2025-01-12_4b158b27f34592651cf7e687455d9ad6_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2025-01-12_4b158b27f34592651cf7e687455d9ad6_icedid
Size

408KB
MD5

4b158b27f34592651cf7e687455d9ad6
SHA1

be2a0ce6895280b2969564dbb9e27e2a2d3ba9b7
SHA256

440bddc4e2106836fc51efe83fa4ef4e8824671475fcf9c0b0ad3ecf35d51647
SHA512

90a07897be6feda7396f43e46ce326644cef451aac88de84baa420f75f9757081746c31b1758181a621e21c40bf978983b9766b3ba9c6d76368de4e673e5eb91
SSDEEP

6144:HVtTsvH7NWW85J4KWB0Hex0rHnZGXXWg/13WfHofg1ELaeRlMJVBUwQhY6Nx:ji7NWWa4nMJzZhELb6+xR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-01-12_4b158b27f34592651cf7e687455d9ad6_icedid

Files

2025-01-12_4b158b27f34592651cf7e687455d9ad6_icedid
.exe windows:4 windows x86 arch:x86

c6f90b59d51022106b8c6bf2edd73655

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetSystemTimeAsFileTime
SetStdHandle
SetEnvironmentVariableA
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
InterlockedExchange
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
HeapSize
HeapReAlloc
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
GetTickCount
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
CloseHandle
InterlockedDecrement
GetCurrentThread
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
lstrcmpA
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
FreeResource
SetLastError
GlobalFree
MulDiv
GlobalAlloc
FormatMessageA
LocalFree
lstrcpynA
GlobalGetAtomNameA
GlobalAddAtomA
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalLock
GlobalUnlock
GetStringTypeExA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP

user32

DestroyIcon
LockWindowUpdate
GetDCEx
GetSysColorBrush
GetMenuItemInfoA
SetWindowRgn
DrawIcon
FindWindowA
DestroyCursor
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetCursorPos
WindowFromPoint
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
IsZoomed
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
IsChild
GetWindowTextLengthA
GetWindowTextA
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetClientRect
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
GetMenuState
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
RegisterWindowMessageA
wsprintfA
LoadMenuA
DestroyMenu
GetClassNameA
SetWindowPos
WinHelpA
SetFocus
GetActiveWindow
GetFocus
EqualRect
GetDlgItem
SetWindowLongA
GetKeyState
GetDlgCtrlID
GetMenu
UnpackDDElParam
ReuseDDElParam
LoadIconA
GetClassInfoA
GetCapture
LoadAcceleratorsA
GetParent
SetActiveWindow
IsWindowVisible
IsIconic
InsertMenuItemA
GetSubMenu
GetMenuItemID
GetMenuItemCount
CopyAcceleratorTableA
CreateMenu
PostThreadMessageA
GetTabbedTextExtentA
CreatePopupMenu
SetRectEmpty
GetLastActivePopup
BringWindowToTop
SetMenu
ShowWindow
GetWindowLongA
IsWindow
GetDesktopWindow
GetWindow
IsWindowEnabled
TranslateAcceleratorA
ReleaseCapture
PeekMessageA
ShowCursor
SetCursor
GetSysColor
SetCapture
RegisterClipboardFormatA
MessageBoxA
KillTimer
SetTimer
InvalidateRgn
ClientToScreen
GetWindowRect
PostMessageA
FillRect
IntersectRect
OffsetRect
CopyRect
EnableWindow
LoadCursorA
UpdateWindow
InvalidateRect
ReleaseDC
GetDC
InflateRect
SetRect
PtInRect
SendMessageA
CharUpperA
GetForegroundWindow

gdi32

SetROP2
GetCurrentPositionEx
CreatePatternBrush
CreateRectRgnIndirect
PatBlt
Rectangle
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CreateFontIndirectA
SetRectRgn
ScaleWindowExtEx
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetTextAlign
GetTextFaceA
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetBkColor
GetTextExtentPoint32A
GetTextMetricsA
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetObjectA
CreateFontA
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
CreatePen
GetCharWidthA
DeleteObject
SelectObject
StretchDIBits
DeleteDC
CreateDCA
GetDeviceCaps
BitBlt
DPtoLP
GetWindowOrgEx
GetViewportOrgEx
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
Polyline
Ellipse
Arc
FillRgn
LPtoDP
PtInRegion
CombineRgn
CreateEllipticRgn
CreateSolidBrush
SetStretchBltMode

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
PrintDlgA
CommDlgExtendedError

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter
GetJobA

advapi32

SetFileSecurityW
RegSetValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegCloseKey

shell32

SHGetFileInfoA
DragAcceptFiles
DragFinish
DragQueryFileA
ExtractIconA
CommandLineToArgvW

comctl32

ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragMove
ImageList_DragEnter
ImageList_DragLeave
ImageList_Draw
ImageList_GetImageInfo
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_AddMasked

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

ole32

OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator

oleaut32

SysAllocStringLen
VariantInit
VariantChangeType
VariantClear

Exports

Exports

CDqcaaFmgvsD

Sections

.text
Size: 232KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c6f90b59d51022106b8c6bf2edd73655

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 232KB - Virtual size: 228KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 100KB - Virtual size: 98KB

.text
Size: 232KB - Virtual size: 228KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 100KB - Virtual size: 98KB