2024-04-29_8e88107a8a96e0cc7b78a69a5efa175d_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-04-29_8e88107a8a96e0cc7b78a69a5efa175d_icedid
Size

504KB
MD5

8e88107a8a96e0cc7b78a69a5efa175d
SHA1

de6c01b18e00296cb094f0cd6ef74fedb894c908
SHA256

be9aa6bdc1bb3872084a17b357f62c55f911a9ebd323ae48601aab300c3d85ba
SHA512

f8ba65c1c8b56018dde1f503e3a9cda808723cb1bb2f1b99673d9adb595d14e7135fff42c9ff6c47f030525cbce746dde6e1b8583b4b4d768a5306cb0a39dff5
SSDEEP

6144:4f+eWWf8BeqVzyd6tVEtIl1D9CAdJF9cI8pwtJI:4GexfYeqVa6Xr9bJF9cI8p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-29_8e88107a8a96e0cc7b78a69a5efa175d_icedid

Files

2024-04-29_8e88107a8a96e0cc7b78a69a5efa175d_icedid
.exe windows:4 windows x86 arch:x86

f7ad9f3cde85cbfd1504c59c19db825f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
CreateFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
HeapReAlloc
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
SetStdHandle
GetFileType
SetEndOfFile
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
RaiseException
GlobalFlags
InterlockedIncrement
WritePrivateProfileStringA
InterlockedDecrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
FreeResource
SetLastError
GlobalFree
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
GlobalAddAtomA
GetCurrentThreadId
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
EnterCriticalSection
LeaveCriticalSection
GetCurrentThread
WaitForSingleObject
CompareStringW
CompareStringA
lstrcmpiA
GetVersion
MulDiv
MultiByteToWideChar
GetBinaryTypeA
CreateProcessA
FreeLibrary
WaitForDebugEvent
ContinueDebugEvent
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
GetShortPathNameA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCurrentDirectoryA
InitializeCriticalSection
CreateThread
DeleteCriticalSection
TerminateThread
CloseHandle
lstrlenA
GetPrivateProfileStringA
GetUserDefaultUILanguage
CreateMutexA
HeapSize
GetLastError

user32

GetSysColorBrush
LoadCursorA
DestroyMenu
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetWindowTextA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetMenu
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
wsprintfA
SetWindowLongA
SetWindowPos
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetSysColor
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetMenuItemBitmaps
GetFocus
DestroyCursor
SetRect
SendMessageA
PostMessageA
GetClientRect
GetDC
ReleaseDC
UpdateWindow
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
ShowWindow
GetParent
GetWindowLongA
MoveWindow
SetWindowTextA
IsDialogMessageA
CallWindowProcA
InvalidateRect
EnableWindow
SystemParametersInfoA
AdjustWindowRectEx
GetIconInfo
LoadCursorFromFileA
MessageBoxA
GetDesktopWindow
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
DispatchMessageA
WaitForInputIdle
IsRectEmpty
OffsetRect
EqualRect
IntersectRect
LoadBitmapA
GetLastActivePopup
IsWindowEnabled
SetCursor
PostQuitMessage
IsWindow
IsIconic
DrawIconEx
CharUpperA
SetActiveWindow

gdi32

DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextMetricsA
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetStockObject
BitBlt
GetDeviceCaps
CreateCompatibleDC
CreateICA
GetObjectA
GetTextExtentPoint32A

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA

comctl32

ord17

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 336KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f7ad9f3cde85cbfd1504c59c19db825f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oleaut32

Sections

.text Size: 124KB - Virtual size: 122KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 8KB - Virtual size: 20KB

.rsrc Size: 336KB - Virtual size: 333KB

.text
Size: 124KB - Virtual size: 122KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 8KB - Virtual size: 20KB

.rsrc
Size: 336KB - Virtual size: 333KB