2024-06-02_3f1310b7583829bf09fa5063cda99692_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-06-02_3f1310b7583829bf09fa5063cda99692_icedid
Size

1.3MB
MD5

3f1310b7583829bf09fa5063cda99692
SHA1

bec17d24aa580409a84493bfbeb9cfe5f11c5fad
SHA256

0dd02a248f5cc39cb0be931cdc75747358f9c15d651effbf61b26e85a24bb533
SHA512

efce9c3716cbf52be9a1acda108ea9667a7ae77ef03dd6a0e606ac18e32ab9c9580f05e7a3757a239b369ddc30e0bf0e6a000324215ae2760070b0490d10aa68
SSDEEP

12288:lvyWU9bZNTrTJLLdv0UK5fq5UbRIC/ZUZz6wuVmDvIZPTEugJdS0y3yNb2HYK2Au:EWWTrTJ/o5i2bWxZzTIgvIVc7xSKHw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-02_3f1310b7583829bf09fa5063cda99692_icedid

Files

2024-06-02_3f1310b7583829bf09fa5063cda99692_icedid
.exe windows:4 windows x86 arch:x86

dfedb0de12aa6570c393ead4a07d41ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdiplusStartup
GdiplusShutdown
GdipDrawImageRectI
GdipCreateFromHDC
GdipDeleteGraphics

kernel32

LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
SetErrorMode
GetTickCount
HeapFree
ExitProcess
RtlUnwind
HeapAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
TlsSetValue
GetCommandLineA
HeapReAlloc
GetDriveTypeA
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetStdHandle
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedIncrement
GlobalFlags
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
VirtualProtect
WritePrivateProfileStringA
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
InterlockedDecrement
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
SetLastError
MulDiv
lstrcpynA
FreeResource
GetSystemDefaultLangID
IsBadReadPtr
LeaveCriticalSection
EnterCriticalSection
FormatMessageA
LocalFree
lstrcatA
WinExec
GetFileAttributesA
GetModuleHandleA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
SetThreadLocale
GetModuleFileNameA
GetWindowsDirectoryA
OpenMutexA
CreateMutexA
ReleaseMutex
GetEnvironmentVariableA
CompareStringW
CompareStringA
lstrlenW
lstrcmpiA
GetVersion
GetLastError
CreateThread
CreateFileA
GetFileSize
CloseHandle
Sleep
SetEnvironmentVariableA
LoadLibraryA
GetProcAddress
FreeLibrary
lstrlenA
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetStartupInfoA

user32

InvalidateRgn
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
ValidateRect
PostQuitMessage
wsprintfA
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
RegisterWindowMessageA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetScrollPos
SetForegroundWindow
AdjustWindowRectEx
EqualRect
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
IntersectRect
GetWindowPlacement
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
CopyAcceleratorTableA
GetMenuState
GetMenuStringA
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
EndDialog
SetWindowTextA
GetDlgCtrlID
GetWindowLongA
GetClassNameA
GetWindowTextA
IsWindowEnabled
IsDialogMessageA
IsWindowVisible
MapDialogRect
WinHelpA
IsChild
GetCapture
MessageBeep
DrawTextA
DestroyCursor
SetRectEmpty
MessageBoxA
DrawStateA
ModifyMenuA
GetSubMenu
GetMenuItemID
GetMenuItemCount
ReleaseCapture
GetSysColorBrush
DestroyWindow
SetCapture
OffsetRect
SetRect
GetDesktopWindow
GetKeyState
ScreenToClient
SetWindowPos
GetWindowRect
PostMessageA
IsRectEmpty
SystemParametersInfoA
DestroyIcon
LoadBitmapA
WindowFromPoint
GetParent
GetNextDlgTabItem
GetFocus
ReleaseDC
GetDC
ClientToScreen
DrawFocusRect
DrawFrameControl
InflateRect
IsMenu
GetMenu
GetWindow
CharNextA
LoadCursorA
CopyIcon
KillTimer
GetCursorPos
SetCursor
SetWindowLongA
SetTimer
RedrawWindow
PtInRect
PeekMessageA
DispatchMessageA
GetSystemMenu
AppendMenuA
CharUpperA
LoadIconA
GetDlgItem
UpdateWindow
LoadImageA
DestroyMenu
SetWindowContextHelpId
GetMessageA
TabbedTextOutA
TranslateMessage
GetSysColor
IsWindow
CopyRect
GetSystemMetrics
UnregisterClassA
EnableWindow
InvalidateRect
GetClientRect
IsIconic
SendMessageA
DrawIcon

gdi32

ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
CreateSolidBrush
CreateRectRgnIndirect
GetMapMode
DPtoLP
SetWindowExtEx
GetBkColor
GetTextColor
GetRgnBox
GetClipBox
SetMapMode
SetTextColor
SetStretchBltMode
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SelectPalette
CreateDIBitmap
CreatePalette
ExtTextOutA
BitBlt
RealizePalette
CreateCompatibleBitmap
GetTextExtentPoint32A
GetTextExtentPointA
SetTextJustification
TextOutA
CreateFontIndirectA
CreateFontA
SelectObject
DeleteObject
GetObjectA
StretchBlt
PatBlt
CreateCompatibleDC
GetStockObject
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
CreateDIBSection
SetDIBitsToDevice

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueExA

shell32

ShellExecuteA
SHGetFileInfoA

comctl32

ImageList_SetBkColor
ImageList_GetImageInfo
ImageList_AddMasked
ord17
_TrackMouseEvent
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Destroy
ImageList_Create

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

oledlg

ord8

ole32

OleInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitialize
CoTaskMemFree
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc

oleaut32

SysFreeString
VariantCopy
SysStringLen
VariantInit
VariantChangeType
VariantClear
VarBstrCmp
VarBstrCat
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 872KB - Virtual size: 872KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dfedb0de12aa6570c393ead4a07d41ed

Headers

File Characteristics

Imports

gdiplus

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

version

Sections

.text Size: 328KB - Virtual size: 328KB

.rdata Size: 88KB - Virtual size: 86KB

.data Size: 12KB - Virtual size: 27KB

.rsrc Size: 872KB - Virtual size: 872KB

.text
Size: 328KB - Virtual size: 328KB

.rdata
Size: 88KB - Virtual size: 86KB

.data
Size: 12KB - Virtual size: 27KB

.rsrc
Size: 872KB - Virtual size: 872KB