2024-05-28_bbbc581f281798e74c73f56e1ef33be2_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-28_bbbc581f281798e74c73f56e1ef33be2_icedid
Size

227KB
MD5

bbbc581f281798e74c73f56e1ef33be2
SHA1

99bdb4a4442ca7bdc8dbd76ccb3265718c23e084
SHA256

7874d4ac0bbda449e3751d4059f3f073eb11de2b6f8f50f32d7d1808ea110b37
SHA512

6ac299ebab748c8a75bfc66a07aa83dd75dce38ae332a26f97108b2265e6137bf1042c611e92015c878b6632be05c506d167baece6ef7253632ffc01933707d0
SSDEEP

3072:MErdk/ZR+mIHWRbwTVN+c03GqptnPXT5VVBPt5pyeF1UPaS6cziLkD:MEm/z+CRET/IHLhBUeF18D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-28_bbbc581f281798e74c73f56e1ef33be2_icedid

Files

2024-05-28_bbbc581f281798e74c73f56e1ef33be2_icedid
.exe windows:4 windows x86 arch:x86

b4be8217e53b8c2dee610e62595eeb35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\VISA\VISA\installers\iviVisaComi\trunk\0.9\objects\IVI_VISA_COM_CleanupUtility\win32U\i386\msvc71\release\IVI_VISA_COM_CleanupUtility.pdb

Imports

kernel32

SetStdHandle
FindNextFileA
FindClose
RemoveDirectoryA
FindFirstFileA
CloseHandle
CreateMutexA
LockResource
SizeofResource
LoadResource
FindResourceA
GetVersion
GetVersionExA
GetThreadLocale
lstrcmpiA
GetLastError
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
InterlockedExchange
MultiByteToWideChar
GetACP
WideCharToMultiByte
GetLocaleInfoA
lstrlenA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
LCMapStringW
LCMapStringA
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
HeapSize
TerminateProcess
HeapReAlloc
RtlUnwind
ExitProcess
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
GetFileAttributesA
SetErrorMode
GetOEMCP
GetCPInfo
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringA
GlobalFlags
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
lstrcpynA
SetLastError
LocalFree
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
GlobalFree
LoadLibraryA
lstrcpyA
EnumResourceLanguagesA
ConvertDefaultLocale
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
lstrcmpA
GlobalDeleteAtom
FreeLibrary
GetCurrentThreadId
GetCurrentThread
GlobalAddAtomA
FreeResource
InterlockedDecrement
lstrcmpW
lstrcatA
GlobalFindAtomA
GlobalGetAtomNameA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
LocalAlloc
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue

user32

EnableWindow
GetSystemMetrics
RedrawWindow
MessageBoxA
GetWindowPlacement
IsIconic
LoadIconA
DrawIcon
GetClientRect
SendMessageA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
CheckMenuItem
EnableMenuItem
ModifyMenuA
GetParent
GetFocus
SetMenuItemBitmaps
PostQuitMessage
PostMessageA
SetCursor
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
SetWindowsHookExA
EndDialog
GetNextDlgTabItem
GetDlgItem
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetDesktopWindow
GetWindow
GetWindowTextA
wsprintfA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetDC
ReleaseDC
BeginPaint
EndPaint
GetSysColor
UnhookWindowsHookEx
PtInRect
CopyRect
GetWindowRect
SetFocus
SystemParametersInfoA
SetWindowPos
SetWindowLongA
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
UnregisterClassA
RegisterClassA
GetClassInfoA
AdjustWindowRectEx
GetMenu
UpdateWindow
SetForegroundWindow
MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
GetForegroundWindow
SendDlgItemMessageA
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassInfoExA
GetClassLongA
CreateWindowExA
GetCapture
WinHelpA
RegisterWindowMessageA
IsDialogMessageA
SetWindowTextA
ShowWindow
GetSysColorBrush
LoadCursorA
DestroyMenu

advapi32

RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA

msi

ord189
ord141
ord204

gdi32

GetDeviceCaps
CreateBitmap
SaveDC
RestoreDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
DeleteObject
GetObjectA
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comctl32

ord17

shlwapi

PathFindExtensionA
PathFindFileNameA

oleaut32

VariantInit
VariantChangeType
VariantClear

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b4be8217e53b8c2dee610e62595eeb35

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

msi

gdi32

winspool.drv

comctl32

shlwapi

oleaut32

oleacc

Sections

.text Size: 96KB - Virtual size: 95KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 6KB - Virtual size: 20KB

.rsrc Size: 93KB - Virtual size: 96KB

.text
Size: 96KB - Virtual size: 95KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 6KB - Virtual size: 20KB

.rsrc
Size: 93KB - Virtual size: 96KB