2024-04-22_155a5ba8464264708f44cec408845e16_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-22_155a5ba8464264708f44cec408845e16_icedid
Size

996KB
MD5

155a5ba8464264708f44cec408845e16
SHA1

6824abae9a6524f7ed25281f0700f0d8a73dfd8e
SHA256

d31061d66cd70cb61334f2fe29dc64955ca53de5318ee3ec73b4dd0e67f38bf7
SHA512

5ba7325c003868de902bf23713e43e9bbdaf164838d731a4753e7bfd1997d2cdcd6b4aa1cf06cfd1f53ba87c0e451eb2240d4a6bf2784fefa78cebbf9a25bf44
SSDEEP

12288:BUrSaKp4LB4KKe0D2hKTTNsVIVIcN/ki0PKTN/4IkpSMI:BuSaKp4LdKe/KaVInN/ki0ix/4U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-22_155a5ba8464264708f44cec408845e16_icedid

Files

2024-04-22_155a5ba8464264708f44cec408845e16_icedid
.exe windows:4 windows x86 arch:x86

7aa3329b89f587086dac05b644b5143e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\cpp\WalSoft2010\FakturacePony\Release\FakturacePony.pdb

Imports

kernel32

HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
HeapReAlloc
ExitThread
CreateThread
TerminateProcess
SetStdHandle
GetFileType
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetFileTime
GetFileAttributesA
SetErrorMode
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
ReleaseMutex
CreateMutexA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
FileTimeToLocalFileTime
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
DeleteFileA
MoveFileA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
InterlockedDecrement
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
FileTimeToSystemTime
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
CreateFileA
ReadFile
SetFilePointer
CloseHandle
GetLogicalDrives
GetDriveTypeA
GetCurrentDirectoryA
FindFirstFileA
FindNextFileA
FindClose
CopyFileA
lstrcpyA
CreateDirectoryA
Sleep
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetTickCount
InterlockedExchange

user32

LockWindowUpdate
SetCapture
IsRectEmpty
ShowOwnedPopups
PostQuitMessage
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
WindowFromPoint
GetMenuItemInfoA
InflateRect
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowTextA
IsDialogMessageA
wsprintfA
LoadMenuA
DestroyMenu
GetActiveWindow
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
SetRectEmpty
BringWindowToTop
ShowWindow
GetDesktopWindow
IsWindowEnabled
TranslateAcceleratorA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
GetDCEx
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollPos
SetForegroundWindow
IsWindowVisible
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
UnregisterClassA
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
PtInRect
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
KillTimer
SetTimer
IsWindow
GetWindowLongA
GetSysColor
CreateMenu
LoadCursorA
SetCursor
DrawFrameControl
FillRect
DrawFocusRect
DrawTextA
RedrawWindow
GetClientRect
GetSysColorBrush
SetParent
GetSystemMenu
RemovePropA
DeleteMenu
GetKeyState
MessageBoxA
CloseWindow
LoadIconA
CopyRect
GetParent
EnableWindow
SetMenu
GetMenu
AppendMenuA
CreatePopupMenu
SetActiveWindow
GetDC
GetWindowRect
SendMessageA
GetFocus
InvalidateRect
UpdateWindow
PostMessageA
SetRect
CharUpperA
GetWindowTextA

gdi32

LineTo
DeleteDC
CreatePatternBrush
GetStockObject
ExtCreatePen
CreateFontIndirectA
GetTextExtentPoint32A
CreateRectRgnIndirect
SetRectRgn
ScaleWindowExtEx
PatBlt
StretchDIBits
GetCharWidthA
IntersectClipRect
ExcludeClipRect
SetMapMode
RestoreDC
SaveDC
CreateBitmap
CreateCompatibleBitmap
GetClipBox
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
CreateRectRgn
SelectClipRgn
SetTextAlign
CombineRgn
SelectObject
CreateHatchBrush
GetBkColor
CreateSolidBrush
SetTextColor
SetBkMode
GetObjectA
CreateDIBSection
DeleteObject
BitBlt
DPtoLP
GetMapMode
CreateCompatibleDC
RoundRect
SetBkColor
EndDoc
EndPage
StartPage
StartDocA
CreateFontA
GetCurrentObject
GetDeviceCaps
CreatePen
Rectangle
MoveToEx

comdlg32

PrintDlgA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey

shell32

SHFileOperationA
DragFinish
DragQueryFileA
ShellExecuteA

comctl32

ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy

shlwapi

PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFileExistsA
PathFindFileNameA

oleaut32

SysAllocString
VariantCopy
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen

Sections

.text
Size: 816KB - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7aa3329b89f587086dac05b644b5143e

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Sections

.text Size: 816KB - Virtual size: 812KB

.rdata Size: 156KB - Virtual size: 152KB

.data Size: 8KB - Virtual size: 38KB

.rsrc Size: 12KB - Virtual size: 10KB

.text
Size: 816KB - Virtual size: 812KB

.rdata
Size: 156KB - Virtual size: 152KB

.data
Size: 8KB - Virtual size: 38KB

.rsrc
Size: 12KB - Virtual size: 10KB