2024-08-19_7064f1fd898ec0d326bf5009437e4139_http-browser_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-19_7064f1fd898ec0d326bf5009437e4139_http-browser_icedid
Size

6.3MB
MD5

7064f1fd898ec0d326bf5009437e4139
SHA1

d9aebe74b413cbdd806f7e925910467fd724ac47
SHA256

2dc8f2189a467c6f6f3e32baebe977ada7c20a37a76edd7532717ea272f14115
SHA512

5d11337368864c8660f271e166c9d916e5e1c6a7b10f86f31a471febd619f03a912655f24dcde150c711e5dd694d36ab689bd709d97a7d92195c1c8961455623
SSDEEP

196608:Riux7eOlCVhjErFR5zaqcvcU3PhXIVETtLIAhm:MkeKF7Gqcv/3pIAhm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-19_7064f1fd898ec0d326bf5009437e4139_http-browser_icedid

Files

2024-08-19_7064f1fd898ec0d326bf5009437e4139_http-browser_icedid
.exe windows:4 windows x86 arch:x86

d601b6e3ee413aa77a73386be77c0a8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsBadWritePtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetModuleFileNameA
GetTimeZoneInformation
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetDriveTypeA
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
CreateThread
ExitThread
HeapReAlloc
ExitProcess
RtlUnwind
GetStartupInfoW
GetFileAttributesW
SetErrorMode
GetFullPathNameW
GetCurrentProcess
FlushFileBuffers
GlobalFlags
lstrcmpiW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
InterlockedDecrement
GetCurrentThread
lstrcmpA
GetModuleFileNameW
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
LoadLibraryA
lstrcatW
lstrcmpW
GetModuleHandleW
GetVersionExA
GetModuleHandleA
GlobalFree
MulDiv
lstrcpyW
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrcpynW
TerminateProcess
HeapAlloc
HeapFree
SetLastError
Process32FirstW
Process32NextW
GetWindowsDirectoryW
SetFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
SetFilePointer
CreateFileW
WriteFile
LoadLibraryW
GetProcAddress
FreeLibrary
WinExec
WideCharToMultiByte
lstrlenW
CreateDirectoryW
CreateMutexW
GetLastError
ReleaseMutex
CloseHandle
MultiByteToWideChar
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
WritePrivateProfileStringW
WaitForSingleObject
SetCurrentDirectoryW
SetEnvironmentVariableW
Sleep
GetVersionExW
FindResourceW
LoadResource
LockResource
GetSystemTimeAsFileTime
SizeofResource

user32

DestroyMenu
GetSysColorBrush
WindowFromPoint
PostQuitMessage
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
LoadIconW
PeekMessageW
MapWindowPoints
MessageBoxW
GetKeyState
SetForegroundWindow
GetMenu
AdjustWindowRectEx
GetClassInfoW
RegisterClassW
UnregisterClassW
DefWindowProcW
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
CopyRect
GetWindow
EndPaint
BeginPaint
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowTextLengthW
GetFocus
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
GetDlgCtrlID
SetWindowTextW
GetWindowLongW
IsDialogMessageW
IsDlgButtonChecked
SendDlgItemMessageW
GetDlgItem
CheckRadioButton
PostMessageW
RegisterWindowMessageW
SetWindowLongW
CopyIcon
DestroyCursor
MessageBeep
IsWindow
IsWindowVisible
GetSysColor
GetMessagePos
LoadCursorW
GetParent
KillTimer
SetTimer
RedrawWindow
ReleaseDC
GetDC
ScreenToClient
GetClientRect
InflateRect
PtInRect
SetCursor
InvalidateRect
UpdateWindow
GetWindowRect
wsprintfW
EnumChildWindows
GetWindowTextW
GetClassNameW
FindWindowW
EnableWindow
SendMessageW

gdi32

DeleteObject
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
CreateSolidBrush
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
GetTextExtentPoint32W
GetStockObject
GetObjectW
CreateFontIndirectW
CreateFontW
PtVisible

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegOpenKeyExW
RegQueryValueW
CloseServiceHandle
RegSetValueExW
RegCreateKeyExW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
OpenServiceW
OpenSCManagerW
QueryServiceStatus

shell32

SHBrowseForFolderW
SHGetMalloc
ShellExecuteExW
SHGetPathFromIDListW
ShellExecuteW
SHGetSpecialFolderLocation

comctl32

ord17

shlwapi

PathFindExtensionW
PathFindFileNameW
SHDeleteKeyW

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d601b6e3ee413aa77a73386be77c0a8c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

Sections

.text Size: 168KB - Virtual size: 166KB

.rdata Size: 52KB - Virtual size: 48KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 6.0MB - Virtual size: 6.0MB

.text
Size: 168KB - Virtual size: 166KB

.rdata
Size: 52KB - Virtual size: 48KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 6.0MB - Virtual size: 6.0MB