2024-07-05_0f53c83a05f74b196daf88eaabb73fa7_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-05_0f53c83a05f74b196daf88eaabb73fa7_icedid
Size

374KB
MD5

0f53c83a05f74b196daf88eaabb73fa7
SHA1

f091fbec5a0e344d1ca2fad5987088d0e3372985
SHA256

32cdd350096af81dfa3e39159235309a1229a9c6cf8a3396d1a679ecbfee3689
SHA512

e99f5f92ba4bc2449773566a3a22d332df1d583b2e3026e0c3291a7fc9d05a116b99530aacdb2ea71c95b6ec746ab6366097890dba4134a26a1465224911892e
SSDEEP

6144:nEO2SUQg9NSFNvQd8osA8c8uckRelVBJmA58wpELwNOyqKRZlZiMqLDbnHEPh:nj2MNvQL2Pf59pE0NOyBZLcEPh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-05_0f53c83a05f74b196daf88eaabb73fa7_icedid

Files

2024-07-05_0f53c83a05f74b196daf88eaabb73fa7_icedid
.exe windows:5 windows x86 arch:x86

233e1b667ef0f8f7d480a1d293775053

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\NSet\trunk\EasySetEx\output\EasySetExUpdate.pdb

Imports

kernel32

SetErrorMode
GetTickCount
GetStartupInfoW
RtlUnwind
Sleep
ExitProcess
MoveFileA
GetSystemTimeAsFileTime
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
VirtualFree
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
lstrlenA
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
GetFileSizeEx
GetFileAttributesW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
InterlockedDecrement
GetModuleHandleA
GlobalFindAtomW
GetVersionExW
CompareStringW
LoadLibraryA
GetVersionExA
LocalFree
MulDiv
WritePrivateProfileStringW
GlobalUnlock
GlobalFree
FreeResource
GetCurrentProcessId
SetLastError
GlobalAddAtomW
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
CompareStringA
MultiByteToWideChar
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
GetWindowsDirectoryW
GetSystemDirectoryW
FormatMessageW
GetLastError
GetFileTime
CompareFileTime
InterlockedExchange
CreateThread
ResetEvent
CreateEventW
SetEvent
OutputDebugStringW
WideCharToMultiByte
lstrlenW
CreateProcessW
WaitForSingleObject
DeleteFileW
CreateFileW
CloseHandle
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceW
HeapCreate
DeleteCriticalSection

user32

RegisterClipboardFormatW
PostThreadMessageW
GetSysColorBrush
ReleaseCapture
LoadCursorW
SetCapture
CharUpperW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextW
GetForegroundWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
CreateWindowExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetMenuItemID
GetMenuItemCount
ReleaseDC
GetDC
CopyRect
GetWindowRect
GetSubMenu
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
UnregisterClassW
DestroyMenu
MessageBeep
GetNextDlgTabItem
EndDialog
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
GetTopWindow
CharNextW
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
PostMessageW
LoadIconW
EnableWindow
SetTimer
GetClientRect
IsIconic
SendMessageW
DrawIcon
GetAsyncKeyState
GetSystemMetrics
PostQuitMessage
GetClassInfoExW

gdi32

ExtSelectClipRgn
DeleteDC
RectVisible
GetStockObject
GetBkColor
GetTextColor
GetRgnBox
GetMapMode
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
CreateBitmap
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateRectRgnIndirect
TextOutW

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW

shell32

ShellExecuteW

comctl32

ord17

shlwapi

PathFindFileNameW
UrlUnescapeW
PathStripToRootW
PathIsUNCW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
VariantInit
VariantChangeType
SysStringLen
SysAllocStringLen
VariantClear
SysAllocString
SysFreeString

wsock32

WSASetLastError
WSACleanup
WSAStartup

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

wininet

InternetConnectW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
HttpAddRequestHeadersW
InternetQueryDataAvailable
InternetCanonicalizeUrlW
HttpOpenRequestW
InternetCrackUrlW

Sections

.text
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

233e1b667ef0f8f7d480a1d293775053

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wsock32

version

wininet

Sections

.text Size: 259KB - Virtual size: 258KB

.rdata Size: 65KB - Virtual size: 65KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 37KB - Virtual size: 36KB

.text
Size: 259KB - Virtual size: 258KB

.rdata
Size: 65KB - Virtual size: 65KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 37KB - Virtual size: 36KB