2024-04-19_96fb4b9c338449ef00eac9d73e5a711e_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-19_96fb4b9c338449ef00eac9d73e5a711e_icedid
Size

1.1MB
MD5

96fb4b9c338449ef00eac9d73e5a711e
SHA1

92492e0919908d2c1928e58d090409a684bd1d68
SHA256

e0f9cbc8dfde308d43dfda399f643d52959ce0e2b67d3ac1b0c1d8e51308f231
SHA512

b25f316d014d6088222d9c188ee6f25ef751db9a7e10e08708346695d3fe1a0a344c9d82f774b4694b5d8ef2652a944a2d3702928ede9c6f73c16857bf310d61
SSDEEP

12288:b1VPYCZPu1rN/noTRnYP91JGeXLlHTI75BwHq4wu/IbkGJG7uas+GPk4SpP:BRioOl1kOTI7794wuYZkfs+GPY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-19_96fb4b9c338449ef00eac9d73e5a711e_icedid

Files

2024-04-19_96fb4b9c338449ef00eac9d73e5a711e_icedid
.exe windows:5 windows x86 arch:x86

564c8a136a4e1c959d2b14a952408a76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GlobalFlags
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
GetModuleHandleW
SetErrorMode
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
GetDriveTypeA
SetEnvironmentVariableA
SetCurrentDirectoryA
CreateDirectoryA
GetCommandLineA
HeapAlloc
ExitThread
RaiseException
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
SetStdHandle
GetFileType
GetCurrentDirectoryA
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
SetHandleCount
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetExitCodeProcess
CompareStringW
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
DeleteCriticalSection
InitializeCriticalSection
FindNextFileA
GetFileSizeEx
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiA
GetThreadLocale
GetStringTypeExA
DeleteFileA
MoveFileA
InterlockedDecrement
GetModuleFileNameW
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GetTickCount
GetPrivateProfileIntA
lstrlenA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GlobalUnlock
GlobalFree
FreeResource
GetCurrentProcessId
SetLastError
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CompareStringA
InterlockedExchange
GlobalLock
lstrcmpA
GlobalAlloc
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
SetEvent
CreateEventA
CreateThread
TerminateThread
ExpandEnvironmentStringsA
CreateFileA
GetCommState
SetupComm
SetCommState
GetCommTimeouts
SetCommTimeouts
GetCommModemStatus
EscapeCommFunction
CloseHandle
WriteFile
ReadFile
GetProfileStringA
GetPrivateProfileStringA
WriteProfileStringA
WritePrivateProfileStringA
GetWindowsDirectoryA
WritePrivateProfileSectionA
GetModuleFileNameA
MultiByteToWideChar
LocalAlloc
LocalLock
LocalUnlock
MulDiv
FreeLibrary
LoadLibraryA
GetProcAddress
SuspendThread
ResumeThread
GetSystemTime
GetDateFormatA
Sleep
TerminateProcess
GetStartupInfoA
CreateProcessA
GetThreadPriority
SetThreadPriority
WaitForSingleObject
GetLastError
FormatMessageA
LocalFree
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
HeapSize

user32

UnpackDDElParam
DeleteMenu
GetSystemMenu
SetParent
GetMenuItemInfoA
CharUpperA
DestroyIcon
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
UnregisterClassA
GetDCEx
LockWindowUpdate
DrawTextExA
DrawTextA
TabbedTextOutA
SetRectEmpty
IsZoomed
SetWindowRgn
DrawIcon
WaitMessage
ReleaseCapture
LoadCursorA
WindowFromPoint
SetCapture
ClientToScreen
GetMenuStringA
InsertMenuA
RegisterClipboardFormatA
SetWindowContextHelpId
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
ReuseDDElParam
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDesktopWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
IsWindowEnabled
GetActiveWindow
SetActiveWindow
MapDialogRect
AppendMenuA
CreatePopupMenu
GetSystemMetrics
GetKeyState
GetKeyboardState
ToAscii
AdjustWindowRectEx
InvalidateRect
FillRect
IsRectEmpty
RegisterWindowMessageA
LoadMenuA
DestroyMenu
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
InflateRect
EndPaint
BeginPaint
GetWindowDC
SetScrollRange
GrayStringA
GetClientRect
DrawFocusRect
EqualRect
OffsetRect
SetRect
CopyRect
IsWindowVisible
PostThreadMessageA
GetWindowTextA
WaitForInputIdle
SetForegroundWindow
FindWindowExA
FindWindowA
GetForegroundWindow
MessageBoxA
GetFocus
RedrawWindow
ReleaseDC
GetDC
GetSysColorBrush
MessageBeep
keybd_event
SetFocus
MapVirtualKeyA
PostMessageA
SendMessageA
GetParent
KillTimer
SetTimer
GetWindowRect
EnableWindow
UpdateWindow
GetDlgCtrlID

gdi32

PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
MoveToEx
ArcTo
ExtSelectClipRgn
DeleteDC
GetPixel
GetStockObject
GetViewportExtEx
CreateSolidBrush
SetRectRgn
CombineRgn
GetMapMode
GetCharWidthA
CreateFontA
StretchDIBits
GetRgnBox
CreatePatternBrush
GetWindowExtEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
CreateRectRgn
SelectClipRgn
DeleteObject
CreateFontIndirectA
CreateBrushIndirect
GetObjectA
CreatePenIndirect
SetBkMode
RestoreDC
SaveDC
SelectObject
CreateEllipticRgn
PatBlt
CreateRectRgnIndirect
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetTextMetricsA
GetDeviceCaps
LPtoDP
GetTextExtentPoint32A
BitBlt
Ellipse
GetTextColor
GetBkColor
CreateCompatibleDC
CreateCompatibleBitmap

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA

shell32

DragFinish
SHGetFileInfoA
ExtractIconA
DragQueryFileA

shlwapi

PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA

oledlg

ord8

ole32

CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitializeEx
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysStringLen
SysFreeString
VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocStringByteLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 864KB - Virtual size: 863KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 769KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

564c8a136a4e1c959d2b14a952408a76

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 864KB - Virtual size: 863KB

.rdata Size: 191KB - Virtual size: 190KB

.data Size: 15KB - Virtual size: 769KB

.rsrc Size: 30KB - Virtual size: 30KB

.text
Size: 864KB - Virtual size: 863KB

.rdata
Size: 191KB - Virtual size: 190KB

.data
Size: 15KB - Virtual size: 769KB

.rsrc
Size: 30KB - Virtual size: 30KB