2024-05-27_5abf1100861466f670489a7a0ff87d17_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-05-27_5abf1100861466f670489a7a0ff87d17_icedid
Size

352KB
MD5

5abf1100861466f670489a7a0ff87d17
SHA1

799ae1ea300e22450cd49729aa47d84fa023f099
SHA256

af6741fcfb4c465120d50090557f55b16cd25ab9e613c90a06170bcd5f6fae12
SHA512

13b13e63d3cd67a92ff57333914f4ae5f0324a13c965a225c307746ee2ad0b2e67d758daa918afc568a16a65f252f3acd69a68a90cc05f1db637bfa591f8ec6f
SSDEEP

6144:s6xAkC4dbULRfGbVmcjBa+u6Q4s+iGeWi:s6Q4xULR4YrBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-27_5abf1100861466f670489a7a0ff87d17_icedid

Files

2024-05-27_5abf1100861466f670489a7a0ff87d17_icedid
.exe windows:4 windows x86 arch:x86

5774d2f0073a3e02ef2829ea80a2658e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
lstrcmpiA
MulDiv
GetVersion
Sleep
MultiByteToWideChar
GetLastError
lstrlenA
GetFileAttributesA
CloseHandle
lstrcatA
lstrcpyA
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
WinExec
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetExitCodeThread
LeaveCriticalSection
SleepEx
LocalAlloc
LocalFree
GlobalHandle
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpynA
FormatMessageA
SetLastError
RaiseException
GlobalAddAtomA
GlobalGetAtomNameA
FreeResource
GetModuleHandleA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GetCurrentThreadId
InterlockedDecrement
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEvent
SuspendThread
CreateEventA
LCMapStringW
EnumResourceLanguagesA
ConvertDefaultLocale
GetModuleFileNameA
lstrcmpA
GetCurrentThread
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
InterlockedIncrement
GlobalReAlloc
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
WritePrivateProfileStringA
SetErrorMode
RtlUnwind
ExitProcess
TerminateProcess
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
ExitThread
CreateThread
HeapSize
GetStringTypeA
GetStringTypeW
LCMapStringA
InterlockedExchange

user32

GetMenuItemInfoA
PostQuitMessage
ShowOwnedPopups
GetSysColorBrush
GetDCEx
LockWindowUpdate
SetParent
SetMenuItemBitmaps
ModifyMenuA
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
IsChild
GetWindowTextLengthA
GetWindowTextA
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
EndPaint
SetScrollInfo
SetWindowPlacement
DefWindowProcA
CallWindowProcA
GetWindowPlacement
RegisterWindowMessageA
ValidateRect
GetClassNameA
SetWindowPos
WinHelpA
SetFocus
GetActiveWindow
EqualRect
GetDlgItem
SetWindowLongA
GetKeyState
GetDlgCtrlID
UnpackDDElParam
ReuseDDElParam
GetClassInfoA
PeekMessageA
GetCapture
LoadAcceleratorsA
SetActiveWindow
IsIconic
InsertMenuItemA
CreatePopupMenu
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
GetLastActivePopup
BringWindowToTop
ShowWindow
GetWindowLongA
GetDesktopWindow
GetWindow
IsWindowEnabled
UnregisterClassA
GetMenuState
GetMenuItemID
WindowFromPoint
GetMenuItemCount
ShowScrollBar
KillTimer
SetTimer
MessageBeep
ReleaseCapture
GetParent
SetCapture
ReleaseDC
GetDC
InflateRect
SetCursor
MessageBoxA
wsprintfA
LoadImageA
GetCursorPos
GetSystemMetrics
PostMessageA
LoadMenuA
AppendMenuA
SystemParametersInfoA
LoadIconA
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetRect
GetMessageA
GetScrollInfo
TranslateMessage
RegisterClassA
LoadCursorA
GetSysColor
TranslateAcceleratorA
SendMessageA
EnableWindow
GetForegroundWindow
IsWindowVisible
InvalidateRect
UpdateWindow
GetClientRect
GetWindowRect
IsZoomed
SetMenu
GetMenu
DestroyMenu
ClientToScreen
RemoveMenu
GetSubMenu
EnableMenuItem
PtInRect
IsWindow
FillRect
GetFocus

gdi32

CreateHalftonePalette
GetPaletteEntries
CombineRgn
SetRectRgn
CreateSolidBrush
CreatePen
SelectPalette
CreatePatternBrush
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
CreateRectRgn
SelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetTextMetricsA
GetBkColor
CreateBitmap
PatBlt
CreateRectRgnIndirect
SetBkColor
SetTextColor
GetClipBox
CreateFontA
GetCharWidthA
CreateCompatibleBitmap
GetDeviceCaps
GetViewportOrgEx
SetStretchBltMode
StretchDIBits
GetTextExtentPoint32A
CreateFontIndirectA
GetStockObject
DeleteObject
GetObjectA
GetDIBColorTable
DeleteDC
BitBlt
RealizePalette
SelectObject
CreateCompatibleDC
CreatePalette

comdlg32

GetSaveFileNameA
GetOpenFileNameA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegDeleteKeyA
RegEnumKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueA
RegCloseKey
RegQueryValueExA

shell32

DragQueryFileA
DragFinish
ShellExecuteA

comctl32

ImageList_GetImageInfo
ord17
ImageList_Destroy
ImageList_Draw

winmm

waveInUnprepareHeader
waveOutWrite
PlaySoundA
waveOutPause
waveOutRestart
waveInStart
waveOutReset
waveInStop
waveOutClose
waveInClose
waveOutOpen
sndPlaySoundA
waveInOpen
waveOutUnprepareHeader
waveOutGetPosition
timeKillEvent
timeSetEvent
timeGetTime
mixerGetNumDevs
mixerOpen
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails
mixerGetDevCapsA
mixerGetLineInfoA
mixerClose
waveInGetPosition
waveInPrepareHeader
waveOutPrepareHeader

avifil32

AVIStreamTimeToSample
AVIFileExit
AVIStreamFindSample
AVIStreamGetFrameClose
AVIStreamRead
AVIStreamRelease
AVIFileRelease
AVIStreamStart
AVIStreamGetFrame
AVIStreamReadFormat
AVIStreamInfoA
AVIStreamLength
AVIStreamSampleToTime
AVIFileGetStream
AVIFileInfoA
AVIFileOpenA
AVIStreamGetFrameOpen
AVIFileInit

msvfw32

ICClose
ICOpen

Sections

.text
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5774d2f0073a3e02ef2829ea80a2658e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

winmm

avifil32

msvfw32

Sections

.text Size: 212KB - Virtual size: 209KB

.rdata Size: 56KB - Virtual size: 52KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 68KB - Virtual size: 96KB

.text
Size: 212KB - Virtual size: 209KB

.rdata
Size: 56KB - Virtual size: 52KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 68KB - Virtual size: 96KB