2024-01-27_8bcc57a71859b449abb4f4ab717aceea_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-27_8bcc57a71859b449abb4f4ab717aceea_icedid
Size

3.0MB
MD5

8bcc57a71859b449abb4f4ab717aceea
SHA1

b3592ac258bc6764c52730d5abdc5bbaf89ae1c7
SHA256

ce85cae5f5efea078f87a551ceaa1294cfcfe111cbb9c8d29896a28e68b0fdff
SHA512

22fff602f425931c74072921a02a7928c62c555dc7475751479a50c2a49a2bd3fffd21e6350ec5c1235a15527008983fbed91f2072b8cfd792fbe00e1add66a3
SSDEEP

49152:jmUhQGpl6NWssd7iHZoiXdp+BOPgLcmkTA8RBvxV4LiKzX0F7Yml14WBQRECPAz8:yZGpm6i+dLTGRBvxV4BXw7Yml14WBQR9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-27_8bcc57a71859b449abb4f4ab717aceea_icedid

Files

2024-01-27_8bcc57a71859b449abb4f4ab717aceea_icedid
.exe windows:5 windows x86 arch:x86

e7438fcafc99040d1f7c395459a4b943

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundW
waveInAddBuffer
timeSetEvent
midiInGetNumDevs
midiOutGetNumDevs
midiInGetDevCapsW
midiOutGetDevCapsW
waveOutGetNumDevs
waveOutOpen
waveOutGetErrorTextW
waveOutReset
waveOutClose
waveInGetNumDevs
waveInOpen
waveInGetErrorTextW
waveInReset
waveInStart
waveInStop
waveInClose
waveInPrepareHeader
timeGetTime
waveOutPrepareHeader
waveOutWrite
midiOutOpen
midiOutReset
midiOutClose
midiInOpen
midiInStart
midiInReset
midiInStop
midiInClose
midiOutShortMsg
midiOutPrepareHeader
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
timeKillEvent
midiOutUnprepareHeader
midiOutLongMsg

imm32

ImmReleaseContext
ImmSetConversionStatus
ImmGetContext
ImmGetConversionStatus
ImmGetOpenStatus

ddraw

DirectDrawCreateEx

libmysql

mysql_select_db
mysql_free_result
mysql_close
mysql_query
mysql_store_result
mysql_fetch_row
mysql_connect

bass

BASS_GetInfo
BASS_Init
BASS_ChannelSetAttribute
BASS_ChannelPlay
BASS_PluginLoad
BASS_GetConfig
BASS_Free
BASS_PluginFree
BASS_ChannelStop
BASS_SetConfig

bassmidi

BASS_MIDI_StreamCreate
BASS_MIDI_FontInit
BASS_MIDI_StreamSetFonts
BASS_MIDI_FontFree
BASS_MIDI_FontGetInfo
BASS_MIDI_StreamEvents
BASS_MIDI_StreamEvent

kernel32

lstrlenA
GlobalGetAtomNameW
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetSystemDirectoryW
lstrcpyW
FindResourceExW
GetCurrentDirectoryW
SetErrorMode
GetWindowsDirectoryW
GetNumberFormatW
GetTempPathW
GetProfileIntW
SearchPathW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
SetEnvironmentVariableW
EncodePointer
DecodePointer
FindFirstFileExW
GetSystemTimeAsFileTime
GetTimeFormatW
GetDateFormatW
RemoveDirectoryW
HeapFree
FindNextFileW
HeapReAlloc
RtlUnwind
RaiseException
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
IsProcessorFeaturePresent
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExW
GetShortPathNameW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
GetDriveTypeW
LoadLibraryW
GetProcAddress
FreeLibrary
GetModuleFileNameW
SetCurrentDirectoryW
CreateThread
SetThreadPriority
Sleep
ExitThread
CloseHandle
LockFile
FlushFileBuffers
WriteFile
MoveFileW
DeleteFileW
GetThreadLocale
GetStringTypeExW
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameW
GetTempFileNameW
GetFileTime
SetFileTime
ReplaceFileW
lstrcmpiW
ExitProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
SystemTimeToFileTime
LeaveCriticalSection
lstrcmpW
MulDiv
ResumeThread
ReleaseActCtx
CreateActCtxW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
VirtualProtect
GetCurrentProcessId
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
InitializeCriticalSectionAndSpinCount
CopyFileW
FreeResource
GlobalSize
CreateFileW
GlobalAlloc
GlobalUnlock
GlobalLock
GetVolumeInformationW
InterlockedDecrement
InterlockedIncrement
CreateProcessW
lstrlenW
ActivateActCtx
DeactivateActCtx
SetLastError
GlobalFree
LocalFree
FormatMessageW
GetModuleHandleW
GetDiskFreeSpaceW
SetVolumeLabelW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetLastError
SetFilePointer
GetTickCount
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
WaitForSingleObject
SetEvent
ResetEvent
CreateEventW
WideCharToMultiByte
QueryPerformanceCounter
ReadFile
HeapAlloc

user32

InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
GetIconInfo
DrawIconEx
DestroyAcceleratorTable
SetClassLongW
DrawStateW
DrawFrameControl
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
LockWindowUpdate
RegisterClipboardFormatW
IsClipboardFormatAvailable
WaitMessage
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
IsCharLowerW
MapVirtualKeyExW
UpdateLayeredWindow
MonitorFromPoint
IsMenu
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
SetMenuDefaultItem
FrameRect
GetUpdateRect
CopyIcon
CharUpperBuffW
GetDoubleClickTime
SubtractRect
GetWindowRgn
GetMenuDefaultItem
GetTabbedTextExtentW
PostThreadMessageW
CreateMenu
DrawIcon
UnionRect
SetParent
GetSystemMenu
UnregisterClassW
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
CharNextW
SetLayeredWindowAttributes
EnumDisplayMonitors
CopyImage
RealChildWindowFromPoint
DestroyCursor
IsZoomed
GetMenuItemInfoW
UnpackDDElParam
ReuseDDElParam
DestroyMenu
LoadImageW
DestroyIcon
LoadAcceleratorsW
IsIconic
InsertMenuItemW
CreatePopupMenu
OffsetRect
TranslateAcceleratorW
CharUpperW
WindowFromPoint
SetRectEmpty
ShowOwnedPopups
GetMessageW
TranslateMessage
SetWindowContextHelpId
PostQuitMessage
MapDialogRect
MapVirtualKeyW
GetKeyNameTextW
GetWindowThreadProcessId
IntersectRect
InflateRect
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
GetScrollRange
SetForegroundWindow
ShowScrollBar
IsWindowVisible
ValidateRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
GetSysColor
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcW
GetWindowTextLengthW
GetWindowTextW
SetFocus
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetDlgItemInt
SendDlgItemMessageW
GetDlgItemTextW
GetDlgItemInt
CheckDlgButton
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
GetMenuItemCount
RemoveMenu
IsRectEmpty
DrawEdge
GetAsyncKeyState
ClipCursor
GetDlgCtrlID
DefWindowProcW
RegisterClassW
BringWindowToTop
MessageBeep
CopyRect
ModifyMenuW
InsertMenuW
DeleteMenu
GetSubMenu
LoadMenuW
FindWindowW
RegisterWindowMessageW
LoadIconW
MessageBoxW
OemToCharBuffA
CharToOemBuffA
FillRect
SystemParametersInfoW
SetWindowPos
GetMenu
AdjustWindowRectEx
SetCursor
GetCursorPos
GetCapture
ReleaseCapture
SetCapture
GetKeyState
ScreenToClient
SetCursorPos
ClientToScreen
DrawTextW
SetWindowLongW
GetWindowLongW
GetScrollPos
GetTitleBarInfo
SetScrollPos
SetScrollRange
RedrawWindow
SetWindowRgn
LoadBitmapW
RegisterClassExW
GetSysColorBrush
LoadCursorW
GetParent
GetFocus
PostMessageW
IsWindow
GetWindowRect
PtInRect
GetSystemMetrics
SetRect
KillTimer
GetClientRect
UpdateWindow
InvalidateRect
SetTimer
ReleaseDC
GetDC
EnableWindow
SendMessageW
GetWindow

gdi32

CreateDCW
SetDIBitsToDevice
SelectPalette
SetROP2
SetPolyFillMode
StretchDIBits
CreatePalette
RestoreDC
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
CreateEllipticRgn
GetCurrentObject
GetCharABCWidthsW
CreateDIBitmap
GetDeviceCaps
CreateHatchBrush
SetPixel
LineTo
MoveToEx
SetBkColor
CreateBitmap
Rectangle
PatBlt
CreateCompatibleBitmap
SetTextColor
SetBkMode
SetTextAlign
GetStockObject
TextOutW
GetLayout
SetLayout
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
GetTextMetricsW
PtVisible
RectVisible
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
SaveDC
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
GetObjectType
CreateRectRgnIndirect
SetRectRgn
GetMapMode
DPtoLP
GetCharWidthW
CreateFontW
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetViewportOrgEx
GetTextCharsetInfo
EnumFontFamiliesExW
GetBkColor
GetTextColor
GetRgnBox
LPtoDP
CreateDIBSection
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
GetWindowOrgEx
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateRoundRectRgn
CreatePolygonRgn
Polyline
Polygon
SetDIBColorTable
OffsetRgn
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
ScaleWindowExtEx
CopyMetaFileW
StretchBlt
SetStretchBltMode
Arc
CreateSolidBrush
GetTextExtentPoint32W
DeleteDC
BitBlt
DeleteObject
CombineRgn
CreateRectRgn
GetPixel
SelectObject
CreateCompatibleDC
GetObjectW
RemoveFontResourceW
AddFontResourceW
EnumFontFamiliesW
Ellipse
CreatePen
StartDocW
CreateFontIndirectW

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

GetJobW
OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueW
RegEnumKeyExW
RegEnumValueW
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW

shell32

DragFinish
DragAcceptFiles
SHAppBarMessage
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder
ExtractIconW
SHAddToRecentDocs
DragQueryFileW
SHGetFileInfoW
SHChangeNotify
ShellExecuteW

comctl32

ImageList_GetIconSize
ImageList_LoadImageW

shlwapi

PathIsUNCW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW

ole32

OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromDate
SysStringLen
OleCreateFontIndirect
SafeArrayDestroy
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysAllocString
VariantCopy

oledlg

OleUIBusyW

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipLoadImageFromFile
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipFree
GdipGetImageWidth
GdipGetImageHeight
GdipDrawLineI
GdipDeletePen
GdipCreatePen1
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

wininet

InternetGetLastResponseInfoW
InternetConnectW
InternetSetStatusCallbackW
InternetOpenW
InternetCloseHandle
FtpPutFileW

Exports

Exports

??1CAdmBtn@@UAE@XZ
??1CDxBtn@@UAE@XZ
??1CDxHSLed@@UAE@XZ
??1CDxTextBtn@@UAE@XZ
??1CHSBtnText@@UAE@XZ
??1CHSLed@@UAE@XZ
??1CNoteampScrollBar@@UAE@XZ
??1CSimpleSlider@@UAE@XZ
??1CTrackBtn@@UAE@XZ
??1CTrackRectBtn@@UAE@XZ
?GetPosition@CSimpleSlider@@QAEHXZ
?InitSlider@CSimpleSlider@@QAEXKKKHPA_WHHHHH@Z
?SetPosition@CSimpleSlider@@QAEXH@Z
?SetSliderMinMax@CSimpleSlider@@QAEXHH@Z

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 433KB - Virtual size: 433KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 318KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7438fcafc99040d1f7c395459a4b943

Headers

DLL Characteristics

File Characteristics

Imports

winmm

imm32

ddraw

libmysql

bass

bassmidi

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

oleacc

wininet

Exports

Exports

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 433KB - Virtual size: 433KB

.data Size: 318KB - Virtual size: 1.8MB

.rsrc Size: 22KB - Virtual size: 21KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 433KB - Virtual size: 433KB

.data
Size: 318KB - Virtual size: 1.8MB

.rsrc
Size: 22KB - Virtual size: 21KB