2024-04-23_fd691e967cce0acee3460f6e39f7a071_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-04-23_fd691e967cce0acee3460f6e39f7a071_icedid
Size

524KB
MD5

fd691e967cce0acee3460f6e39f7a071
SHA1

490fa97d42d09ea45006637d49429485d804047f
SHA256

2bf77e0a010282009e4e54945ac0f71d8be806b64c4a60b196283b97c345c322
SHA512

5aba7b37ca13cd2c708f8514616a7c86044678f1cbc31df2568a2a5779a22db4aa8d6ae68ef23b0f0af939da7b1361042873581ff02e9b75c11706a0f74ef0f7
SSDEEP

6144:E7AppnX5vnK6XAKju5qgbSWXVAOftKwO/U3bgxzuUuYrL52KurtKyPkarrCI:EEPJvnC5qghXVLsHs3EwbYB2D0+kM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-23_fd691e967cce0acee3460f6e39f7a071_icedid

Files

2024-04-23_fd691e967cce0acee3460f6e39f7a071_icedid
.exe windows:4 windows x86 arch:x86

86fecac01ef9b8afa56ebd41b1cae827

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\releaseversion\tata-old-ac279-ipv6\install\windows\bin\release\MonServiceUDisk.pdb

Imports

setupapi

CM_Request_Device_EjectW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
CM_Get_DevNode_Status
CM_Get_Parent
CM_Get_Device_ID_Size
CM_Get_Device_IDW
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
CM_Locate_DevNodeW
CM_Reenumerate_DevNode
SetupDiDestroyDeviceInfoList

kernel32

GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetCurrentThreadId
FreeResource
InterlockedIncrement
InterlockedDecrement
GetVersion
GetCurrentProcessId
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalGetAtomNameW
GetAtomNameW
lstrcmpA
lstrlenA
GetThreadLocale
FileTimeToSystemTime
SystemTimeToFileTime
CompareStringW
SetThreadPriority
ResumeThread
SuspendThread
GetModuleHandleA
InterlockedExchange
CompareStringA
GetLocaleInfoW
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
GetPrivateProfileIntW
WritePrivateProfileStringW
GetCurrentDirectoryW
SetErrorMode
MoveFileW
DeleteFileW
GetStringTypeExW
lstrcmpiW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
GetShortPathNameW
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesW
GetFileAttributesW
GetFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapReAlloc
HeapSize
ExitThread
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FatalAppExitA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
CreateFileA
SetEnvironmentVariableA
InterlockedCompareExchange
LoadLibraryA
lstrcmpW
GetModuleHandleW
GetVersionExA
WideCharToMultiByte
SetLastError
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GetPrivateProfileStringW
GetLogicalDriveStringsW
GetDriveTypeW
lstrlenW
CreateProcessW
ProcessIdToSessionId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
MultiByteToWideChar
CreateEventW
WaitForSingleObject
CreateThread
FormatMessageW
LocalFree
SetEvent
WaitForMultipleObjects
FindResourceW
LoadResource
LockResource
SizeofResource
HeapFree
GetProcessHeap
HeapAlloc
GetTickCount
GetModuleFileNameW
FindFirstFileW
FindClose
GetVersionExW
GetProcAddress
FreeLibrary
LoadLibraryW
Sleep
CreateFileW
DeviceIoControl
GetLocalTime
OutputDebugStringW
GetCurrentProcess
GetLastError
CloseHandle
GlobalFlags

user32

GetWindowDC
BeginPaint
EndPaint
PostQuitMessage
UnregisterClassW
SetCursor
ShowOwnedPopups
DeleteMenu
CharUpperW
DestroyIcon
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
GetDialogBaseUnits
UnregisterClassA
GetMessageW
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
GetDesktopWindow
ClientToScreen
ScrollWindowEx
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
IsWindowEnabled
LoadCursorW
GetDC
ReleaseDC
GetSysColorBrush
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GrayStringW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
EnableWindow
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetClientRect
GetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
RegisterDeviceNotificationW
UnregisterDeviceNotification
IsWindow
PostMessageW
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
SetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
DrawTextExW
DrawTextW
TabbedTextOutW
EnumWindows
FindWindowW
SendMessageW
GetClassNameW
IsWindowVisible
EnumChildWindows
FillRect
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
SetFocus
InflateRect
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
GetMenuState
GetMenuStringW
AppendMenuW
GetParent

advapi32

RegSetValueW
CreateProcessAsUserW
DuplicateTokenEx
SetTokenInformation
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
DeleteService
CreateServiceW
StartServiceW
ChangeServiceConfigW
OpenSCManagerW
EnumDependentServicesW
OpenServiceW
ControlService
QueryServiceStatusEx
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW

userenv

CreateEnvironmentBlock

shlwapi

PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

gdi32

ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
CreatePen
GetMapMode
PatBlt
DPtoLP
GetTextMetricsW
GetCurrentPositionEx
CombineRgn
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
GetStockObject
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
PolyBezierTo
PolylineTo
PolyDraw
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetTextExtentPoint32W
ExtTextOutW
BitBlt
CreateCompatibleDC
CreateFontIndirectW
DeleteObject
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateDCW
CopyMetaFileW
GetDeviceCaps
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
StartDocW
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
ArcTo

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

comdlg32

GetFileTitleW

shell32

ExtractIconW
SHGetFileInfoW

ole32

StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
StringFromGUID2
CLSIDFromString
CoTreatAsClass
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
OleDuplicateData
CoDisconnectObject
ReadClassStg
CoCreateInstance

oleaut32

VariantTimeToSystemTime
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SystemTimeToVariantTime
VarDateFromStr
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarBstrFromDate

Sections

.text
Size: 420KB - Virtual size: 419KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86fecac01ef9b8afa56ebd41b1cae827

Headers

File Characteristics

PDB Paths

Imports

setupapi

kernel32

user32

advapi32

userenv

shlwapi

gdi32

winspool.drv

comdlg32

shell32

ole32

oleaut32

Sections

.text Size: 420KB - Virtual size: 419KB

.rdata Size: 84KB - Virtual size: 81KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 4KB - Virtual size: 312B

.text
Size: 420KB - Virtual size: 419KB

.rdata
Size: 84KB - Virtual size: 81KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 4KB - Virtual size: 312B