2024-05-11_c447ca5689be9ddc28546b8169e64dd5_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-11_c447ca5689be9ddc28546b8169e64dd5_icedid
Size

723KB
MD5

c447ca5689be9ddc28546b8169e64dd5
SHA1

da379990871b1b9a2f7108875775414d77349c73
SHA256

227453d1d539433dba7b0713b24688c58b50b2670553a28051471371d8a7198d
SHA512

3404014c268bcc4ee5ff862b0ab75c720ecae3789b93bf8f85be3f78f6fe4cdab53bbdc3e61b8aa9c9baab5cda350892d5ae78c3396d36249863f357815de399
SSDEEP

12288:gDAfVF42OY4GkT9P8eGq75AM+oTom/wHYrh/xOBs2urGsOYySM2841TNXKvr0:gmVZHOjOK24j1M284L6D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-11_c447ca5689be9ddc28546b8169e64dd5_icedid

Files

2024-05-11_c447ca5689be9ddc28546b8169e64dd5_icedid
.exe windows:4 windows x86 arch:x86

6828b97031d536eddc6d8f3cd1f77ef9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiCallClassInstaller
SetupDiSetClassInstallParamsW
SetupDiOpenClassRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

rasapi32

RasHangUpW
RasGetConnectStatusW
RasEnumConnectionsW

rpcrt4

UuidToStringW
RpcStringFreeW
UuidCreate

winmm

mixerClose
PlaySoundW
mixerGetNumDevs
mixerOpen
mixerGetLineInfoW
mixerGetLineControlsW
mixerGetControlDetailsW
mixerSetControlDetails
mciSendCommandW

psapi

GetModuleBaseNameW
GetModuleFileNameExW
EnumProcessModules
EnumProcesses

kernel32

FlushFileBuffers
LockFile
UnlockFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
FindResourceExW
FileTimeToLocalFileTime
SetErrorMode
GetFileAttributesW
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
ExitThread
CreateThread
ExitProcess
RtlUnwind
HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
TerminateProcess
HeapSize
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
WritePrivateProfileStringW
GetPrivateProfileIntW
FileTimeToSystemTime
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
GlobalFlags
lstrcmpiW
GetProfileIntW
VirtualProtect
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
SetLastError
lstrcpyW
GlobalSize
FormatMessageW
lstrcpynW
InterlockedDecrement
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
GetModuleHandleA
LoadLibraryA
lstrcatW
GetVersionExA
GlobalFree
FreeResource
SetEndOfFile
MoveFileExW
LocalFree
LocalAlloc
lstrcmpW
FindNextFileW
GetPrivateProfileStringW
ExpandEnvironmentStringsW
LoadLibraryW
GetWindowsDirectoryW
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
WaitForSingleObject
CopyFileW
CompareFileTime
GetFileTime
GetTickCount
SearchPathW
LoadLibraryExW
GetCurrentDirectoryW
GetModuleFileNameW
CreateEventW
GetProcAddress
FreeLibrary
GetModuleHandleW
CreateMutexW
CreateProcessW
Sleep
GetCurrentThreadId
SetEvent
RaiseException
DeleteCriticalSection
InitializeCriticalSection
FindClose
FindFirstFileW
SetCurrentDirectoryW
DeleteFileW
SetFilePointer
WriteFile
ReadFile
GetFileSize
CreateFileW
CloseHandle
OpenProcess
WideCharToMultiByte
lstrlenW
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetStartupInfoW

user32

RegisterClipboardFormatW
PostThreadMessageW
GetMessageW
TranslateMessage
ValidateRect
SetWindowContextHelpId
GetMenuStringW
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
GetMenuCheckMarkDimensions
LoadBitmapW
RegisterWindowMessageW
WinHelpW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
GetWindowTextLengthW
GetWindowTextW
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageW
MapWindowPoints
GetKeyState
IsWindowVisible
UpdateWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
EqualRect
GetClassInfoW
RegisterClassW
SetWindowPlacement
CallWindowProcW
SystemParametersInfoA
GetWindowPlacement
CopyRect
GetWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
CreateWindowExW
GetNextDlgGroupItem
ClientToScreen
GetIconInfo
LoadImageW
InflateRect
OffsetRect
DrawEdge
DrawStateW
WindowFromPoint
GetCapture
DestroyIcon
SetRectEmpty
GetSysColor
IntersectRect
GetMessagePos
CloseWindow
SetFocus
ScreenToClient
InsertMenuW
MapDialogRect
SetRect
SetCursor
LoadCursorW
SetWindowLongW
SetCapture
RedrawWindow
ReleaseCapture
PtInRect
ReleaseDC
FillRect
GetClientRect
GetDesktopWindow
GetDC
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
IsWindow
wsprintfW
GetDlgCtrlID
PostQuitMessage
DestroyMenu
TrackPopupMenu
GetCursorPos
AppendMenuW
CreatePopupMenu
GetLastInputInfo
PostMessageW
CheckMenuItem
SetWindowPos
SetMenuItemInfoW
EnableMenuItem
DeleteMenu
SetClassLongW
CharUpperW
MessageBeep
InvalidateRgn
CopyAcceleratorTableW
IsRectEmpty
CharNextW
GetSysColorBrush
EndPaint
LoadIconW
SetTimer
GetSystemMetrics
KillTimer
GetAsyncKeyState
SetForegroundWindow
ShowWindow
IsIconic
GetLastActivePopup
AttachThreadInput
GetForegroundWindow
SystemParametersInfoW
FindWindowW
keybd_event
SetCursorPos
GetWindowRect
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
DefWindowProcW
UnregisterClassW
GetWindowThreadProcessId
GetMenu
GetWindowLongW
GetParent
MessageBoxW
EnableWindow
SendMessageW
GetFocus
InvalidateRect
IsWindowEnabled

gdi32

GetMapMode
GetBkColor
GetTextColor
GetRgnBox
EnumFontFamiliesExW
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
CopyMetaFileW
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
DeleteObject
SetDIBitsToDevice
SetStretchBltMode
GetStockObject
CreateFontIndirectW
GetObjectW
GetTextMetricsW
GetTextExtentPoint32W
GetCharWidthW
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontW
GetDeviceCaps
CreateSolidBrush

comdlg32

GetFileTitleW
GetOpenFileNameW
ChooseColorW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegDeleteKeyW
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptGetKeyParam
CryptSetKeyParam
CryptDestroyKey
CryptReleaseContext
CryptEncrypt
CryptDecrypt
CryptEnumProvidersW
CryptGetProvParam
RegCloseKey
RegOpenKeyExW
RegQueryValueW
RegEnumKeyW
CryptAcquireContextW
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyW
RegSetValueExW
RegQueryValueExW

shell32

SHGetFolderLocation
SHBrowseForFolderW
SHGetPathFromIDListW
Shell_NotifyIconW
ShellExecuteW
SHGetMalloc

comctl32

_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_LoadImageW
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW

shlwapi

PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
AssocQueryStringW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoTaskMemFree
CoInitializeEx
CoUninitialize
OleDuplicateData
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
StgOpenStorageOnILockBytes
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
CLSIDFromString
CLSIDFromProgID
ReleaseStgMedium
CoTaskMemAlloc

oleaut32

SysFreeString
SafeArrayDestroy
VariantCopy
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
OleCreateFontIndirect
SystemTimeToVariantTime
SysAllocString

urlmon

HlinkSimpleNavigateToString

Sections

.text
Size: 414KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6828b97031d536eddc6d8f3cd1f77ef9

Headers

File Characteristics

Imports

setupapi

version

rasapi32

rpcrt4

winmm

psapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

Sections

.text Size: 414KB - Virtual size: 413KB

.rdata Size: 121KB - Virtual size: 120KB

.data Size: 28KB - Virtual size: 53KB

.rsrc Size: 159KB - Virtual size: 158KB

.text
Size: 414KB - Virtual size: 413KB

.rdata
Size: 121KB - Virtual size: 120KB

.data
Size: 28KB - Virtual size: 53KB

.rsrc
Size: 159KB - Virtual size: 158KB