2024-04-17_fdb4880a2fe36429d3e2f5c12db353b8_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-17_fdb4880a2fe36429d3e2f5c12db353b8_icedid
Size

1.8MB
MD5

fdb4880a2fe36429d3e2f5c12db353b8
SHA1

2116fb733a27e2501d89451035cc95d4f28ca17d
SHA256

832d0382c14a1bf6a14853b815ad3fb77721d568ae8c59ee971ed85499868ec1
SHA512

327f6e8126bd58c746061859c51debc3bfe9d6d7c31777f6c0e20bb61bee5fb29c96da4abffac617a293c4e2cb2b396af9a34fa7eec94f65cef05e2d51052c5f
SSDEEP

24576:bd2ndYuufEGgUNkeJgoMuRaGxN6PrSycM7YOaWOWhfFAm:B2iffE/UNQ6fSrZcM7Y7af

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-17_fdb4880a2fe36429d3e2f5c12db353b8_icedid

Files

2024-04-17_fdb4880a2fe36429d3e2f5c12db353b8_icedid
.exe windows:4 windows x86 arch:x86

f2158899fb1c48e5334a038300424076

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSACleanup
connect
socket
ioctlsocket
htons
bind
htonl
listen
inet_addr
getsockname
accept
select
closesocket
shutdown
send
recv
setsockopt
inet_ntoa
gethostbyname
gethostname
WSAStartup

imm32

ImmGetOpenStatus
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

mpr

WNetGetConnectionA

ssce4332

SSCE_OptionsDlgTmplt
SSCE_EditLexDlg
SSCE_EditLexDlgTmplt
SSCE_OpenBlock
SSCE_CheckBlock
SSCE_GetBlockInfo
SSCE_CheckBlockDlg
SSCE_CheckBlockDlgTmplt
SSCE_CloseBlock
SSCE_GetRegTreeName
SSCE_SetRegTreeName
SSCE_GetMainLexPath
SSCE_SetMainLexPath
SSCE_GetHelpFile
SSCE_SetHelpFile
SSCE_GetMainLexFiles
SSCE_GetSid
SSCE_SetMainLexFiles
SSCE_OptionsDlg
SSCE_SetOption
SSCE_GetOption

kernel32

GetTempPathA
SearchPathA
GetProcessVersion
GlobalFlags
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
FindResourceExA
SetErrorMode
RtlUnwind
GetACP
HeapFree
HeapReAlloc
GetFileTime
RaiseException
SetEnvironmentVariableA
GetTimeZoneInformation
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapSize
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
FileTimeToLocalFileTime
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetStdHandle
GetLocaleInfoW
GetFileAttributesA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
MoveFileA
UnlockFile
LockFile
GetCurrentProcess
DuplicateHandle
FormatMessageA
SetLastError
lstrcmpA
CreateEventA
SuspendThread
SetEvent
InterlockedDecrement
InterlockedIncrement
lstrcatA
lstrcmpiA
GlobalFindAtomA
WriteProfileStringA
IsBadWritePtr
FindResourceA
FileTimeToSystemTime
GetDiskFreeSpaceA
GetCurrentThread
GetEnvironmentVariableA
SetFileTime
GlobalUnlock
LoadResource
LockResource
ExitThread
lstrcpyA
GlobalGetAtomNameA
GlobalDeleteAtom
CompareFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetDriveTypeA
GetVolumeInformationA
GetLogicalDrives
GetLocalTime
GetSystemTime
GetDateFormatA
GetTimeFormatA
LoadLibraryA
GetProcAddress
LocalAlloc
LocalFree
SetFilePointer
SetEndOfFile
FlushFileBuffers
FreeLibrary
MulDiv
LocalUnlock
LocalLock
ReadFile
_lclose
OpenFile
CopyFileA
GetFileSize
LocalSize
GlobalSize
GetOEMCP
GetCPInfo
IsDBCSLeadByte
WideCharToMultiByte
MultiByteToWideChar
GetTempFileNameA
CreateFileA
WriteFile
CreateThread
ResumeThread
SetThreadPriority
Sleep
CreateProcessA
GetLastError
lstrcpynA
GetCurrentDirectoryA
GetProfileStringA
GetProfileIntA
SetCurrentDirectoryA
lstrlenW
FindFirstFileA
FindClose
FindNextFileA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GlobalAddAtomA
WinExec
GetVersionExA
GetModuleFileNameA
GetCurrentThreadId
GetVersion
SetFileAttributesA
GetTickCount
GetModuleHandleA
GlobalLock
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrlenA
GlobalReAlloc
WritePrivateProfileStringA
GetWindowsDirectoryA
DeleteFileA
GlobalFree
GlobalAlloc
HeapAlloc

user32

CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
GetForegroundWindow
GetLastActivePopup
GetMessageTime
RemovePropA
GetPropA
SetPropA
GetWindowTextA
GetWindowTextLengthA
SetWindowPlacement
GetScrollRange
SetScrollInfo
GetScrollInfo
MapWindowPoints
SendDlgItemMessageA
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
wvsprintfA
GetWindowDC
GrayStringA
ReuseDDElParam
UnpackDDElParam
DefFrameProcA
DefMDIChildProcA
MapDialogRect
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
IsClipboardFormatAvailable
DestroyCursor
SetCursorPos
GetWindowThreadProcessId
GetSysColorBrush
InvertRect
GetNextDlgGroupItem
PostThreadMessageA
UnionRect
IsRectEmpty
BeginDeferWindowPos
OffsetRect
EndDeferWindowPos
WaitMessage
GetMessagePos
IsMenu
SetMenu
GetMenu
DrawMenuBar
PtInRect
GetDesktopWindow
AdjustWindowRectEx
SetMenuDefaultItem
LoadIconA
WinHelpA
GetMenuItemID
ModifyMenuA
RemoveMenu
LoadImageA
CreateIconIndirect
DestroyIcon
CallWindowProcA
SetKeyboardState
GetAsyncKeyState
GetDlgCtrlID
GetActiveWindow
ToAscii
SetRectEmpty
LoadBitmapA
IsWindowEnabled
IsWindow
SetFocus
LoadMenuA
GetSubMenu
GetWindowRect
GetFocus
WindowFromDC
GetSystemMetrics
EnableScrollBar
ShowScrollBar
GetScrollPos
SystemParametersInfoA
GetDlgItem
CopyRect
TabbedTextOutA
IsCharLowerW
CharUpperW
IsCharUpperW
CharLowerW
CharUpperA
CharLowerA
IsCharAlphaA
IsCharLowerA
IsCharUpperA
GetClipboardData
SetClipboardData
OemToCharBuffA
DefWindowProcW
GetClassLongA
GetUpdateRect
BeginPaint
EndPaint
ScreenToClient
SetCapture
ClientToScreen
WindowFromPoint
GetClassNameA
CharToOemBuffA
GetTabbedTextExtentA
ValidateRect
ScrollWindow
HideCaret
DrawTextA
TabbedTextOutW
SetScrollPos
SetCaretPos
SetScrollRange
GetTabbedTextExtentW
CharNextA
SetClassLongA
SetWindowLongW
GetWindowLongW
DestroyCaret
CreateCaret
ShowCaret
SetCursor
ReleaseCapture
LoadCursorA
GetSysColor
GetCaretPos
GetMenuStringA
DeleteMenu
InsertMenuA
GetMenuItemCount
GetWindow
LockWindowUpdate
UnhookWindowsHookEx
UnregisterClassA
wsprintfA
FindWindowA
SetForegroundWindow
SetWindowsHookExA
RegisterClassA
CreateWindowExA
UpdateWindow
GetMessageA
GetMessageW
TranslateMessage
DispatchMessageW
DispatchMessageA
PeekMessageA
CallNextHookEx
SetWindowLongA
GetWindowLongA
DefWindowProcA
RegisterWindowMessageA
CreatePopupMenu
GetCursorPos
AppendMenuA
GetKeyState
GetParent
GetClassInfoA
ChildWindowFromPointEx
IsWindowVisible
MessageBoxA
PostMessageA
SetActiveWindow
IsIconic
OpenClipboard
EmptyClipboard
CloseClipboard
GetClientRect
SetRect
FillRect
InvalidateRect
LoadAcceleratorsA
GetKeyboardState
DestroyAcceleratorTable
CreateAcceleratorTableA
MapVirtualKeyA
CopyAcceleratorTableA
KillTimer
SetTimer
IsZoomed
GetDC
ReleaseDC
LoadStringA
ShowWindow
MoveWindow
GetMenuDefaultItem
TrackPopupMenu
IntersectRect
SendMessageTimeoutA
GetMenuState
MessageBeep
SetWindowPos
BringWindowToTop
GetSystemMenu
TranslateAcceleratorA
TranslateMDISysAccel
IsChild
SetParent
EnableWindow
SendMessageA
DeferWindowPos
RegisterClipboardFormatA
GetDCEx
DestroyWindow
DrawIconEx
MenuItemFromPoint
InsertMenuItemA
SetMenuItemInfoA
GetTopWindow
DestroyMenu
DrawEdge
GetMenuItemInfoA
GetCapture
DrawFocusRect
FrameRect
DrawStateA
DrawFrameControl
RedrawWindow
EqualRect
GetDoubleClickTime
InflateRect
IsCharAlphaW

gdi32

CreatePatternBrush
CreateFontA
CreateDIBitmap
Ellipse
RealizePalette
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetNearestColor
GetCurrentObject
RectVisible
FillRgn
CombineRgn
CreateRectRgnIndirect
PatBlt
Polygon
Rectangle
CreateBitmap
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GetTextColor
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
SetTextAlign
GetCurrentPositionEx
GetViewportExtEx
GetWindowExtEx
PtVisible
Escape
CreateDCA
StretchDIBits
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
GetMapMode
SetRectRgn
EnumFontFamiliesExA
GetBkColor
LPtoDP
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
CopyMetaFileA
DPtoLP
GetClipBox
SelectClipRgn
CreateRectRgn
MoveToEx
LineTo
TextOutA
SetBkColor
SetTextColor
ExtTextOutA
ExtTextOutW
GetTextExtentPoint32W
GetCharWidth32W
GetTextExtentPoint32A
GetTextExtentPointA
SelectObject
GetTextMetricsA
GetCharWidthA
CreatePen
CreateSolidBrush
DeleteObject
GetObjectA
GetDeviceCaps
CreateFontIndirectA
SetWindowOrgEx
GetStockObject

comdlg32

ReplaceTextA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
ChooseFontA
GetFileTitleA
ChooseColorA
PrintDlgA
FindTextA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyA
RegQueryValueExA
RegSetValueA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA

shell32

ShellExecuteA
SHFileOperationA
SHChangeNotify
Shell_NotifyIconA
ExtractIconA
SHGetPathFromIDListA
SHGetMalloc
SHGetFileInfoA
SHGetDesktopFolder
DragAcceptFiles
DragFinish
DragQueryFileA
ShellExecuteExA

comctl32

ImageList_AddMasked
ImageList_Read
ImageList_Write
ImageList_Duplicate
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Draw
ImageList_Destroy
ImageList_LoadImageA
ImageList_Create
ImageList_Remove
ImageList_SetImageCount
CreatePropertySheetPageA
DestroyPropertySheetPage
PropertySheetA
ord17
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_BeginDrag
ImageList_EndDrag
ImageList_Add

oledlg

ord8

ole32

CoRevokeClassObject
CreateStreamOnHGlobal
OleDuplicateData
CoRegisterMessageFilter
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
ReleaseStgMedium
CoTaskMemFree
DoDragDrop
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleLockRunning
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID

olepro32

ord253

oleaut32

VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysStringLen

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 396KB - Virtual size: 394KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2158899fb1c48e5334a038300424076

Headers

File Characteristics

Imports

wsock32

imm32

mpr

ssce4332

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 212KB - Virtual size: 211KB

.data Size: 52KB - Virtual size: 148KB

.rsrc Size: 396KB - Virtual size: 394KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 212KB - Virtual size: 211KB

.data
Size: 52KB - Virtual size: 148KB

.rsrc
Size: 396KB - Virtual size: 394KB