2024-12-19_72665429ba495c6e3f8c538a1346206e_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-12-19_72665429ba495c6e3f8c538a1346206e_icedid
Size

608KB
MD5

72665429ba495c6e3f8c538a1346206e
SHA1

acfdcd87e4664474ec43c309b964a8f2716eaadd
SHA256

0327fd36fe504244476aa3ed1bcb21b4d030196bf0404334020d871aa1ee06c0
SHA512

afb0a9edad3824c2cb5dc287d1b9411d67563b7aeef6d223f54709baddd04f663a8f1407f14cfcb2fc06f3941ca2408cbc027d8d3b04df16e4eb375aa3ef6232
SSDEEP

12288:D/211RfBpEg42IRo0wk5bHAW+J+gNs5cVEMmt6BpB/:jwEgcRRgpVEMjrB/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-12-19_72665429ba495c6e3f8c538a1346206e_icedid

Files

2024-12-19_72665429ba495c6e3f8c538a1346206e_icedid
.exe windows:4 windows x86 arch:x86

ba9e5accd02ae963043ae2f659f0d495

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptStringToBinaryA

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
QueryPerformanceCounter
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
GetVersion
lstrcmpiA
lstrlenA
CompareStringA
CompareStringW
GetStringTypeExA
SizeofResource
LockResource
LoadResource
FindResourceA
GetFileAttributesA
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
HeapSize
TerminateProcess
HeapReAlloc
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
ExitProcess
HeapFree
HeapAlloc
RtlUnwind
GetTickCount
SetErrorMode
GetOEMCP
GetCPInfo
GetProcAddress
GetModuleHandleA
SetFileTime
GetFileTime
GetTempFileNameA
GetFullPathNameA
GetDiskFreeSpaceA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
lstrcpynA
SetLastError
LocalFree
FormatMessageA
GetCurrentDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
GetShortPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetFileSize
CreateFileA
SystemTimeToFileTime
LocalFileTimeToFileTime
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalUnlock
InterlockedDecrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
CloseHandle
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
FreeLibrary
GlobalDeleteAtom
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
FreeResource
lstrcmpA
GlobalFree
MulDiv
GlobalAlloc
GlobalLock

user32

RegisterClipboardFormatA
PostThreadMessageA
CreateMenu
CopyAcceleratorTableA
SetParent
SetCapture
KillTimer
SetTimer
SetWindowRgn
DrawIcon
FindWindowA
GetMenuItemInfoA
InflateRect
DestroyIcon
DeleteMenu
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
IsZoomed
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
SetMenu
FillRect
GetDC
ReleaseDC
LoadCursorA
DestroyCursor
InvalidateRect
SetRect
RedrawWindow
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
wsprintfA
LoadMenuA
LoadAcceleratorsA
DestroyMenu
ShowWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassNameA
SetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetClientRect
GetMenu
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetLastActivePopup
ShowOwnedPopups
SetCursor
PostMessageA
PostQuitMessage
GetDesktopWindow
GetActiveWindow
LockWindowUpdate
GetDCEx
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuStringA
AppendMenuA
WindowFromPoint
GetPropA
GetTabbedTextExtentA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
UnregisterClassA
SetMenuItemBitmaps
GetFocus
GetParent
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
IsWindowVisible
CharUpperA
MessageBoxA
GetTopWindow
SendMessageA
EnableWindow
UpdateWindow
GetClassInfoExA

gdi32

SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
DeleteObject
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
RestoreDC
CreatePatternBrush
CreateSolidBrush
CreateFontIndirectA
CreateEllipticRgn
LPtoDP
Ellipse
GetNearestColor
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetTextAlign
GetTextFaceA
GetCharWidthA
GetWindowOrgEx
CreateRectRgnIndirect
SetRectRgn
CombineRgn
SaveDC
GetTextExtentPoint32A
GetTextMetricsA
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocA
GetStockObject
PatBlt
Rectangle
DPtoLP
GetViewportOrgEx
CreatePen
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDCA
GetDeviceCaps
GetCurrentPositionEx
CreateBitmap

comdlg32

PrintDlgA
GetFileTitleA
GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter
GetJobA

advapi32

RegCreateKeyA
SetFileSecurityA
GetFileSecurityA
RegCloseKey
RegSetValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
CryptAcquireContextA
RegDeleteValueA

shell32

DragQueryFileA
SHGetFileInfoA
ExtractIconA
DragFinish

comctl32

ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

ole32

OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator

oleaut32

VariantInit
VariantClear
VariantChangeType

Sections

.text
Size: 224KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 300KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba9e5accd02ae963043ae2f659f0d495

Headers

File Characteristics

Imports

crypt32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

Sections

.text Size: 224KB - Virtual size: 221KB

.rdata Size: 300KB - Virtual size: 297KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 72KB - Virtual size: 68KB

.text
Size: 224KB - Virtual size: 221KB

.rdata
Size: 300KB - Virtual size: 297KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 72KB - Virtual size: 68KB