2024-06-09_039164aab055478e870f58e8829eacb8_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-09_039164aab055478e870f58e8829eacb8_icedid
Size

396KB
MD5

039164aab055478e870f58e8829eacb8
SHA1

cde5878dc46dfe028ba9c902b17f6bec94a6a461
SHA256

766c0ad9f1c9664179cef7de9cab65dbc3e1d54c749a1ac674ed0889326cb34d
SHA512

58c7d35e3cf4d5c9f7def639f44b0587c9e04b01cfacd0ab7edc3197ce4d1a11ef17ab7723c439db529ef255d54e935198b870d1f9d15036298929524b741ef8
SSDEEP

6144:lWG/BIn3tRimROTqFxc7bV1LJsNp1FGHjQDedvFxyb3chXmds/+C:6G1LJsgHjQDeddEwhWds7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-09_039164aab055478e870f58e8829eacb8_icedid

Files

2024-06-09_039164aab055478e870f58e8829eacb8_icedid
.exe windows:4 windows x86 arch:x86

8905a313834330efaa9c87ffc4093e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

h:\VC++_net_proj\MB95-mini-alarm\Release\MB95-mini-alarm-CZ.pdb

Imports

kernel32

SetErrorMode
GetFileAttributesW
GetFileTime
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
RtlUnwind
HeapReAlloc
RaiseException
CreateThread
ExitProcess
HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
InterlockedIncrement
VirtualFree
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
Sleep
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
lstrlenA
GlobalFlags
FindResourceExW
GetVersionExW
GetModuleHandleA
InterlockedDecrement
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetThreadLocale
GetCurrentProcessId
WritePrivateProfileStringW
GetCurrentThread
ConvertDefaultLocale
GetModuleFileNameW
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GlobalAlloc
FormatMessageW
LocalFree
MulDiv
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
lstrlenW
WideCharToMultiByte
GlobalLock
GlobalUnlock
FreeResource
GlobalFree
GetLastError
SetLastError
GetProcAddress
GetModuleHandleW
VirtualProtect
CloseHandle
SetCommBreak
SetCommTimeouts
GetCommTimeouts
SetCommState
SetCommMask
GetCommState
CreateFileW
CreateEventW
CreateDirectoryW
ExitThread
ReadFile
LoadLibraryW
GetOverlappedResult
WriteFile
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
HeapCreate
SizeofResource

user32

RegisterClipboardFormatW
PostThreadMessageW
ReleaseCapture
SetCapture
DestroyMenu
LoadCursorW
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetCursor
CharUpperW
GetWindowThreadProcessId
SetWindowContextHelpId
PostQuitMessage
GetMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuState
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
CopyRect
PtInRect
DefWindowProcW
CallWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
SendDlgItemMessageW
UnregisterClassW
MessageBeep
GetNextDlgGroupItem
GetDlgItemInt
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
SetWindowsHookExW
CheckDlgButton
GetWindow
GetDesktopWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
GetCapture
GetActiveWindow
SetActiveWindow
MapDialogRect
SetWindowPos
ShowWindow
GetAsyncKeyState
GetFocus
SetFocus
GetWindowRect
GetWindowLongW
GetParent
GetDlgItem
IsWindowEnabled
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SetTimer
LoadIconW
DispatchMessageW
TranslateMessage
PeekMessageW
PostMessageW
EnableWindow
SendMessageW
UnregisterClassA

gdi32

ExtSelectClipRgn
DeleteDC
GetStockObject
RectVisible
EnumFontFamiliesExW
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
PtVisible
GetWindowExtEx
GetViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
GetObjectW
SetBkColor
SetTextColor
GetClipBox
TextOutW

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW

comctl32

InitCommonControlsEx

shlwapi

StrCpyW
PathStripToRootW
PathIsUNCW
PathRemoveExtensionW
StrToInt64ExW
PathFindExtensionW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromProgID

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString
SysStringLen

Sections

.text
Size: 272KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8905a313834330efaa9c87ffc4093e55

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 272KB - Virtual size: 268KB

.rdata Size: 64KB - Virtual size: 62KB

.data Size: 12KB - Virtual size: 189KB

.rsrc Size: 44KB - Virtual size: 42KB

.text
Size: 272KB - Virtual size: 268KB

.rdata
Size: 64KB - Virtual size: 62KB

.data
Size: 12KB - Virtual size: 189KB

.rsrc
Size: 44KB - Virtual size: 42KB