2024-02-03_e18ade2db811406522493e9bae1d0ba6_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-03_e18ade2db811406522493e9bae1d0ba6_icedid
Size

552KB
MD5

e18ade2db811406522493e9bae1d0ba6
SHA1

d55c9a41c24f63dde38d3478afc10ad959e25f4c
SHA256

0742d19523bf7580d90423815a7551fddb5f9bf47894f7cb8e6295de31a76afd
SHA512

d67a5f71a4ce794dc120cf33fe83bfb3e52aeeba076a669d53edb6a7089cb1d55c70b6bb633840ad72c526b39771cd1cdab287cd3acc063048242ae691f37e9e
SSDEEP

12288:gKt0y1CkXnlabY1xCX4vQzoG+XXSN6/8jn05/T:vt0y1BncAxpmdgXW0N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-03_e18ade2db811406522493e9bae1d0ba6_icedid

Files

2024-02-03_e18ade2db811406522493e9bae1d0ba6_icedid
.exe windows:4 windows x86 arch:x86

b333d1d15c4472dadcc31d0f836ce59a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\src\MusicExchange11\mcmimeman\Release\mcmimeman.pdb

Imports

kernel32

SetLastError
GetLastError
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
InterlockedExchange
CompareStringA
FreeLibrary
LoadLibraryA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
LoadResource
LockResource
SizeofResource
SetEnvironmentVariableA
SetStdHandle
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetOEMCP
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
LCMapStringA
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
HeapSize
EnterCriticalSection
LeaveCriticalSection
GetFileTime
FindClose
GetCurrentThreadId
WriteFile
SetFilePointer
CloseHandle
SetFileTime
UnmapViewOfFile
WaitForSingleObject
GetCurrentProcess
GetTickCount
LocalFree
lstrlenA
Process32Next
Process32First
CreateToolhelp32Snapshot
Sleep
MapViewOfFile
GetCurrentProcessId
GlobalUnlock
GlobalLock
GlobalAlloc
ReadFile
GetFileSize
GlobalFree
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersion
GetVersionExA
GlobalDeleteAtom
FreeResource
EnumResourceLanguagesW
ConvertDefaultLocale
lstrcmpiA
lstrcmpA
GetCurrentThread
InterlockedIncrement
GlobalSize
MulDiv
InterlockedDecrement
ReleaseMutex
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
GlobalFlags
LocalAlloc
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
LocalFileTimeToFileTime
SetErrorMode
RtlUnwind
HeapFree
ExitProcess
TerminateProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery

user32

IsIconic
GetDesktopWindow
GetWindowRect
DestroyIcon
InvalidateRect
DestroyMenu
CreateMenu
IntersectRect
SetRectEmpty
CopyRect
IsWindowEnabled
GetWindow
ShowWindow
SetMenu
BringWindowToTop
GetLastActivePopup
CreatePopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetActiveWindow
ReleaseCapture
GetCapture
SetCursor
ReuseDDElParam
UnpackDDElParam
GetMenu
GetDlgCtrlID
GetKeyState
GetDlgItem
GetActiveWindow
SetFocus
GetSysColor
PtInRect
GetSystemMetrics
GetWindowPlacement
SystemParametersInfoA
DeferWindowPos
ScreenToClient
AdjustWindowRectEx
SetScrollRange
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
EnumWindows
BeginDeferWindowPos
UpdateWindow
SendDlgItemMessageA
CallNextHookEx
MoveWindow
GetMenuCheckMarkDimensions
CheckMenuItem
EnableMenuItem
GetMenuState
SetMenuItemBitmaps
InflateRect
GetCursorPos
GetParent
EndDialog
GetNextDlgTabItem
RemoveMenu
ShowOwnedPopups
ValidateRect
MapDialogRect
SetWindowContextHelpId
InSendMessage
WindowFromDC
SetParent
IsRectEmpty
SetRect
FillRect
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
GetSysColorBrush
SetCapture
WindowFromPoint
KillTimer
GetDCEx
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
GetTabbedTextExtentA
LockWindowUpdate
IsWindow
GetDC
GetClientRect
ReleaseDC
EqualRect
OffsetRect
TranslateMessage
EndDeferWindowPos
GetFocus
IsWindowVisible
PostQuitMessage
SetTimer
MessageBoxA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
IsChild
SetWindowPos
ClipCursor

comctl32

ImageList_Destroy
ImageList_GetImageInfo
ImageList_Draw
ord17

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW

ole32

CreateGenericComposite
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateDataAdviseHolder
CreateOleAdviseHolder
CoGetMalloc
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
OleRun
GetRunningObjectTable
CreateFileMoniker
CreateItemMoniker
OleIsRunning
CoDisconnectObject
OleRegGetMiscStatus
OleRegEnumVerbs
OleInitialize
OleUninitialize
CLSIDFromProgID
StringFromGUID2
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CreateBindCtx
CoGetClassObject
OleRegGetUserType
WriteClassStg
CoRevokeClassObject
CoRegisterClassObject
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CLSIDFromString
StringFromCLSID
CoTaskMemFree
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleLockRunning
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

OleCreateFontIndirect
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysStringLen
SysStringByteLen
VariantInit
VariantChangeType
SysAllocString
SysFreeString
VariantClear
SysAllocStringLen

advapi32

SetFileSecurityW
GetFileSecurityW
RegCloseKey

gdi32

CreateBitmap
GetTextAlign
GetRgnBox
SetBkColor
SetTextColor
CreateCompatibleDC
CreateCompatibleBitmap
Escape
RectVisible
PtVisible
GetStockObject
SelectObject
GetClipBox
SetBrushOrgEx
GetTextColor
UnrealizeObject
Rectangle
GetBkColor
PatBlt
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateSolidBrush
CreatePen
CreatePatternBrush
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
MoveToEx
SetMapMode
SetROP2
SetBkMode
RestoreDC
SaveDC
DeleteDC
DeleteMetaFile
CloseMetaFile
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
DPtoLP
GetDeviceCaps

shell32

DragFinish
SHGetSpecialFolderLocation
SHGetMalloc

winspool.drv

ClosePrinter

Sections

.text
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b333d1d15c4472dadcc31d0f836ce59a

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

comctl32

shlwapi

ole32

oleaut32

advapi32

gdi32

shell32

winspool.drv

Sections

.text Size: 364KB - Virtual size: 363KB

.rdata Size: 112KB - Virtual size: 110KB

.data Size: 16KB - Virtual size: 32KB

.rsrc Size: 56KB - Virtual size: 55KB

.text
Size: 364KB - Virtual size: 363KB

.rdata
Size: 112KB - Virtual size: 110KB

.data
Size: 16KB - Virtual size: 32KB

.rsrc
Size: 56KB - Virtual size: 55KB