2024-06-12_d02ddec8028444a89d6b580767e4f3ec_icedid

Sharing

Copy URL Twitter E-mail

General

Target
2024-06-12_d02ddec8028444a89d6b580767e4f3ec_icedid
Size 308KB
Sample240612-xdmfcazanm
SHA256 25af9c058410e8cb450f9764f365267842b110850af726346493742aa1c0db46
MD5 d02ddec8028444a89d6b580767e4f3ec
SHA1 54cc59665b1ea1e5a4f3a9476c92a967ec9150b5
SHA512 65c0ced7763e676885207950047554925889a14bcd553602d1c22029172a1398da2cb2e059e6e9377675496f4b25fdefee7c47ab1066c1fedd3f2eb6200d1f9c
SSDEEP 6144:6+iw6FKPvPIDPSkVnunn+Rtm0cw+EPt4Y3L9:6lw6APnID6Wunem0yEPj3J
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-12_d02ddec8028444a89d6b580767e4f3ec_icedid

File Explorer

2024-06-12_d02ddec8028444a89d6b580767e4f3ec_icedid

.exe 308KB

2024-06-12_d02ddec8028444a89d6b580767e4f3ec_icedid

IMPHASH c56a182eee6c581509d6d586aa7e0862
SHA256 25af9c058410e8cb450f9764f365267842b110850af726346493742aa1c0db46
MD5 d02ddec8028444a89d6b580767e4f3ec
SHA1 54cc59665b1ea1e5a4f3a9476c92a967ec9150b5
SHA512 65c0ced7763e676885207950047554925889a14bcd553602d1c22029172a1398da2cb2e059e6e9377675496f4b25fdefee7c47ab1066c1fedd3f2eb6200d1f9c
SSDEEP 6144:6+iw6FKPvPIDPSkVnunn+Rtm0cw+EPt4Y3L9:6lw6APnID6Wunem0yEPj3J
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

50210

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\Documents and Settings\d48727\桌面\DriverSetup for32-64\Release\DriverSetup.pdb

kernel32

VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery GetStartupInfoA GetCommandLineA TerminateProcess HeapReAlloc HeapSize SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapDestroy HeapCreate VirtualFree IsBadWritePtr GetStdHandle UnhandledExceptionFilter HeapFree GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr SetStdHandle SetEnvironmentVariableA HeapAlloc ExitProcess RtlUnwind GetTickCount GetFileTime GetFileAttributesA FileTimeToLocalFileTime GetOEMCP GetCPInfo FileTimeToSystemTime SetErrorMode CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalGetAtomNameA GlobalFindAtomA lstrcmpW TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc DeleteCriticalSection InitializeCriticalSection RaiseException GlobalFlags InterlockedDecrement InterlockedIncrement lstrcatA SetLastError MulDiv GlobalUnlock FormatMessageA lstrcpynA LocalFree FreeResource GlobalFree WritePrivateProfileStringA GlobalAddAtomA FindResourceA LoadResource LockResource SizeofResource GetCurrentThread GetCurrentThreadId GlobalLock GlobalAlloc GlobalDeleteAtom lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA CompareStringW CompareStringA lstrlenA lstrcmpiA GetVersion WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange CreateSemaphoreA CreateProcessA GetLastError WaitForSingleObject GetExitCodeProcess CloseHandle GetModuleFileNameA GetModuleHandleA GetCurrentProcess LoadLibraryA GetProcAddress FreeEnvironmentStringsA FreeLibrary

user32

PostThreadMessageA MessageBeep GetNextDlgTabItem GetNextDlgGroupItem InvalidateRgn InvalidateRect CopyAcceleratorTableA SetRect IsRectEmpty CharNextA RegisterWindowMessageA WinHelpA CreateWindowExA GetClassLongA GetClassInfoExA SetPropA GetPropA RemovePropA IsWindow IsChild GetForegroundWindow SetActiveWindow GetTopWindow DestroyWindow GetMessageTime GetMessagePos LoadIconA MapWindowPoints SetForegroundWindow UpdateWindow GetClientRect GetMenu AdjustWindowRectEx EqualRect GetClassInfoA RegisterClassA DefWindowProcA CallWindowProcA OffsetRect SystemParametersInfoA IsIconic GetWindowPlacement CopyRect SetFocus ShowWindow MoveWindow SetWindowLongA IsDialogMessageA SendDlgItemMessageA GetSystemMetrics GetSysColorBrush UnregisterClassA GetSysColor EndPaint BeginPaint GetWindowDC ReleaseDC GetDC GrayStringA DrawTextExA DrawTextA CharUpperA PostMessageA PostQuitMessage SetCursor SendMessageA EnableWindow IsWindowEnabled GetLastActivePopup GetWindowLongA TabbedTextOutA UnhookWindowsHookEx GetDlgCtrlID GetWindowRect PtInRect GetWindowTextA SetWindowTextA GetClassNameA GetDesktopWindow ReleaseCapture LoadCursorA RegisterClipboardFormatA CreateDialogIndirectParamA GetCapture SetCapture ClientToScreen GetMenuItemID GetMenuItemCount GetSubMenu EndDialog IntersectRect DestroyMenu GetParent MessageBoxA ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA CallNextHookEx SetWindowsHookExA LoadBitmapA GetMenuCheckMarkDimensions CheckMenuItem EnableMenuItem GetMenuState ModifyMenuA GetFocus SetMenuItemBitmaps wsprintfA GetDlgItem SetWindowPos MapDialogRect SetWindowContextHelpId GetWindow

gdi32

GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetStockObject DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx GetMapMode CreateBitmap Escape ExtTextOutA TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx GetObjectA GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC DeleteObject GetDeviceCaps SelectObject

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegOpenKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegCloseKey

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoTaskMemAlloc CoTaskMemFree CLSIDFromString CLSIDFromProgID OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject OleInitialize

oleaut32

SysFreeString SysAllocStringLen SysStringLen SysAllocStringByteLen VariantClear VariantChangeType VariantInit OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy

Sharing

General

Malware Config

Signatures

File Explorer

2024-06-12_d02ddec8028444a89d6b580767e4f3ec_icedid

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

generic