2024-09-06_03d51442da85ad8edd12396d2376a054_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-06_03d51442da85ad8edd12396d2376a054_icedid
Size

6.8MB
MD5

03d51442da85ad8edd12396d2376a054
SHA1

702d71d1099587e451bbf5866d86decb561a6a89
SHA256

a5d9443e06b6300580982b28c611f23d4e6fad595ea590a819dd05ba24bd3d98
SHA512

c49fb12f69cd15201f0ac8c877a4aa52cf3217f5f5e8bb0b490794166d6380b4be84c153d357975158a873bbe738678f35aecf687a20010228cf3512acab7fd8
SSDEEP

196608:SDTgtxBoo5oooooooToooooooooHotoooJoooooYoooooouoooJojon7tzOJOC:XjOOC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-06_03d51442da85ad8edd12396d2376a054_icedid

Files

2024-09-06_03d51442da85ad8edd12396d2376a054_icedid
.exe windows:4 windows x86 arch:x86

c1a33754acec531fdff94989a697f63a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetCurrentProcessId
HeapReAlloc
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
OutputDebugStringA
GetCommandLineA
GetStartupInfoA
GetDateFormatA
GetTimeFormatA
TerminateProcess
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
SetErrorMode
LocalLock
LocalUnlock
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
InterlockedExchange
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
MoveFileA
GetOEMCP
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
InterlockedIncrement
GlobalFlags
FileTimeToSystemTime
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
WaitForSingleObject
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetModuleFileNameA
GlobalReAlloc
GetCurrentThreadId
GlobalGetAtomNameA
GetTimeZoneInformation
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
GetModuleHandleA
SetLastError
FormatMessageA
lstrcpynA
FreeResource
MulDiv
CreateThread
SetThreadPriority
LocalAlloc
LocalHandle
LocalFree
GetCurrentDirectoryA
WritePrivateProfileStringA
lstrcmpA
lstrcpyA
GetProfileStringA
GlobalFree
GlobalAlloc
FreeLibrary
Sleep
CreateProcessA
LoadLibraryA
SetProcessAffinityMask
CreateMutexA
GetPrivateProfileStringA
GlobalLock
GlobalUnlock
GetCurrentProcess
SetPriorityClass
GetStringTypeW
GetStringTypeA
HeapSize
GetFileType
SetStdHandle
MoveFileExA
GetSystemDirectoryA
ReleaseSemaphore
CreateSemaphoreA
CompareStringW
CompareStringA
GetLastError
GetTickCount
CreateFileA
WriteFile
CloseHandle
lstrlenW
GetCPInfo
lstrlenA
lstrcmpiA
MultiByteToWideChar
GetVersion
GetLocalTime
GetProcAddress
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
SetUnhandledExceptionFilter

user32

ReleaseCapture
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
DestroyMenu
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
wsprintfA
EndPaint
BeginPaint
GetWindowDC
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
CopyAcceleratorTableA
SetFocus
IsChild
GetWindowTextLengthA
GetForegroundWindow
InvalidateRgn
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetNextDlgGroupItem
MessageBeep
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
GetScrollPos
SetForegroundWindow
IsWindowVisible
GetMenu
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetParent
RegisterClipboardFormatA
PostThreadMessageA
SetScrollInfo
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
IntersectRect
GetWindowPlacement
GetMenuStringA
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetDCEx
LockWindowUpdate
SetCapture
GetWindowTextA
CharNextA
EndDialog
SendDlgItemMessageA
UpdateWindow
SetWindowPos
AnimateWindow
LoadIconA
GetFocus
KillTimer
SetTimer
IsIconic
GetSystemMenu
DrawIcon
GetWindow
MessageBoxA
CharUpperA
LoadCursorA
SetRectEmpty
PtInRect
IsRectEmpty
LoadImageA
PostMessageA
SetCursor
DestroyCursor
GetWindowLongA
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetWindowRect
FrameRect
OffsetRect
InflateRect
GetIconInfo
CreateIconIndirect
IsMenu
DrawStateA
DrawFocusRect
SendMessageA
GetClientRect
GetMenuItemInfoA
GetSysColorBrush
GetSystemMetrics
SystemParametersInfoA
GetSysColor
DrawIconEx
DestroyIcon
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetDesktopWindow
ReleaseDC
GetDC
ModifyMenuA
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
CreatePopupMenu
CreateMenu
DrawEdge
FillRect
LoadBitmapA
CopyRect
SetRect
EnableWindow
SetWindowsHookExA

gdi32

GetRgnBox
GetTextColor
CombineRgn
SetRectRgn
GetBkColor
SetViewportExtEx
GetCharWidthA
StretchDIBits
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
GetTextExtentPoint32W
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
RestoreDC
SaveDC
GetClipBox
AbortDoc
CreateRectRgnIndirect
SetWindowOrgEx
CreatePatternBrush
GetTextMetricsA
DPtoLP
GetMapMode
SetMapMode
SetStretchBltMode
CreateBitmap
SetBkColor
GetStockObject
SetBkMode
SetTextColor
StretchBlt
CreateDIBSection
CreateSolidBrush
DeleteDC
DeleteObject
EndDoc
EndPage
SelectObject
TextOutA
StartPage
StartDocA
CreateDCA
CreateFontA
CreatePen
CreateFontIndirectA
CreateCompatibleBitmap
GetObjectA
CreateCompatibleDC
GetDeviceCaps
GetBkMode
Ellipse
Rectangle
PatBlt
BitBlt
GetPixel
SetPixel
GetTextExtentPoint32A
PtVisible
RectVisible
ExtTextOutA
Escape
ScaleViewportExtEx

comdlg32

GetFileTitleA
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA

winspool.drv

OpenPrinterA
ClosePrinter
EnumPrintersA
DocumentPropertiesA

advapi32

CryptHashData
RegOpenKeyA
CryptAcquireContextA
CryptCreateHash
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA

shell32

ShellExecuteExA

comctl32

ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Draw
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Create
ImageList_GetImageCount

shlwapi

PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
CoRegisterMessageFilter
OleFlushClipboard

oleaut32

OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
SysAllocString

ws2_32

WSACleanup
WSAStartup

gdiplus

GdipAlloc
GdipCloneBrush
GdipSetSmoothingMode
GdiplusStartup
GdiplusShutdown
GdipFillPieI
GdipDeleteBrush
GdipFillRectangleI
GdipCreateFromHDC
GdipCreateSolidFill
GdipDeleteGraphics
GdipFree

odbc32

ord8
ord17
ord41
ord10
ord2
ord1
ord23
ord15
ord9
ord14
ord3
ord61
ord16
ord20
ord5
ord48
ord49
ord11
ord19
ord12
ord46
ord18
ord13
ord59
ord43
ord68
ord44
ord45
ord50
ord51

winmm

PlaySoundA

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA

hid

HidD_GetPreparsedData
HidP_GetCaps
HidD_FreePreparsedData
HidD_SetFeature
HidD_GetHidGuid
HidD_GetAttributes
HidD_GetFeature

phonic_ubox

ord26
ord1
ord6
ord2
ord8
ord33

mscoree

_CorExeMain

Sections

.text
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1a33754acec531fdff94989a697f63a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

gdiplus

odbc32

winmm

setupapi

hid

phonic_ubox

mscoree

Sections

.text Size: 568KB - Virtual size: 567KB

.rdata Size: 144KB - Virtual size: 143KB

.data Size: 12KB - Virtual size: 3.6MB

.rsrc Size: 6.1MB - Virtual size: 6.1MB

.text
Size: 568KB - Virtual size: 567KB

.rdata
Size: 144KB - Virtual size: 143KB

.data
Size: 12KB - Virtual size: 3.6MB

.rsrc
Size: 6.1MB - Virtual size: 6.1MB