2024-08-08_04c219134cffc77c39841c30704b2f6b_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-08-08_04c219134cffc77c39841c30704b2f6b_icedid
Size

2.6MB
MD5

04c219134cffc77c39841c30704b2f6b
SHA1

1ac5a5b9a18575b0449745dd2d069f7a8b561d46
SHA256

6c59c6cfadff62b8d3b301d97e91b6a65b3da0415641fbabf95e3404c8e4fcbd
SHA512

58854e09a781150255d662a2a7968159b81a516dc05aa99a787da387b2baaba2c18e7187274e48b8cddb58aa920d7cdc4bdcab98a955f0a3bfd56fbc980b8361
SSDEEP

24576:0AKY7+JCMah2pE2Qd6fTmDCRiq2qRNQIB/1:0fYqUMahob/7mDCRV2iQI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-08_04c219134cffc77c39841c30704b2f6b_icedid

Files

2024-08-08_04c219134cffc77c39841c30704b2f6b_icedid
.exe windows:4 windows x86 arch:x86

1c76f76af3fb162f5e0205a619fbf432

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetStartupInfoA
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
RtlUnwind
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
TerminateProcess
ExitProcess
SetErrorMode
GetOEMCP
GetCPInfo
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalFlags
InterlockedIncrement
GetCurrentDirectoryA
WritePrivateProfileStringA
GlobalFree
FormatMessageA
LocalFree
InterlockedDecrement
MulDiv
SetLastError
FreeResource
GlobalFindAtomA
lstrcatA
lstrcmpW
lstrcpynA
GlobalUnlock
GlobalGetAtomNameA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
CloseHandle
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadResource
LockResource
SizeofResource
FindResourceA
GetLastError
lstrlenA
lstrcmpiA
WideCharToMultiByte
CompareStringA
CompareStringW
MultiByteToWideChar
GetVersion
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetCommandLineA
FreeEnvironmentStringsW
SetCurrentDirectoryA

user32

GetMenuItemInfoA
InflateRect
LoadCursorA
GetSysColorBrush
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
SetWindowTextA
IsDialogMessageA
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
GetClientRect
DeferWindowPos
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
PtInRect
RegisterWindowMessageA
LoadMenuA
DestroyMenu
GetClassNameA
GetSysColor
SetWindowPos
WinHelpA
SetFocus
EqualRect
GetDlgItem
SetWindowLongA
GetMenu
UnpackDDElParam
ReuseDDElParam
MessageBoxA
EnumDisplaySettingsA
GetWindowThreadProcessId
FindWindowExA
EnableWindow
GetSystemMetrics
LoadBitmapA
RedrawWindow
SetTimer
KillTimer
SetForegroundWindow
LoadIconA
GetClassInfoA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
InsertMenuItemA
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
BringWindowToTop
SetMenu
ShowWindow
IsWindow
GetDesktopWindow
GetWindow
TranslateAcceleratorA
GetDlgCtrlID
IsChild
InvalidateRect
UpdateWindow
IsIconic
AdjustWindowRectEx
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetMenuState
ScreenToClient
CharUpperA
wsprintfA
SendMessageA
PostQuitMessage
PostMessageA
SetCursor
ShowOwnedPopups
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA

gdi32

CreateFontIndirectA
GetTextExtentPoint32A
CreateSolidBrush
GetDeviceCaps
GetStockObject
CreatePatternBrush
DeleteDC
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
ScaleWindowExtEx
SetWindowExtEx
CreateCompatibleDC
GetObjectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateCompatibleBitmap
CreateBitmap
BitBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegDeleteKeyA
RegCreateKeyExA

shell32

DragQueryFileA
DragFinish

shlwapi

PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathIsUNCA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 308KB - Virtual size: 306KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c76f76af3fb162f5e0205a619fbf432

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oleaut32

Sections

.text Size: 132KB - Virtual size: 131KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 8KB - Virtual size: 20KB

.rsrc Size: 2.1MB - Virtual size: 2.1MB

Size: 308KB - Virtual size: 306KB

.text
Size: 132KB - Virtual size: 131KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 8KB - Virtual size: 20KB

.rsrc
Size: 2.1MB - Virtual size: 2.1MB