2024-06-15_3162992392c1b5477d28757282ff5914_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-15_3162992392c1b5477d28757282ff5914_icedid
Size

868KB
MD5

3162992392c1b5477d28757282ff5914
SHA1

89b2c42dbec14c2d0406a93a574c32553f9badbe
SHA256

a91ab09d18474c3a711f46e69f2786bc6b25c2070c982aa2890c125cfe2620e4
SHA512

dee3bac3ecfd05f336e005192f8dc661c30b2324e49de0598c828cd3740a305352be231822c7a8f442cc63e34adb935db22fa0c145fb576f8f2981051c5a937d
SSDEEP

12288:HZtUszKzLB3IV3lmXnxFS96oLVLWgRRZRNaRqXVBDVIwPgxfqJHvnml:dz6LB3XOFSRqbDVIigBmn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-15_3162992392c1b5477d28757282ff5914_icedid

Files

2024-06-15_3162992392c1b5477d28757282ff5914_icedid
.exe windows:4 windows x86 arch:x86

db15cee45344d85fd8753744f6cb9f21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

nslms324

open_first_key
query_key
close_key

kernel32

HeapSize
HeapWalk
OutputDebugStringA
SetCurrentDirectoryA
FindNextFileA
CreateDirectoryA
RemoveDirectoryA
GetTempPathA
GetLocalTime
CreateMutexA
ReleaseMutex
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
UnmapViewOfFile
FlushViewOfFile
OpenEventA
WaitForMultipleObjects
GetCurrentProcessId
ResetEvent
GetSystemDirectoryA
QueryPerformanceCounter
DeviceIoControl
DefineDosDeviceA
QueryDosDeviceA
RtlUnwind
VirtualProtect
VirtualAlloc
HeapReAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
ExitThread
CreateThread
GetSystemTimeAsFileTime
GetDriveTypeA
GetTimeFormatA
GetDateFormatA
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetTimeZoneInformation
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetLocaleInfoW
HeapFree
HeapAlloc
HeapDestroy
GetSystemInfo
HeapCreate
CreateProcessA
SetErrorMode
SetFileAttributesA
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetShortPathNameA
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
InterlockedIncrement
RaiseException
InterlockedDecrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
SystemTimeToFileTime
FileTimeToSystemTime
SetLastError
CopyFileA
MulDiv
FormatMessageA
LocalFree
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GetTickCount
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalFree
CreateEventA
SetEvent
WaitForSingleObject
CloseHandle
GetCurrentThread
GlobalAlloc
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
lstrcpynA
GlobalLock
GlobalUnlock
GlobalGetAtomNameA
GlobalAddAtomA
FindResourceA
LoadResource
LockResource
SizeofResource
GetStringTypeExA
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualQuery

user32

GetSystemMenu
SetParent
DestroyIcon
DeleteMenu
IsRectEmpty
LoadCursorA
GetSysColorBrush
GetMenuItemInfoA
InflateRect
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
TranslateMDISysAccel
DrawMenuBar
DefFrameProcA
DrawFocusRect
FillRect
GetMenuStringA
AppendMenuA
InsertMenuA
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
ShowOwnedPopups
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
LoadBitmapA
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
LockWindowUpdate
GetPropA
RemovePropA
SendDlgItemMessageA
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
MessageBoxA
TrackPopupMenu
SetForegroundWindow
UpdateWindow
EnableWindow
IsZoomed
SendMessageA
CharUpperA
TranslateAcceleratorA
IsWindowEnabled
GetWindow
GetDesktopWindow
IsWindow
GetWindowLongA
GetClientRect
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
PtInRect
RegisterWindowMessageA
wsprintfA
LoadMenuA
GetDCEx
WindowFromPoint
KillTimer
SetTimer
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
DestroyMenu
GetClassNameA
GetSysColor
SetWindowPos
WinHelpA
SetFocus
GetActiveWindow
GetFocus
EqualRect
GetDlgItem
SetWindowLongA
GetKeyState
SetCapture
InvalidateRgn
CopyAcceleratorTableA
SetRect
SetPropA
CharNextA
ShowWindow
SetMenu
PostMessageA
BringWindowToTop
GetLastActivePopup
CopyRect
SetRectEmpty
OffsetRect
IntersectRect
CreatePopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
InsertMenuItemA
IsIconic
InvalidateRect
IsWindowVisible
SetActiveWindow
GetParent
LoadAcceleratorsA
ReleaseCapture
GetCapture
PeekMessageA
SetCursor
GetClassInfoA
LoadIconA
ReuseDDElParam
UnpackDDElParam
GetMenu
GetDlgCtrlID
GetMenuCheckMarkDimensions

gdi32

CreateRectRgnIndirect
PatBlt
SetRectRgn
CombineRgn
GetMapMode
StretchDIBits
GetCharWidthA
GetTextExtentPoint32A
GetBkColor
GetTextColor
GetRgnBox
CreateFontIndirectA
CreateSolidBrush
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
GetClipBox
CreateCompatibleDC
CreateFontA
CreateCompatibleBitmap
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
SelectObject
DeleteObject
GetTextMetricsA
BitBlt
GetDeviceCaps
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
SetViewportExtEx

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

GetUserNameA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
RegEnumKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegCreateKeyA
RegSetValueA
GetFileSecurityA

shell32

SHFileOperationA
DragQueryFileA
ExtractIconA
SHGetFileInfoA
SHGetPathFromIDListA
SHGetFolderPathA
DragFinish
SHBrowseForFolderA

comctl32

ImageList_Draw
ImageList_GetImageInfo
ord17
ImageList_Destroy

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoTaskMemFree
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
StringFromCLSID
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoCreateGuid
OleInitialize
CoRegisterMessageFilter

oleaut32

SysAllocStringLen
SysFreeString
SystemTimeToVariantTime
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
SafeArrayDestroy
SysAllocString
VariantInit
VariantChangeType
VariantClear
VariantCopy

ws2_32

connect
send
getsockname
recv
getpeername
closesocket
WSAStartup
WSAGetLastError
bind
gethostname

Sections

.text
Size: 684KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db15cee45344d85fd8753744f6cb9f21

Headers

File Characteristics

Imports

nslms324

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

Sections

.text Size: 684KB - Virtual size: 682KB

.rdata Size: 116KB - Virtual size: 115KB

.data Size: 24KB - Virtual size: 49KB

.rsrc Size: 40KB - Virtual size: 36KB

.text
Size: 684KB - Virtual size: 682KB

.rdata
Size: 116KB - Virtual size: 115KB

.data
Size: 24KB - Virtual size: 49KB

.rsrc
Size: 40KB - Virtual size: 36KB