2024-05-31_4cfca7ac7eb3c27232860210652e5805_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-31_4cfca7ac7eb3c27232860210652e5805_icedid
Size

510KB
MD5

4cfca7ac7eb3c27232860210652e5805
SHA1

e167e4dad762b4d066bd00cb13d554b8032d94a5
SHA256

11681f8f174cfbd851ba075a9df4a316c92fba11f906a75095024a4215647c8e
SHA512

f357851c1627aff646a5a0ba1b958082939d1fb4983baf0215d93944863f3b9df4f2601540ec56dcfa50c1314700cbef2d106c6e030fd9998fd61edf53835d82
SSDEEP

12288:j44DDT5t+aT4KW9cdRtBKuey4vw0sJBj9ibEK7fju8yJM:jvz+aT4KWOdRtBKQ0sPBibEydy2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-31_4cfca7ac7eb3c27232860210652e5805_icedid

Files

2024-05-31_4cfca7ac7eb3c27232860210652e5805_icedid
.exe windows:4 windows x86 arch:x86

30928381d119ba84a204e45ee4e1877d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetOEMCP
WritePrivateProfileStringA
GetCurrentDirectoryA
SetErrorMode
RtlUnwind
HeapFree
GetSystemTimeAsFileTime
CreateThread
HeapAlloc
HeapReAlloc
VirtualProtect
GetSystemInfo
VirtualQuery
GetStartupInfoA
TerminateProcess
HeapSize
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
GetCPInfo
IsBadWritePtr
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeA
SetStdHandle
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetEnvironmentVariableA
GetLocaleInfoW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedIncrement
GlobalFlags
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetFileTime
FileTimeToLocalFileTime
SuspendThread
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetModuleHandleA
InterlockedDecrement
SetLastError
MulDiv
FormatMessageA
lstrcpynA
LocalFree
GlobalFree
FreeResource
GlobalAlloc
EnumResourceNamesA
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
FreeLibrary
VirtualAlloc
VirtualFree
GetDateFormatA
GetTimeFormatA
GetComputerNameA
OutputDebugStringA
GetLocalTime
GetTimeZoneInformation
ResumeThread
LeaveCriticalSection
SetThreadPriority
RemoveDirectoryA
GetTickCount
EnterCriticalSection
lstrcpyA
GetFileAttributesA
lstrcatA
CreateDirectoryA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
RaiseException
OpenMutexA
CreateMutexA
ExitThread
OpenEventA
CopyFileA
GetCommandLineA
ExitProcess
CreateEventA
SetEvent
GetFileAttributesW
FindFirstFileW
FindNextFileW
FileTimeToSystemTime
CreateFileW
GetFileSize
MultiByteToWideChar
WaitForSingleObject
TerminateThread
LoadLibraryA
GetProcAddress
GetTempPathA
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
MoveFileA
CreateFileA
SetFileTime
DeleteFileA
GetCurrentProcessId
OpenProcess
GetLastError
GetTempFileNameA
MoveFileExA
CreatePipe
GetCurrentProcess
DuplicateHandle
CloseHandle
CreateProcessA
ReadFile
Sleep
GlobalLock
GlobalUnlock
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetEnvironmentVariableA

user32

DestroyMenu
LoadCursorA
GetSysColorBrush
GetMessageA
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
WaitMessage
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
ShowWindow
SetWindowTextA
IsDialogMessageA
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
SetFocus
GetWindowTextA
GetLastActivePopup
GetMessageTime
GetMessagePos
MapWindowPoints
MessageBoxA
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
GetSysColor
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
DrawTextA
IsWindow
KillTimer
wsprintfA
PostThreadMessageA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
UnregisterClassA
GetForegroundWindow
CharUpperA
PostMessageA
wsprintfW
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
GetDesktopWindow
GetDC
ReleaseDC
EnableWindow
GetSystemMetrics
LoadIconA
SetTimer
GetClientRect
IsIconic
SendMessageA
DrawIcon
GetTopWindow

gdi32

SetMapMode
RestoreDC
SaveDC
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
PtVisible
DeleteDC
DeleteObject
SetTextColor
RectVisible
SetBkColor
GetClipBox
GetObjectA
GetDIBits
CreateBitmap
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
BitBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
SetServiceStatus
RegisterServiceCtrlHandlerA
CloseServiceHandle
StartServiceA
ChangeServiceConfigA
CreateServiceA
DeleteService
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
InitiateSystemShutdownExA
RegCloseKey
RegDeleteValueA
RegCreateKeyA
RegOpenKeyA
StartServiceCtrlDispatcherA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
ControlService

comctl32

ord17

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oleaut32

VariantChangeType
VariantInit
VariantClear

ws2_32

bind
htonl
socket
connect
WSASetLastError
listen
inet_addr
WSAGetLastError
__WSAFDIsSet
select
shutdown
getservbyname
accept
recv
send
closesocket
gethostbyname
WSACleanup
setsockopt
WSAStartup
getpeername
WSAAsyncSelect
recvfrom
sendto
getsockname
inet_ntoa
ntohs
htons

Sections

.text
Size: 272KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30928381d119ba84a204e45ee4e1877d

Headers

File Characteristics

Imports

iphlpapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oleaut32

ws2_32

Sections

.text Size: 272KB - Virtual size: 268KB

.rdata Size: 64KB - Virtual size: 61KB

.data Size: 16KB - Virtual size: 32KB

.rsrc Size: 140KB - Virtual size: 138KB

.text
Size: 272KB - Virtual size: 268KB

.rdata
Size: 64KB - Virtual size: 61KB

.data
Size: 16KB - Virtual size: 32KB

.rsrc
Size: 140KB - Virtual size: 138KB