2024-12-29_298f9ed6f57ddfe74b4387343d61fab7_icedid_luca-stealer

Sharing

Copy URL

Twitter E-mail

General

Target

2024-12-29_298f9ed6f57ddfe74b4387343d61fab7_icedid_luca-stealer
Size

2.9MB
MD5

298f9ed6f57ddfe74b4387343d61fab7
SHA1

5a1ceeab2b21c2d33cd76d16b7f4c541093ae6ae
SHA256

9d72676fc12d1380871348639efa6ef74c0ea42f9bcbee5dd4b9a5e80dc4a463
SHA512

579a0f600078d2bb2362c1004d3e30ced5de954f8306c62426323490b75d39f70d4ff0599b841048b9010ee2e04b0e3a050af9e97e957c7c66488231b6f73138
SSDEEP

49152:Nkeaz92qEkr9yBn/pjV4ywMVtsG8QQN3o/Hio3FFzc/1AFuzC8:NkJz92eron/pjV4ywMVtsOQN3o/Hio3Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-12-29_298f9ed6f57ddfe74b4387343d61fab7_icedid_luca-stealer

Files

2024-12-29_298f9ed6f57ddfe74b4387343d61fab7_icedid_luca-stealer
.exe windows:6 windows x86 arch:x86

09cb86d5f0d47b834fb6bce1d6b57e54

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
GetDriveTypeW
GetConsoleCP
SetFilePointerEx
GetStringTypeW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
ReadConsoleW
GetConsoleMode
GetACP
GetStdHandle
HeapQueryInformation
GetCommandLineA
GetFileType
SetStdHandle
FreeLibraryAndExitThread
ExitThread
CreateThread
VirtualQuery
VirtualAlloc
GetSystemInfo
GetModuleHandleExW
ExitProcess
RtlUnwind
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
GetCPInfo
GetUserDefaultLCID
GetTempFileNameW
GetProfileIntW
GetTempPathW
SearchPathW
GetWindowsDirectoryW
FindResourceExW
VerifyVersionInfoW
VerSetConditionMask
GetCurrentDirectoryW
SetErrorMode
lstrcpyW
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalGetAtomNameW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GlobalReAlloc
CompareStringA
GetCurrentThread
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
GetVersionExW
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
lstrcmpA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
SetThreadPriority
WaitForSingleObject
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryA
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
SetLastError
EncodePointer
OutputDebugStringA
SuspendThread
ReadDirectoryChangesW
ResumeThread
MoveFileW
GetTickCount
SetThreadExecutionState
SystemTimeToFileTime
DeleteFileW
TerminateThread
SetEvent
Sleep
GetPrivateProfileStringW
GetFileAttributesW
CreateMutexW
GetPrivateProfileIntW
WritePrivateProfileStringW
CreateFileW
GetModuleFileNameW
GetCommandLineW
FreeResource
WideCharToMultiByte
GetLocalTime
FindResourceW
LoadResource
CloseHandle
LockResource
HeapFree
OutputDebugStringW
MultiByteToWideChar
CreateEventW
SetEndOfFile
WaitForMultipleObjects
GetUserDefaultLangID
TerminateProcess
SizeofResource
CreateDirectoryW
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceFrequency

user32

CopyImage
LoadImageW
DestroyIcon
IsRectEmpty
IntersectRect
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
InflateRect
GetMenuItemInfoW
DestroyMenu
FillRect
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
SystemParametersInfoW
MessageBeep
IsZoomed
WaitMessage
SetCursor
ShowOwnedPopups
PostQuitMessage
CharUpperW
GetWindowThreadProcessId
OffsetRect
SendDlgItemMessageA
WindowFromPoint
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
GetActiveWindow
TranslateMessage
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
ReleaseDC
MapVirtualKeyW
GetKeyNameTextW
RemoveMenu
InsertMenuW
GetMenuState
GetMenuStringW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
SetDlgItemTextW
GetSysColorBrush
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetParent
GetClassLongW
SetWindowLongW
GetWindowLongW
PtInRect
ModifyMenuW
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
PostThreadMessageW
ToUnicodeEx
GetKeyboardLayout
EnableWindow
UnregisterClassW
SendMessageW
InvalidateRect
MessageBoxW
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
LoadCursorW
RealChildWindowFromPoint
GetAsyncKeyState
MapDialogRect
TrackMouseEvent
DeleteMenu
SetCapture
ReleaseCapture
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
CreatePopupMenu
InsertMenuItemW
GetDlgCtrlID
IsWindowVisible
UnpackDDElParam
ReuseDDElParam
SetParent
MonitorFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
SetWindowRgn
GetCursorPos
IsIconic
KillTimer
SetRect
AppendMenuW
GetDlgItem
GetClientRect
SetRectEmpty
EndDeferWindowPos
LoadIconW
MoveWindow
SetTimer
GetMenuDefaultItem
BeginDeferWindowPos
GetSubMenu
DrawIcon
GetSystemMetrics
GetWindowRect
GetWindow
PostMessageW
LoadMenuW
GetSystemMenu
DeferWindowPos
RedrawWindow
GetDC
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
IsWindow
IsMenu
IsChild
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
NotifyWinEvent
EnumChildWindows
RegisterClipboardFormatW
LockWindowUpdate
SetClassLongW
DrawEdge
DrawFrameControl
DrawFocusRect
DrawIconEx
UnionRect
GetWindowRgn
DestroyCursor
CreateMenu
GetComboBoxInfo
GetDoubleClickTime
GetUpdateRect
SubtractRect
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
IsClipboardFormatAvailable
SetMenuDefaultItem
UpdateLayeredWindow
CharUpperBuffW
FrameRect
CopyIcon
SetCursorPos
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
GetNextDlgGroupItem
EqualRect

gdi32

CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
CreateCompatibleBitmap
GetDIBits
RealizePalette
SetPixel
StretchBlt
SetRectRgn
DPtoLP
GetTextMetricsW
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
GetRgnBox
OffsetRgn
GetTextColor
CreateEllipticRgn
Ellipse
GetBkColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
RoundRect
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
GetWindowOrgEx
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetTextFaceW
SetPixelV
BitBlt
CreateBitmap
PatBlt
CreateRectRgnIndirect
GetDeviceCaps
CreateDCW
CopyMetaFileW
SetBkColor
SetTextColor
SelectObject
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
GetObjectW
DeleteObject
ScaleWindowExtEx
Escape
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteExW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHGetFileInfoW
DragQueryFileW
DragFinish
ShellExecuteW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHAppBarMessage
SHBrowseForFolderW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
PathFindFileNameW

uxtheme

DrawThemeBackground
GetThemeSysColor
GetWindowTheme
IsAppThemed
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor
GetCurrentThemeName

ole32

CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleGetClipboard
DoDragDrop
CoDisconnectObject
CoInitialize
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal

oleaut32

SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
VariantCopy
VariantClear
VarBstrFromDate
LoadTypeLi
SysAllocString
SysFreeString
VariantInit
SysAllocStringLen

gdiplus

GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipBitmapLockBits
GdipFree
GdipGetImagePixelFormat
GdipDisposeImage
GdipAlloc
GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipCloneImage
GdipGetImagePaletteSize
GdipGetImageHeight
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusShutdown
GdipGetImageWidth
GdipCreateBitmapFromScan0
GdipDrawImageI
GdipGetImagePalette

ws2_32

WSAAsyncSelect
WSACleanup
sendto
select
recvfrom
getpeername
bind
WSASetLastError
inet_addr
getsockname
gethostbyaddr
send
socket
ntohs
connect
recv
htonl
htons
WSAGetLastError
accept
WSAIoctl
closesocket
gethostbyname
listen
WSAStartup
inet_ntoa
gethostname

version

VerQueryValueW

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 771KB - Virtual size: 771KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 211KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

09cb86d5f0d47b834fb6bce1d6b57e54

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

ws2_32

version

oleacc

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 352KB - Virtual size: 352KB

.data Size: 22KB - Virtual size: 39KB

.rsrc Size: 771KB - Virtual size: 771KB

.reloc Size: 211KB - Virtual size: 212KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 352KB - Virtual size: 352KB

.data
Size: 22KB - Virtual size: 39KB

.rsrc
Size: 771KB - Virtual size: 771KB

.reloc
Size: 211KB - Virtual size: 212KB