2024-05-01_e70df03c4f195323dc84fa52eb6c7679_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-01_e70df03c4f195323dc84fa52eb6c7679_icedid
Size

420KB
MD5

e70df03c4f195323dc84fa52eb6c7679
SHA1

0af5ad5e05529e2db3f216112a25e99101bb1329
SHA256

df4c646a25f2a16447b7be407a78d583008b4d8f03ad202855ba9e2b6d63090c
SHA512

f70a1e4a9fdb8efead20becc636af824369883a18201bed7dd9a92b5cfb62bc3d2230169e9a9fe9fd514405b9c009d10dea1d4482913dfd4d05f12482b4a1d62
SSDEEP

6144:zBQ9APwPLlkFTHrb+ue05DC4nm7IGMCnchbpD:1fwxkFrb+kDmRn6N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-01_e70df03c4f195323dc84fa52eb6c7679_icedid

Files

2024-05-01_e70df03c4f195323dc84fa52eb6c7679_icedid
.exe windows:4 windows x86 arch:x86

eabfac213c809b76bdfebe8df2b6538c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
LoadLibraryA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
CompareStringA
GetUserDefaultLangID
FreeLibrary
ReleaseMutex
MapViewOfFile
IsBadReadPtr
UnmapViewOfFile
CloseHandle
IsBadStringPtrA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetLastError
LoadResource
LockResource
SizeofResource
SetStdHandle
GetStringTypeA
LCMapStringA
IsBadCodePtr
GetOEMCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
HeapSize
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
TerminateProcess
HeapReAlloc
HeapAlloc
ExitProcess
HeapFree
RtlUnwind
SetErrorMode
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
InterlockedIncrement
GlobalFlags
TlsFree
MulDiv
GlobalUnlock
GlobalLock
GetVersionExA
lstrlenA
GlobalDeleteAtom
GetCurrentThreadId
FreeResource
LocalFree
GlobalAlloc
GlobalFree
InterlockedDecrement
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
lstrcmpA
GetCurrentThread
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc

advapi32

RegCloseKey

user32

ClientToScreen
ScreenToClient
GetDC
ReleaseDC
SetTimer
GetClientRect
SetCapture
GetSysColor
ReleaseCapture
IsWindow
SetRectEmpty
GetWindowRect
GetWindowRgn
SetWindowRgn
OffsetRect
PtInRect
SetRect
GetParent
KillTimer
BeginPaint
EndPaint
GetWindowPlacement
SystemParametersInfoA
AdjustWindowRectEx
GetMenuItemCount
GetMenuItemID
GetMenu
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
SendDlgItemMessageA
CallNextHookEx
GetCapture
MoveWindow
IsWindowEnabled
GetMenuCheckMarkDimensions
EnableMenuItem
GetMenuState
SetMenuItemBitmaps
EndDialog
GetNextDlgTabItem
GetActiveWindow
GetDesktopWindow
SetCursor
ValidateRect
CreatePopupMenu
GetCursorPos
TrackPopupMenu
DestroyMenu
BringWindowToTop
DestroyIcon
IsIconic
GetSubMenu
CheckMenuItem
DrawIcon
PostQuitMessage
SetForegroundWindow
IsWindowVisible
SetFocus
GetKeyState
GetSystemMetrics
GetFocus
GetWindowDC
CopyRect
TranslateMessage
CopyImage
GetWindow
ShowWindow
GetDlgItem
DestroyWindow
SetWindowPos
GetDlgCtrlID
GetSysColorBrush
RedrawWindow
InvalidateRect
UpdateWindow

gdi32

CreateSolidBrush
SetTextColor
SetBkMode
CreateDIBitmap
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetTextAlign
MoveToEx
LineTo
ExcludeClipRect
GetClipBox
SetMapMode
CreatePen
CreateRectRgn
CombineRgn
BitBlt
GetPixel
DeleteObject
PtInRegion
SelectObject
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
GetMapMode
PtVisible
RectVisible
Escape
RestoreDC
DeleteDC
SetBkColor
SaveDC
CreatePolygonRgn
Polygon
Rectangle
OffsetRgn

shell32

DoEnvironmentSubstW

sx32w

RNBOsproRead
RNBOsproFindFirstUnit
RNBOsproInitialize
RNBOsproFormatPacket

comctl32

ord17
ImageList_Draw
_TrackMouseEvent
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Destroy

shlwapi

PathFindExtensionW
PathFindFileNameW

ole32

CLSIDFromProgID
CoInitialize
CoCreateInstance
StringFromCLSID
CoUninitialize
CoTaskMemFree

oleaut32

VariantInit
VariantChangeType
VariantClear

winspool.drv

ClosePrinter

Sections

.text
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eabfac213c809b76bdfebe8df2b6538c

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

shell32

sx32w

comctl32

shlwapi

ole32

oleaut32

winspool.drv

Sections

.text Size: 180KB - Virtual size: 176KB

.rdata Size: 48KB - Virtual size: 45KB

.data Size: 8KB - Virtual size: 23KB

.rsrc Size: 180KB - Virtual size: 176KB

.text
Size: 180KB - Virtual size: 176KB

.rdata
Size: 48KB - Virtual size: 45KB

.data
Size: 8KB - Virtual size: 23KB

.rsrc
Size: 180KB - Virtual size: 176KB