2024-03-14_ef9b36baa1ec3d9d37b340fa6431b3d2_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-14_ef9b36baa1ec3d9d37b340fa6431b3d2_icedid
Size

1.5MB
MD5

ef9b36baa1ec3d9d37b340fa6431b3d2
SHA1

083ea8425a3001f7b92f9d7009912d985f0d2117
SHA256

c76f7f6b3e7ccb29b98978b9c64dd6104f6ceef5571555e68fd441d6e587da6e
SHA512

57b4332fa08b66b3102f4cfa6e238543eb7c2959b4ccfb35a408a25d267d7a5183ee46e32311f967b1f02c2122f2488bf6bf80a8d2d3872a3ae10059a32cc775
SSDEEP

49152:qET6NbTpl8DM8Y2tJinRvLAzUWnDocJJKA0hWtWzGchAuvsPWpqH6Q6Yi8uq:qFpl8vY2tJiRUzUWnDocJUA0h46hEPWi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-14_ef9b36baa1ec3d9d37b340fa6431b3d2_icedid

Files

2024-03-14_ef9b36baa1ec3d9d37b340fa6431b3d2_icedid
.exe windows:5 windows x86 arch:x86

47126e977db512f99526d8f0722b615b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Zeutschel\SVN\DongleTest\Release\DongleTest.pdb

Imports

mpiwin32

MPI_SetChannel
MPI_WhatIsAvailable
MPI_SearchFirst
MPI_SearchNext
MPI_DecryptEx
MPI_SubmitEncryptionKey
MPI_EncryptEx
MPI_Close
MPI_Open
MPI_GetDeveloperId
MPI_ReadID
MPI_ErasePassword
MPI_WriteMem
MPI_ReadMem
MPI_SubmitPasswordEx
MPI_SubmitPassword
MPI_GetHash

kernel32

CreateActCtxW
ReleaseActCtx
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
LocalAlloc
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
LocalReAlloc
FileTimeToSystemTime
GetPrivateProfileIntA
GetSystemDirectoryW
lstrcpyA
GlobalFlags
lstrcmpiA
LockFile
UnlockFile
FindResourceA
SetErrorMode
GetFileAttributesExA
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetNumberFormatA
GetProfileIntA
SearchPathA
VirtualProtect
FindResourceExW
VirtualQuery
GetSystemInfo
VirtualAlloc
FreeResource
GlobalAddAtomA
GetFullPathNameA
WritePrivateProfileStringA
ResumeThread
SetThreadPriority
GlobalDeleteAtom
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
LoadLibraryExA
CompareStringA
ActivateActCtx
DeactivateActCtx
lstrcmpA
GlobalSize
GlobalLock
GlobalUnlock
LocalFree
lstrlenW
MulDiv
lstrlenA
CreateFileW
SetEnvironmentVariableA
CompareStringW
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
GetStringTypeW
LoadLibraryW
InterlockedExchange
GetConsoleMode
GetConsoleCP
SetFilePointer
GetFileAttributesA
QueryPerformanceCounter
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetCurrentThread
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleFileNameW
GetStdHandle
ExitProcess
GetModuleHandleW
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
ExitThread
HeapReAlloc
GetTimeZoneInformation
DuplicateHandle
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DecodePointer
EncodePointer
RtlUnwind
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
RaiseException
FreeLibraryAndExitThread
CreateEventA
GetCurrentProcess
GetModuleHandleA
GetTempFileNameA
InterlockedDecrement
FormatMessageA
SetEvent
CopyFileA
GetPrivateProfileStringA
GetFileSize
ReadFile
WriteFile
CreateThread
GetVersionExA
GetWindowsDirectoryA
GetVolumeInformationA
LoadLibraryA
GetProcAddress
FreeLibrary
TerminateThread
InterlockedCompareExchange
OpenThread
GetExitCodeThread
OpenProcess
GetExitCodeProcess
GetModuleFileNameA
FindFirstFileA
DeleteFileA
FindClose
GetTempPathA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
ReleaseMutex
WaitForSingleObject
OpenMutexA
GetCurrentProcessId
GetCurrentThreadId
GlobalAlloc
GlobalFree
GetTickCount
DeviceIoControl
CreateFileA
GetEnvironmentVariableA
CreateMutexA
GetLastError
CloseHandle
WideCharToMultiByte
Sleep
OutputDebugStringA
FindResourceW
LoadResource
LockResource
SizeofResource
GetCurrentDirectoryA
HeapQueryInformation

user32

DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
OffsetRect
IsRectEmpty
IntersectRect
CopyImage
DestroyMenu
GetMenuItemInfoA
InflateRect
CharUpperA
DestroyIcon
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
InvalidateRect
RealChildWindowFromPoint
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoA
SetRectEmpty
DeleteMenu
LoadCursorA
GetSysColorBrush
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
UpdateWindow
CreatePopupMenu
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
CopyRect
PtInRect
GetWindow
UnhookWindowsHookEx
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CharUpperBuffA
CopyIcon
RegisterClipboardFormatA
LoadBitmapW
GetFocus
MessageBoxA
DrawIcon
SendMessageA
IsIconic
GetClientRect
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
WaitForInputIdle
FindWindowA
GetWindowThreadProcessId
PostThreadMessageA
RegisterClassExA
NotifyWinEvent
GetAsyncKeyState
SetClassLongA
LoadMenuW
GetSystemMenu
MessageBeep
DrawStateA
DrawIconEx
DrawEdge
DrawFrameControl
ShowWindow
RegisterDeviceNotificationA
PeekMessageA
DispatchMessageA
UnregisterDeviceNotification
UnregisterClassA
DefWindowProcA
PostMessageA
EnableWindow
GetSystemMetrics
GetWindowRgn
DestroyCursor
MapDialogRect
SubtractRect
MapVirtualKeyExA
GetKeyNameTextA
GetDoubleClickTime
IsCharLowerA
SetTimer
KillTimer
LoadIconW
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetUpdateRect
FrameRect
IsClipboardFormatAvailable
SetMenuDefaultItem
CreateMenu
IsMenu
UpdateLayeredWindow
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawFocusRect
DefMDIChildProcA
DefFrameProcA
GetNextDlgGroupItem
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyA
ToAsciiEx
CreateWindowExA
CopyAcceleratorTableA
DrawMenuBar

gdi32

SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateDIBitmap
CreateFontIndirectA
CreateCompatibleBitmap
CreateRectRgnIndirect
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
GetTextExtentPoint32A
SetRectRgn
CombineRgn
PatBlt
DeleteObject
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetBkColor
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceA
SetPixelV
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
CreateBitmap
CreateDCA
CopyMetaFileA
DPtoLP
GetDeviceCaps
ExcludeClipRect

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

InitializeSecurityDescriptor
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
SetSecurityDescriptorDacl
RegEnumValueA
RegQueryValueA
RegEnumKeyA

shell32

SHGetFileInfoA
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHGetPathFromIDListA
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteA
SHGetSpecialFolderLocation

comctl32

ord17
ImageList_GetIconSize

shlwapi

PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathIsUNCA

ole32

CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoInitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
CreateStreamOnHGlobal
DoDragDrop
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoCreateInstance

oleaut32

SysAllocStringLen
VariantChangeType
VariantInit
SysStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
SysAllocString
SysFreeString
VariantClear

gdiplus

GdipDisposeImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDeleteGraphics
GdipAlloc
GdipFree

ws2_32

gethostname
gethostbyname
WSAStartup
socket
bind
ioctlsocket
connect
closesocket
getsockname
ntohs
send
recv
__WSAFDIsSet
select
inet_ntoa
WSAGetLastError
WSACleanup

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47126e977db512f99526d8f0722b615b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mpiwin32

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

ws2_32

oleacc

imm32

winmm

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 283KB - Virtual size: 282KB

.data Size: 28KB - Virtual size: 70KB

.rsrc Size: 57KB - Virtual size: 56KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 283KB - Virtual size: 282KB

.data
Size: 28KB - Virtual size: 70KB

.rsrc
Size: 57KB - Virtual size: 56KB