2024-06-06_ecab1535b93d0578a28ed3dad355f326_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-06_ecab1535b93d0578a28ed3dad355f326_icedid
Size

544KB
MD5

ecab1535b93d0578a28ed3dad355f326
SHA1

7e3d1b9ddd69e072c99fbdf35e2a08f09beae8fe
SHA256

8593d45fa103040ce727c888ccf9ee10cfc6ce72d43dab0c2d5b77a78ade40e2
SHA512

45b68d16be5cfcb8679acb65d0d07b8f2a5e58788debcc24d8a7ac12f7d8706813979fe0d3aa2cfedc175bbac04fde0ed9d565ab5f60dd109c9f4679d08f101f
SSDEEP

12288:9PlZarC5iQjt1q6deWczE4pgnrhY+f7vnxEvZ:llMYiQj/xd2E4pgFhnoZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-06_ecab1535b93d0578a28ed3dad355f326_icedid

Files

2024-06-06_ecab1535b93d0578a28ed3dad355f326_icedid
.exe windows:4 windows x86 arch:x86

85a33bfc4c3e69eb7cc5cbc91793e8be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\KvUScan\KvUScan\Release\KvUScan.pdb

Imports

kernel32

GetDriveTypeA
ExitThread
CreateThread
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
TerminateProcess
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetTimeZoneInformation
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetSystemTimeAsFileTime
GetVersionExA
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
RtlUnwind
ExitProcess
GetCurrentDirectoryA
SetErrorMode
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
ReadFile
GetOEMCP
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
GlobalFlags
WritePrivateProfileStringA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
FileTimeToLocalFileTime
lstrcmpA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpW
lstrcpynA
InterlockedDecrement
InterlockedIncrement
GetFileAttributesA
GetFullPathNameA
SystemTimeToFileTime
SetFileTime
GetFileTime
FileTimeToSystemTime
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetSystemDirectoryA
GetFileSize
SetFilePointer
GetLocalTime
FormatMessageA
LocalFree
FindFirstFileA
FindNextFileA
FindClose
CreateEventA
GetCurrentProcess
SetFileAttributesA
LoadLibraryExA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
lstrcatA
lstrcpyA
CompareStringW
CompareStringA
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
CreateDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
TerminateThread
CreateMutexA
DeleteFileA
WinExec
GetProcessHeap
HeapAlloc
GetTickCount
Sleep
HeapFree
GetCurrentProcessId
CreateFileA
WriteFile
CloseHandle
lstrlenW
FreeResource
GetCPInfo
lstrlenA
lstrcmpiA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
MultiByteToWideChar
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersion
FreeEnvironmentStringsA

user32

LockWindowUpdate
GetDCEx
ReleaseCapture
SetWindowContextHelpId
MapDialogRect
CharNextA
wsprintfA
PostQuitMessage
CreateDialogIndirectParamA
EndDialog
EndPaint
BeginPaint
GetWindowDC
GetMessageA
TranslateMessage
ValidateRect
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MapWindowPoints
MessageBoxA
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
AdjustWindowRectEx
EqualRect
GetClassInfoA
RegisterClassA
CallWindowProcA
SetWindowPos
IntersectRect
GetWindowPlacement
GetWindow
DefWindowProcA
GetDlgCtrlID
GetKeyState
GetCursorPos
IsChild
GetCapture
DeferWindowPos
SetRectEmpty
GetMenuStringA
DestroyMenu
LoadStringA
SetWindowLongA
LoadCursorA
CopyIcon
MessageBeep
IsWindow
GetMessagePos
ScreenToClient
PtInRect
SetTimer
KillTimer
UnregisterClassA
CharUpperA
LoadIconA
IsIconic
GetSystemMenu
DrawIcon
SetFocus
LoadImageA
PostMessageA
SetCursor
DestroyCursor
GetWindowLongA
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
PostThreadMessageA
RegisterClipboardFormatA
SetParent
GetNextDlgGroupItem
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
DrawFocusRect
FrameRect
OffsetRect
InflateRect
GetIconInfo
CreateIconIndirect
DrawStateA
IsMenu
GetMenuItemInfoA
GetSystemMetrics
SystemParametersInfoA
DrawIconEx
DestroyIcon
InvalidateRgn
CopyAcceleratorTableA
IsRectEmpty
SetCapture
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
EnableWindow
GetDesktopWindow
ReleaseDC
GetDC
ModifyMenuA
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
CreatePopupMenu
CreateMenu
DrawEdge
LoadBitmapA
CopyRect
SetRect
GetSysColorBrush
FillRect
GetSysColor
TrackPopupMenu

gdi32

CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
GetTextColor
GetRgnBox
SaveDC
GetClipBox
GetBkColor
CreateFontA
GetCharWidthA
StretchDIBits
RoundRect
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
CreatePatternBrush
ExtSelectClipRgn
RestoreDC
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
DeleteDC
GetTextExtentPoint32W
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextExtentPoint32A
SetPixel
GetPixel
PatBlt
Rectangle
Ellipse
GetBkMode
GetDeviceCaps
GetObjectA
CreateCompatibleBitmap
CreateFontIndirectA
CreatePen
CreateCompatibleDC
CreateDIBSection
SelectObject
BitBlt
CreateSolidBrush
DeleteObject
SetBkMode

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
SetEntriesInAclA
AllocateAndInitializeSid
RegEnumKeyA
RegCloseKey
RegOpenKeyA
SetFileSecurityA

shell32

ShellExecuteA
ShellExecuteExA

comctl32

ImageList_GetImageCount
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Draw
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Create

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
UrlUnescapeA
PathIsUNCA

oledlg

ord8

ole32

CoRevokeClassObject
CoTaskMemFree
OleInitialize
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard

oleaut32

SysFreeString
SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
OleCreateFontIndirect
SysAllocStringByteLen
SysStringLen
VariantInit
VariantChangeType
SysAllocStringLen
VariantClear

urlmon

URLDownloadToFileA

wininet

InternetCrackUrlA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetGetConnectedState
InternetQueryDataAvailable
InternetOpenUrlA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle

ws2_32

WSACleanup
closesocket
recvfrom
select
sendto
inet_ntoa
inet_addr
gethostbyname
setsockopt
socket
WSAStartup
WSAGetLastError

Sections

.text
Size: 316KB - Virtual size: 313KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

85a33bfc4c3e69eb7cc5cbc91793e8be

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

wininet

ws2_32

Sections

.text Size: 316KB - Virtual size: 313KB

.rdata Size: 80KB - Virtual size: 78KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 128KB - Virtual size: 124KB

.text
Size: 316KB - Virtual size: 313KB

.rdata
Size: 80KB - Virtual size: 78KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 128KB - Virtual size: 124KB