2024-08-26_fa4a427cc2834ab0df629986a84c92e3_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-26_fa4a427cc2834ab0df629986a84c92e3_icedid
Size

1.1MB
MD5

fa4a427cc2834ab0df629986a84c92e3
SHA1

80cf41a1f018ac0e99662848baf1e2668a45aa63
SHA256

5affea0fec97e7b14d3017081153dbfec10cdd3053877ae3d3ece34ead3fb69e
SHA512

79c21d91b02e40c9647732950b0e7d41a4b767c3f1cc63a33e803a458c0ba85baeb1c4314dd4a97939c541a08464c935771b51968a13501da143cd82d127178f
SSDEEP

24576:GaKp4AnSMSWSOSeSRS7SdSmSWS1SRSzSpSTS7S9SXSNS9SoS5SKS0SzSJSISSS6U:Gj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-26_fa4a427cc2834ab0df629986a84c92e3_icedid

Files

2024-08-26_fa4a427cc2834ab0df629986a84c92e3_icedid
.exe windows:4 windows x86 arch:x86

1faae5626dec7151b55644bd1aca7ee0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
TerminateProcess
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCommandLineA
GetEnvironmentStringsW
SetHandleCount
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapFree
HeapAlloc
ExitProcess
RtlUnwind
SetErrorMode
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
FindResourceExA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WritePrivateProfileStringA
GetPrivateProfileIntA
InterlockedDecrement
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
CloseHandle
GlobalAlloc
FormatMessageA
LocalFree
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcmpW
lstrcpynA
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
GlobalFree
VirtualProtect
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
lstrlenA
lstrcpyA
lstrcatA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
FreeEnvironmentStringsW
InterlockedExchange

user32

LoadCursorA
GetSysColorBrush
DestroyMenu
SetCursor
PostQuitMessage
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
CheckDlgButton
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
IsWindow
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
MessageBoxA
GetKeyState
SetForegroundWindow
SendMessageA
EnableWindow
CopyRect
FillRect
DrawFocusRect
UpdateWindow
InvalidateRect
LockWindowUpdate
GetFocus
GetParent
GetSysColor
IsWindowVisible
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SystemParametersInfoA
GetWindowPlacement
PtInRect
GetWindow
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
wsprintfA
DrawIcon
IsIconic
GetClientRect
LoadIconA
GetSystemMetrics
IsWindowEnabled
GetDlgItem
GetWindowLongA
PostMessageA
GetWindowRect
SetFocus
GetAsyncKeyState
SetActiveWindow
GetActiveWindow
GetCapture
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
MapDialogRect
SetWindowPos
ShowWindow

gdi32

EnumFontFamiliesExA
CreateSolidBrush
GetDeviceCaps
GetStockObject
CreateBitmap
DeleteDC
ExtTextOutA
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
CreateFontIndirectA
TextOutA
RectVisible
PtVisible
BitBlt
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateCompatibleDC
GetTextExtentPoint32A
GetObjectA
Escape

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA

shell32

ShellExecuteA

comctl32

ImageList_Draw
ImageList_DrawEx
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
ImageList_Destroy
ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathFindExtensionA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 784KB - Virtual size: 809KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.brdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1faae5626dec7151b55644bd1aca7ee0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Sections

.text Size: 172KB - Virtual size: 168KB

.rdata Size: 56KB - Virtual size: 55KB

.data Size: 12KB - Virtual size: 23KB

.rsrc Size: 784KB - Virtual size: 809KB

.brdata Size: 60KB - Virtual size: 60KB

.text
Size: 172KB - Virtual size: 168KB

.rdata
Size: 56KB - Virtual size: 55KB

.data
Size: 12KB - Virtual size: 23KB

.rsrc
Size: 784KB - Virtual size: 809KB

.brdata
Size: 60KB - Virtual size: 60KB