2024-05-25_52c1835054181a733db8e6f926a89719_icedid_ramnit

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-25_52c1835054181a733db8e6f926a89719_icedid_ramnit
Size

3.5MB
MD5

52c1835054181a733db8e6f926a89719
SHA1

1a9cae2cc781babb33bee42e5f9ad67a3365b2b0
SHA256

4fe5be9e62e84c2f37b388129e1c16846d6cd040623a1a24c418a726fb7eb266
SHA512

6ee1b5090e8395cb77546245eb0cf48c689bdc25b12388c86244b5d1bb121b04e9fdcd5ac887ea6c7b64e66239b66852f2e72c6f2a4ac53f5991a2638a9aa87f
SSDEEP

49152:dM/3MaWmMmlKssDBOMnJOnY19ia8czfQslMhHAMbUCnewg3rZgUr7bj6GqMscukc:S/rWHtOMmaLfjl+UCs3rZZnjs9cnC16

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-25_52c1835054181a733db8e6f926a89719_icedid_ramnit

Files

2024-05-25_52c1835054181a733db8e6f926a89719_icedid_ramnit
.exe windows:4 windows x86 arch:x86

ba638f6c995350de4cf01bd15debd8cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

nslms324

close_key
query_key
open_first_key

kernel32

SetStdHandle
GetStringTypeW
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetCurrentProcessId
IsValidLocale
VirtualAlloc
SetUnhandledExceptionFilter
SetHandleCount
SetEnvironmentVariableA
GetProfileStringA
GetProfileIntA
VirtualFree
GetVersionExA
GetFileType
GetStdHandle
IsBadCodePtr
GetUserDefaultLCID
GetLocaleInfoW
GetFullPathNameA
GetTempFileNameA
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetThreadPriority
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalAlloc
lstrcmpA
GetCurrentThread
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetCurrentThreadId
lstrcmpiA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
lstrcatA
GlobalLock
lstrcpynA
GlobalUnlock
GlobalGetAtomNameA
GlobalAddAtomA
FreeEnvironmentStringsA
WritePrivateProfileStringA
GetFileAttributesA
CompareStringW
GetVersion
lstrcpyA
lstrlenA
CompareStringA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetDriveTypeA
GetSystemTime
GetTimeZoneInformation
GetACP
TerminateProcess
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
InterlockedExchange
CreateProcessA
OutputDebugStringA
Sleep
GetThreadPriority
SetPriorityClass
GetPriorityClass
IsBadReadPtr
IsBadWritePtr
GetEnvironmentVariableA
DeviceIoControl
GetLocalTime
FileTimeToDosDateTime
GetComputerNameA
HeapWalk
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetSystemInfo
HeapCreate
GetTempPathA
RemoveDirectoryA
FindNextFileA
CreateDirectoryA
SetCurrentDirectoryA
CopyFileA
GlobalSize
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
SetErrorMode
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetThreadLocale
SizeofResource
FormatMessageA
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
SetLastError
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GlobalFlags
GetProcessVersion
MulDiv
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetPrivateProfileStringA
GetPrivateProfileIntA
EnumSystemLocalesA

user32

ValidateRect
GetClassNameA
GetSysColorBrush
PtInRect
FillRect
SetRect
GetDC
ReleaseDC
LoadCursorA
DestroyCursor
MapDialogRect
SetWindowContextHelpId
GetMessageA
LoadStringA
ClientToScreen
GetCursorPos
ShowOwnedPopups
EndDialog
CreateDialogIndirectParamA
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
TranslateMessage
GetNextDlgTabItem
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
DispatchMessageA
ScreenToClient
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
MoveWindow
GetWindowDC
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
DestroyWindow
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GrayStringA
GetSystemMenu
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
DeleteMenu
InsertMenuA
DestroyIcon
GetSystemMetrics
GetLastActivePopup
IsWindowVisible
IsIconic
GetFocus
EqualRect
CopyRect
GetDlgItem
InvalidateRect
GetKeyState
GetDlgCtrlID
UnpackDDElParam
ReuseDDElParam
SetActiveWindow
WinHelpA
SetMenu
LoadIconA
GetClassInfoA
LoadMenuA
DestroyMenu
SetFocus
ShowWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
SetCursor
PeekMessageA
PostMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
GetActiveWindow
wsprintfA
BeginPaint
EndPaint
TabbedTextOutA
RegisterClassA
TrackPopupMenu
GetMenuStringA
GetParent
GetMenuItemID
AdjustWindowRectEx
RedrawWindow
SetWindowPos
GetClientRect
GetWindowLongA
SetWindowLongA
IsWindow
DefMDIChildProcA
DrawMenuBar
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
CreateWindowExA
BringWindowToTop
GetMenu
GetMenuItemCount
GetSubMenu
SendMessageA
EnableWindow
UpdateWindow
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
CharUpperA
FindWindowA
IsRectEmpty
GetTabbedTextExtentA
InflateRect
RegisterClipboardFormatA
SetTimer
KillTimer
WindowFromPoint
DrawEdge
IsMenu
GetMenuItemInfoA
SetMenuItemInfoA
CreatePopupMenu
GetMenuDefaultItem
SetMenuDefaultItem
DrawFrameControl
DrawIconEx
IsZoomed
LoadImageA
InvertRect
SetParent
SetCapture
LockWindowUpdate
GetDCEx
PostThreadMessageA
AppendMenuA
SetPropA
UnhookWindowsHookEx
CheckMenuItem
DrawTextA
DrawFocusRect
ExcludeUpdateRgn
DefDlgProcA
OpenClipboard
EmptyClipboard
IsWindowUnicode
ShowCaret
HideCaret
GetInputState
EnumClipboardFormats
GetClipboardData
SetClipboardData
CloseClipboard
UnregisterClassA

gdi32

SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
GetStockObject
Rectangle
DPtoLP
CreatePen
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
StartDocA
SetAbortProc
CreateBitmap
CreateDCA
DeleteDC
CreateRectRgnIndirect
DeleteObject
SaveDC
RestoreDC
SelectObject
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
GetObjectA
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
GetTextColor
GetBkColor
LPtoDP
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetCharWidthA
GetWindowOrgEx
GetMapMode
SetRectRgn
CombineRgn
BitBlt
CreateCompatibleDC
GetRgnBox
PtInRegion
CreatePolygonRgn
FillRgn
CreateCompatibleBitmap
RectInRegion
StretchBlt
CreateDIBitmap
GetDIBColorTable
GetDIBits
GetEnhMetaFileA
PlayEnhMetaFile
CloseEnhMetaFile
DeleteEnhMetaFile
StretchDIBits
GetTextExtentPointA
PatBlt

comdlg32

CommDlgExtendedError
GetFileTitleA
PrintDlgA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegSetValueA

shell32

SHGetFileInfoA
ExtractIconA
DragAcceptFiles
DragFinish
DragQueryFileA

comctl32

ord8
ImageList_Destroy
ord17

oledlg

ord8

ole32

CoTaskMemFree
CreateILockBytesOnHGlobal
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
StringFromCLSID
CoCreateGuid
CoInitialize

olepro32

ord253

oleaut32

SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
SysAllocStringByteLen
SysStringLen

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ba638f6c995350de4cf01bd15debd8cc

Headers

File Characteristics

Imports

nslms324

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 2.9MB - Virtual size: 2.9MB

.rdata Size: 288KB - Virtual size: 284KB

.data Size: 124KB - Virtual size: 150KB

.rsrc Size: 64KB - Virtual size: 61KB

.text Size: 112KB - Virtual size: 112KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 288KB - Virtual size: 284KB

.data
Size: 124KB - Virtual size: 150KB

.rsrc
Size: 64KB - Virtual size: 61KB

.text
Size: 112KB - Virtual size: 112KB