2024-05-25_7a8ae4294cf2d6f9c2b1f958155e8e0c_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-05-25_7a8ae4294cf2d6f9c2b1f958155e8e0c_icedid
Size

304KB
MD5

7a8ae4294cf2d6f9c2b1f958155e8e0c
SHA1

83ba8c49de4478cd013aebb37e68eb4a61447257
SHA256

c3e189c9e0eccb5c973e6b2e37feebc70e65b6aa7f6e92febe94b7f4ddc01db0
SHA512

bf4f4c3a4f86e241e1deaf23158642d0431f8a1a2f9f1b352608eb37b0b4f73621fb0f178fe635f0c7e2a51f314406692feef6e40361a5ff9d6b7b981ae9cfed
SSDEEP

6144:IrOy6ow9NQnkGNbcncWowjLqY7jU40xgVwi:IrOYnkGGtLqY7jU4xw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-25_7a8ae4294cf2d6f9c2b1f958155e8e0c_icedid

Files

2024-05-25_7a8ae4294cf2d6f9c2b1f958155e8e0c_icedid
.exe windows:4 windows x86 arch:x86

f51cb06b6e210226739d9b0d954b4a40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
TerminateProcess
HeapSize
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
VirtualQuery
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
GetLocaleInfoW
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
RtlUnwind
SetErrorMode
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
DeleteCriticalSection
InitializeCriticalSection
RaiseException
InterlockedDecrement
CloseHandle
GetCurrentThread
lstrcmpA
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
SetLastError
MulDiv
GlobalAlloc
FormatMessageA
LocalFree
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
lstrcpynA
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetWindowsDirectoryA
WinExec
lstrlenA
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
LoadLibraryExW
GetModuleHandleW
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetProcAddress
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
QueryPerformanceCounter
InterlockedExchange

user32

GetMenuCheckMarkDimensions
LoadBitmapA
ShowWindow
SetWindowTextA
IsDialogMessageA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MapWindowPoints
ScrollWindow
MessageBoxA
GetKeyState
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
CopyRect
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
SetWindowLongA
CopyIcon
DestroyCursor
MessageBeep
GetMessagePos
GetSysColorBrush
WindowFromPoint
EndPaint
LoadCursorA
GetParent
KillTimer
SetTimer
InvalidateRect
ScreenToClient
InflateRect
PtInRect
SetCursor
GetSysColor
RedrawWindow
GetDC
DrawTextA
IsWindow
GetSystemMetrics
LoadIconA
GetClientRect
GetWindowRect
IsIconic
GetSystemMenu
PostMessageA
SendMessageA
AppendMenuA
DrawIcon
DrawFrameControl
ReleaseDC
EnableWindow
GetDlgCtrlID
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
DestroyMenu
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
wsprintfA
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
WinHelpA

gdi32

MoveToEx
PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
LineTo
CreatePen
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
SetTextColor
GetClipBox
GetStockObject
GetObjectA
CreateFontIndirectA
GetTextExtentPoint32A
CreateCompatibleBitmap
DeleteObject
SelectObject
CreateCompatibleDC
SetBkColor
ExtTextOutA
DeleteDC
StretchBlt

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

comctl32

ImageList_Add
ImageList_Create
ImageList_GetImageCount
ord17
ImageList_Destroy
ImageList_DrawIndirect

shlwapi

PathFindFileNameA
PathFindExtensionA

oleaut32

VariantInit
VariantChangeType
VariantClear

Sections

.text
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f51cb06b6e210226739d9b0d954b4a40

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Sections

.text Size: 164KB - Virtual size: 160KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 88KB - Virtual size: 85KB

.text
Size: 164KB - Virtual size: 160KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 88KB - Virtual size: 85KB