251d421

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\SystemTool Eng 19\SystemTool Eng 16\SystemTool Eng 52\SystemTool\Release\SystemTool.pdb

Imports

kernel32

LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
LCMapStringA
SetHandleCount
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
HeapSize
TerminateProcess
GetFileType
SetStdHandle
HeapReAlloc
InterlockedExchange
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
RtlUnwind
GetSystemTimeAsFileTime
ExitProcess
GetTickCount
SetErrorMode
GetFileTime
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
WritePrivateProfileStringA
GetFullPathNameA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
SetLastError
MulDiv
GlobalAlloc
LocalFree
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
lstrcpynA
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetModuleFileNameA
GetTimeZoneInformation
SetTimeZoneInformation
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
CopyFileA
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersion
DeviceIoControl
GetDriveTypeA
ReadFile
GetLogicalDrives
GetVolumeInformationA
FormatMessageA
InterlockedDecrement
MultiByteToWideChar
GetWindowsDirectoryA
GetTempPathA
FindFirstFileA
GetFileAttributesA
SetFileAttributesA
RemoveDirectoryA
DeleteFileA
FindNextFileA
FindClose
CreateFileA
GetFileSize
SetFilePointer
WriteFile
CloseHandle
WideCharToMultiByte
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentProcess
GetLastError
GetProcessHeap
HeapAlloc
HeapFree
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetEnvironmentStringsW

user32

MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
SetRect
IsRectEmpty
CharNextA
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
EndPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
wsprintfA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GetMenuState
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
GetParent
EnableWindow
SendMessageA
GetFocus
SetTimer
KillTimer
GetWindowRect
InvalidateRect
UnregisterClassA
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
UpdateWindow
GetMenu
PostMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
EqualRect
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
SetWindowPos
OffsetRect
IntersectRect
GetWindowPlacement
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
RegisterClipboardFormatA
PostThreadMessageA
RemovePropA
CharUpperA
ExitWindowsEx
DrawIcon
AppendMenuA
GetSystemMenu
IsIconic
GetClientRect
LoadIconA
GetSystemMetrics
MessageBoxA
IsWindow
PtInRect
InflateRect
CopyRect
FillRect
FrameRect
GetDC
IsWindowVisible
GetCapture
SetCapture
LoadCursorA
ReleaseCapture
ReleaseDC
GetSysColor
CallWindowProcA
SetWindowLongA
GetComboBoxInfo
SystemParametersInfoA
EndDialog
GetNextDlgTabItem
BeginPaint

gdi32

GetRgnBox
GetMapMode
CreateSolidBrush
GetStockObject
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
GetObjectA
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
CreateBitmap
GetDeviceCaps
SetBkColor
SetTextColor
GetClipBox
GetTextColor
GetBkColor
CreateFontIndirectA
PtVisible

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

GetUserNameA
GetLengthSid
GetTokenInformation
OpenProcessToken
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
RegCloseKey
RegGetKeySecurity
RegOpenKeyExA
FreeSid
SetSecurityDescriptorDacl
RegQueryValueA
RegOpenKeyA
LookupPrivilegeValueA
AdjustTokenPrivileges
InitiateSystemShutdownA
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyExA
CopySid
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegSetKeySecurity
RegQueryInfoKeyA
RegEnumKeyA
AllocateAndInitializeSid
InitializeAcl
AddAce
InitializeSecurityDescriptor

shell32

SHEmptyRecycleBinA
SHGetSpecialFolderPathA
ShellExecuteA

comctl32

ord17
_TrackMouseEvent
ImageList_Destroy

shlwapi

SHDeleteValueA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
SHDeleteKeyA
PathFindFileNameA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal
CoTaskMemFree
CoInitialize
CoInitializeEx
CoUninitialize
CoCreateInstance
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CLSIDFromProgID
CoTaskMemAlloc
CoInitializeSecurity
StgCreateDocfileOnILockBytes
OleInitialize

oleaut32

SysAllocString
SysStringLen
SysFreeString
VariantInit
VariantCopy
VariantChangeType
VariantClear
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringByteLen
SafeArrayDestroy
OleCreateFontIndirect

wininet

DeleteUrlCacheEntry
FindCloseUrlCache
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA

iphlpapi

GetAdaptersInfo

rpcrt4

UuidFromStringW

Sections

.text
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 448KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 532KB - Virtual size: 528KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�ɭ�ub
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

caf305b68aad926d2599f8ceb251d421

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

iphlpapi

rpcrt4

Sections

.text Size: 400KB - Virtual size: 399KB

.rdata Size: 448KB - Virtual size: 444KB

.data Size: 12KB - Virtual size: 23KB

.rsrc Size: 532KB - Virtual size: 528KB

�ɭ�ub Size: 20KB - Virtual size: 20KB

.text
Size: 400KB - Virtual size: 399KB

.rdata
Size: 448KB - Virtual size: 444KB

.data
Size: 12KB - Virtual size: 23KB

.rsrc
Size: 532KB - Virtual size: 528KB

�ɭ�ub
Size: 20KB - Virtual size: 20KB