2024-01-28_51f9a7eb6f1b795dc3ef36d515b1b22f_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-01-28_51f9a7eb6f1b795dc3ef36d515b1b22f_icedid
Size

2.1MB
MD5

51f9a7eb6f1b795dc3ef36d515b1b22f
SHA1

edc2c593593c561579e308046499284b298b6f52
SHA256

dc2c0d82b838c4cbc98717eca9763dd7cb2b1e192692a3dd95bd1c42182de591
SHA512

eb51c14dbf5872bc1fcc6bf228d4345e265c233f996b954064737909d5ba0ea6c04c42dfb9fdc311ed6a239fce30ac31906869a66f81992c7d199b3a05b8c5a2
SSDEEP

49152:8T/8AL/OOnX0eRoAq1DhElxqTjTGJFHVkhVe6:8T8AX85eykeV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-01-28_51f9a7eb6f1b795dc3ef36d515b1b22f_icedid

Files

2024-01-28_51f9a7eb6f1b795dc3ef36d515b1b22f_icedid
.exe windows:4 windows x86 arch:x86

298066b2eaa0bfae22a02d22568287c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\pdata\myproject\smixer\bin\smixer.pdb

Imports

pocofoundation

??1Random@Poco@@QAE@XZ
?seed@Random@Poco@@QAEXI@Z
??0Random@Poco@@QAE@H@Z
??1DateTime@Poco@@QAE@XZ
??0DateTime@Poco@@QAE@XZ
?next@Random@Poco@@QAEIXZ

kernel32

GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
IsBadWritePtr
GetOEMCP
GetCPInfo
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetExitCodeProcess
CreateProcessA
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedExchange
QueryPerformanceCounter
VirtualFree
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
CreateThread
ExitThread
HeapReAlloc
SetStdHandle
GetFileType
PeekNamedPipe
GetFileInformationByHandle
TerminateProcess
SetCurrentDirectoryW
SetEnvironmentVariableW
RtlUnwind
ExitProcess
GetStartupInfoW
SetErrorMode
GetCurrentDirectoryW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetProfileIntW
GetExitCodeThread
TerminateThread
EnumResourceTypesW
EnumResourceNamesW
GetLocalTime
GetDateFormatW
GetTimeFormatW
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
SizeofResource
LockResource
LoadResource
FindResourceW
WideCharToMultiByte
MultiByteToWideChar
CreateProcessW
HeapDestroy
GetProcAddress
GetModuleHandleW
HeapFree
InterlockedDecrement
GlobalUnlock
GlobalLock
GlobalAlloc
HeapCreate
HeapAlloc
InterlockedIncrement
lstrcpyW
GetLastError
Sleep
lstrlenW
GetModuleFileNameW
GetLocaleInfoW
MapViewOfFile
CloseHandle
CreateFileMappingA
CreateFileA
GetFileAttributesA
UnmapViewOfFile
GetVersionExA
lstrcmpW
lstrcatW
FreeLibrary
LoadLibraryA
GetModuleHandleA
lstrlenA
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetTickCount
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesW
LoadLibraryW
GetVersion
GlobalGetAtomNameW
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CopyFileW
GlobalSize
FormatMessageW
LocalFree
GlobalFree
SetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrcpynW
MulDiv
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetCurrentProcessId

user32

MapDialogRect
ShowOwnedPopups
PostQuitMessage
GetMenuItemInfoW
LoadMenuW
DestroyMenu
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorW
DestroyCursor
SetCursorPos
RedrawWindow
GetMessageW
TranslateMessage
ValidateRect
MapVirtualKeyW
GetKeyNameTextW
wsprintfW
GetMenuStringW
AppendMenuW
InsertMenuW
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SetRect
LoadBitmapW
SetWindowContextHelpId
ShowWindow
MoveWindow
SetWindowTextW
UnionRect
DeleteMenu
DestroyIcon
CharNextW
CopyAcceleratorTableW
LoadCursorW
GetClientRect
SendMessageW
InvalidateRect
EnableWindow
SetWindowPos
SetWindowLongW
GetWindowLongW
IsDialogMessageW
SetDlgItemTextW
GetCursorPos
ReleaseCapture
SetCursor
SetCapture
KillTimer
ClientToScreen
SetWindowRgn
InvalidateRgn
GetNextDlgGroupItem
PostThreadMessageW
WindowFromPoint
GetDCEx
LockWindowUpdate
DrawIcon
FillRect
IsRectEmpty
FindWindowW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
RegisterClipboardFormatW
CharUpperW
GetSysColorBrush
IsWindowEnabled
IsClipboardFormatAvailable
InflateRect
OffsetRect
RegisterWindowMessageW
CallWindowProcW
GetSubMenu
GetSystemMenu
SetParent
GetMenuCheckMarkDimensions
SetMenu
OpenClipboard
HideCaret
ShowCaret
SetForegroundWindow
LoadIconW
GetFocus
SetClipboardData
CloseClipboard
EmptyClipboard
MessageBoxW
MessageBeep
GetMenu
GetClipboardData
GetKeyState
GetSysColor
SetTimer
SystemParametersInfoW
UpdateWindow
GetWindow
PtInRect
CopyRect
GetSystemMetrics
GetWindowRect
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
IsWindow
SetFocus
IsChild
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
PostMessageW
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
GetParent
ScreenToClient
EqualRect
DeferWindowPos
TranslateMDISysAccel
DrawMenuBar
DefFrameProcW
GetScrollInfo
SetScrollInfo
GetClassInfoW
RegisterClassW
UnregisterClassW
GetDlgCtrlID
DefWindowProcW
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
DrawFocusRect
InvertRect
DrawFrameControl
EnableScrollBar
GetWindowRgn
IsMenu
DrawStateW
GetIconInfo
CreateIconFromResourceEx
CopyIcon
DrawIconEx
LoadImageW
CreateIconIndirect
mouse_event
GetDoubleClickTime
GetMenuDefaultItem
DestroyAcceleratorTable
CreateAcceleratorTableW
ToUnicodeEx
GetKeyboardState
GetKeyboardLayoutList
IsCharLowerW
MapVirtualKeyExW
GetKeyboardLayout
GetCursor
IsZoomed
LookupIconIdFromDirectoryEx
SendMessageTimeoutW
DrawEdge

gdi32

Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
GetDeviceCaps
CreatePen
CreateSolidBrush
CreateFontIndirectW
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
CopyMetaFileW
ExtTextOutW
CreateCompatibleBitmap
GetTextExtentPoint32W
GetTextMetricsW
StretchDIBits
CreateFontW
GetBkColor
GetTextColor
GetRgnBox
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
TextOutW
RectVisible
PtVisible
StartDocW
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetTextAlign
MoveToEx
SetTextColor
GetClipBox
SetBkColor
GetObjectW
CreateEllipticRgn
DPtoLP
Polygon
SetPixel
EnumFontFamiliesExW
StretchBlt
GetCurrentObject
CreateDIBSection
PtInRegion
GetDIBits
SetDIBits
GetBitmapBits
GetBitmapDimensionEx
Rectangle
ExtCreateRegion
GetViewportOrgEx
GetBoundsRect
CreatePolygonRgn
RoundRect
GetTextAlign
LPtoDP
Ellipse
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
CreateDCW
LineTo

comdlg32

CommDlgExtendedError
GetFileTitleW
FindTextW
ReplaceTextW
GetOpenFileNameW
GetSaveFileNameW
PrintDlgW

winspool.drv

ClosePrinter
GetJobW
OpenPrinterW
DocumentPropertiesW

advapi32

RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegCloseKey

shell32

ShellExecuteW
DragFinish
DragQueryFileW

comctl32

ImageList_Create
ImageList_Destroy
ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_GetIcon
ImageList_GetImageCount
_TrackMouseEvent
ImageList_GetIconSize
ImageList_Add
ImageList_ReplaceIcon
ImageList_DrawEx

shlwapi

PathStripToRootW
PathFindFileNameW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIAddVerbMenuW
OleUIBusyW

ole32

CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoDisconnectObject
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
OleInitialize
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
DoDragDrop

oleaut32

SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SysAllocString
VarDateFromStr
OleCreateFontIndirect
LoadTypeLi
VariantChangeTypeEx
VarUdateFromDate
VarCmp
SystemTimeToVariantTime

wininet

HttpSendRequestW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetOpenW
InternetConnectW
InternetErrorDlg

winmm

PlaySoundW

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 412KB - Virtual size: 411KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

298066b2eaa0bfae22a02d22568287c4

Headers

File Characteristics

PDB Paths

Imports

pocofoundation

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

winmm

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 276KB - Virtual size: 275KB

.data Size: 16KB - Virtual size: 42KB

.rsrc Size: 412KB - Virtual size: 411KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 276KB - Virtual size: 275KB

.data
Size: 16KB - Virtual size: 42KB

.rsrc
Size: 412KB - Virtual size: 411KB