2024-04-23_450876345dda79a14cdf9e26cfb3f7b7_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-23_450876345dda79a14cdf9e26cfb3f7b7_icedid
Size

3.1MB
MD5

450876345dda79a14cdf9e26cfb3f7b7
SHA1

6037e8362ba32d29a6d5ee6d208d789f24bada00
SHA256

3e3c0b31b615e92d5f44ae99ac6fbbce2e4f252222a6daab22d9ae8323a9a5f4
SHA512

46897b06ece3ad103de11ce49e976433049d8911f55a89772610d5c52b58029c2806eeb3be5f117d51ed5c2c867c45bfce56fd487e189a905cb72bc460df5f7b
SSDEEP

49152:zKBw9zxV14QibK96tM2FdkPWBUY2yKTetVV5MgkJ4mON5auOu+xt:zuUzzGQUK4Vm8UY2yK6VV5gJ4mONI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-23_450876345dda79a14cdf9e26cfb3f7b7_icedid

Files

2024-04-23_450876345dda79a14cdf9e26cfb3f7b7_icedid
.exe windows:4 windows x86 arch:x86

c573f8b6d61ef7a8fd94f29c471a7502

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
CM_Remove_SubTree
CM_Locate_DevNodeA
CM_Get_DevNode_Registry_PropertyA
CM_Get_Child
CM_Get_Sibling
CM_Get_Parent
CM_Request_Device_EjectW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList

newdev

UpdateDriverForPlugAndPlayDevicesA

dbghelp

MakeSureDirectoryPathExists

kernel32

GetCurrentThreadId
GetVersion
LockResource
LoadResource
FindResourceA
DuplicateHandle
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
GetThreadLocale
lstrcmpA
GlobalReAlloc
SuspendThread
lstrlenW
GetCurrentThread
GetFileTime
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SizeofResource
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
RaiseException
GetFileType
GetSystemTime
ExitProcess
TerminateProcess
ExitThread
GetStartupInfoA
SetStdHandle
GetACP
HeapSize
HeapReAlloc
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetHandleCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
GlobalGetAtomNameA
CompareStringW
SetEnvironmentVariableA
LocalUnlock
GetProfileStringA
MoveFileExA
LocalLock
OutputDebugStringA
GetProcAddress
GetModuleHandleA
Sleep
MulDiv
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
CloseHandle
SetCommState
GetCommState
SetCommTimeouts
GetCommTimeouts
CreateFileA
ReadFile
WriteFile
SetThreadPriority
CreateThread
CreateEventA
SetPriorityClass
GetCurrentProcess
WaitForSingleObject
SetEvent
ResetEvent
CopyFileA
GetFileSize
GetTickCount
CreateDirectoryA
GetFileAttributesA
GetVersionExA
FreeLibrary
LoadLibraryA
GetExitCodeProcess
WritePrivateProfileSectionA
GetPrivateProfileSectionA
SetLastError
lstrlenA
LocalAlloc
LocalFree
GetLastError
GetWindowsDirectoryA
DeleteFileA
SetFileAttributesA
FindClose
FindNextFileA
lstrcatA
FindFirstFileA
GetSystemDirectoryA
GetUserDefaultUILanguage
GlobalUnlock
GlobalLock
GlobalAlloc
DeviceIoControl
GetVolumeInformationA
GlobalSize
CompareStringA
GetLocalTime
PeekNamedPipe
CreateProcessA
CreatePipe
GetStdHandle
InitializeCriticalSection
GetModuleFileNameA
MapViewOfFile
CreateFileMappingA
GetComputerNameA
GetDriveTypeA
QueryDosDeviceA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
InterlockedDecrement
InterlockedIncrement
lstrcpynA
SetFilePointer
RemoveDirectoryA
FormatMessageA
GetPrivateProfileSectionNamesA
WritePrivateProfileStructA
GetTempPathA
ResumeThread
CreateMutexA
ReleaseMutex
GlobalFree
GetTimeZoneInformation
GetLogicalDrives
FileTimeToLocalFileTime
CreateFileW
GetFileAttributesExW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SetFilePointerEx
FindFirstFileW
GetFileAttributesW
FindNextFileW
MultiByteToWideChar
GetDriveTypeW
GetVolumeInformationW
WideCharToMultiByte
SetVolumeLabelW
FlushFileBuffers
EnterCriticalSection
LeaveCriticalSection
UnmapViewOfFile
TerminateThread
MoveFileA
GetCommandLineA

user32

GetSysColorBrush
DestroyMenu
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
IsClipboardFormatAvailable
GetMessageA
ValidateRect
GetDesktopWindow
LoadStringA
EndPaint
BeginPaint
GetWindowDC
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemInt
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScrollWindow
GetScrollInfo
GetScrollPos
GetTopWindow
IsChild
GetClassInfoA
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
SendMessageA
GetParent
EnableWindow
ReleaseCapture
CharLowerA
EnumWindows
FindWindowExA
SendMessageTimeoutA
CharUpperW
SetWindowPos
SetMenu
LoadMenuA
RemoveMenu
EnableMenuItem
LoadCursorA
RegisterClassA
CreateWindowExA
DestroyWindow
DefWindowProcA
ModifyMenuA
GetMenuItemID
GetMenuItemCount
ScreenToClient
GetMenuState
CharNextA
CopyAcceleratorTableA
PostThreadMessageA
WinHelpA
CheckMenuItem
GetMenu
GetSubMenu
IsIconic
DrawIcon
GetSystemMetrics
GetSystemMenu
AppendMenuA
MessageBoxA
GetMessagePos
LockWindowUpdate
PostMessageA
GetKeyState
GetSysColor
SetRect
DrawFocusRect
OffsetRect
WindowFromPoint
GetCursorPos
GetCapture
CheckDlgButton
ClientToScreen
GetNextDlgGroupItem
DispatchMessageA
TranslateMessage
PeekMessageA
RedrawWindow
SetWindowLongA
GetWindowLongA
GetKeyNameTextA
LoadImageA
IsWindow
InflateRect
LoadBitmapA
ReleaseDC
GetDC
GetClientRect
UpdateWindow
ShowWindow
FindWindowA
FillRect
DrawEdge
TabbedTextOutA
DrawTextA
GrayStringA
SetWindowRgn
GetWindowRect
InvalidateRect
SetTimer
KillTimer
CopyRect
LoadIconA
GetClassNameA
GetClipboardData
SetCursor
ShowCaret
SetCaretPos
CreateCaret
PtInRect
RegisterClipboardFormatA
SetScrollInfo
EnableScrollBar
DragDetect
SetScrollPos
DestroyCaret
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
EnumChildWindows
GetWindowTextA
IsWindowVisible
IsWindowEnabled
CharUpperA
WaitForInputIdle
GetWindow
MessageBeep
CallWindowProcA
wsprintfA
GetFocus
SetCapture

gdi32

GetTextMetricsA
Escape
CreateFontA
GetCharWidthA
SetBoundsRect
Polygon
GetClipBox
SetTextColor
SetBkColor
PatBlt
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetTextExtentPoint32A
MoveToEx
LineTo
CreateHatchBrush
CopyMetaFileA
GetTextColor
ExtTextOutA
TextOutA
GetPixel
StretchBlt
RoundRect
Rectangle
RectVisible
PtVisible
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreatePen
SelectPalette
GetTextExtentPointA
RealizePalette
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
CreateCompatibleBitmap
CreateFontIndirectA
CreateBitmap
CreateSolidBrush
GetStockObject
DeleteObject
GetObjectA
SelectClipRgn
CombineRgn
CreateRectRgn
IntersectClipRect
CreateDIBitmap
SelectObject

comdlg32

ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA
SetNamedSecurityInfoA
FreeSid
GetExplicitEntriesFromAclA
SetSecurityInfo
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
GetSecurityInfo
AllocateAndInitializeSid
SetEntriesInAclA

shell32

SHFileOperationA
ShellExecuteExA
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc

comctl32

_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

OleDuplicateData
CoTaskMemAlloc
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
OleGetClipboard
OleFlushClipboard
OleSetClipboard
ReleaseStgMedium
CoInitialize
CoCreateGuid
CoUninitialize
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoTaskMemFree
CoRevokeClassObject
CoGetClassObject
OleIsCurrentClipboard

olepro32

ord253

oleaut32

LoadTypeLi
VariantTimeToSystemTime
VarBstrFromDate
VarDateFromStr
SysAllocStringByteLen
SysAllocString
SysFreeString
SysAllocStringLen
VariantChangeType
VariantClear
VariantCopy
OleLoadPicturePath
SysStringLen

wsock32

gethostbyname
gethostname
WSACleanup
closesocket
connect
htons
ioctlsocket
socket
WSAStartup
recv
send
listen
htonl
ntohs
getservbyname
ntohl
accept
shutdown
getsockname
getpeername
bind
setsockopt
recvfrom
select
__WSAFDIsSet
sendto
inet_addr
WSASetLastError
WSAGetLastError
WSAAsyncSelect
inet_ntoa

odbc32

ord18
ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord19
ord46
ord12
ord68
ord43
ord41
ord2
ord1
ord50
ord45
ord51
ord15
ord9
ord14
ord3
ord11
ord13
ord61
ord16
ord5
ord10

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 460KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c573f8b6d61ef7a8fd94f29c471a7502

Headers

File Characteristics

Imports

setupapi

newdev

dbghelp

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

odbc32

iphlpapi

version

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 136KB - Virtual size: 133KB

.data Size: 460KB - Virtual size: 1.4MB

.rsrc Size: 316KB - Virtual size: 316KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 136KB - Virtual size: 133KB

.data
Size: 460KB - Virtual size: 1.4MB

.rsrc
Size: 316KB - Virtual size: 316KB