2024-03-16_46814a75a13db1e7961fae818db2b66f_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-03-16_46814a75a13db1e7961fae818db2b66f_icedid
Size

2.7MB
MD5

46814a75a13db1e7961fae818db2b66f
SHA1

c475aae362c2ff14869e807e01352d96b970f0b2
SHA256

a1c6f260f4719020e029f2b2c6f7f4bbde86367f9eee5adab020553e990b0240
SHA512

c021ab81771b3ccb39c2512ba908cdd26477cd91abcd84d2ea0f6725f313f70ea53f8f06b3eb2d57325a99011a69688f55f88d819db00519d55adb2910aa944e
SSDEEP

24576:MHwkra+XWIIVFPDwEkSSie9aVartE36mzXzTEI:MQyIP5kSSi8TrtE5D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-16_46814a75a13db1e7961fae818db2b66f_icedid

Files

2024-03-16_46814a75a13db1e7961fae818db2b66f_icedid
.exe windows:4 windows x86 arch:x86

4d3cc35bc0070efde7f6f5c5caa4ce7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Astel\Projects\LiveViewer\bin\LiveViewer.pdb

Imports

kernel32

FreeEnvironmentStringsA
IsBadWritePtr
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetFileSize
SetFilePointer
GlobalAlloc
MulDiv
GetModuleHandleA
ReadFile
CreateFileA
WriteFile
GlobalLock
GlobalUnlock
FreeResource
GetCPInfo
GetLocalTime
GetExitCodeThread
TerminateThread
GetDiskFreeSpaceExA
GlobalMemoryStatus
GetSystemInfo
FormatMessageA
LocalFree
LoadLibraryA
GetProcAddress
FreeLibrary
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
VirtualFree
HeapCreate
MultiByteToWideChar
Beep
SetFileAttributesA
WritePrivateProfileStringA
HeapDestroy
GetStdHandle
SetHandleCount
GetTimeZoneInformation
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
QueryPerformanceCounter
SetStdHandle
HeapSize
HeapReAlloc
GetCommandLineA
CreateMutexA
GetLastError
ReleaseMutex
CreateDirectoryA
CloseHandle
DeleteCriticalSection
Sleep
GetTickCount
GetLogicalDrives
GetDriveTypeA
GetCurrentDirectoryA
SetCurrentDirectoryA
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
GetPrivateProfileIntA
GetPrivateProfileStringA
DeleteFileA
CopyFileA
WinExec
GetStartupInfoA
RemoveDirectoryA
VirtualQuery
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
GetFileType
GetSystemTimeAsFileTime
TerminateProcess
CreateThread
ExitThread
RtlUnwind
ExitProcess
SetErrorMode
GetFileTime
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetOEMCP
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
RaiseException
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
FindFirstFileA
FindNextFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
InterlockedDecrement
SetLastError
GlobalFree
GetModuleFileNameA
LocalAlloc
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange

user32

TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
CreatePopupMenu
CreateMenu
DrawEdge
FillRect
LoadBitmapA
CopyRect
SetRect
GetSysColor
GetParent
GetKeyState
GetCapture
CharUpperA
SystemParametersInfoA
SetWindowRgn
GetSystemMetrics
SetTimer
GetWindowRect
DrawIcon
SetForegroundWindow
IsIconic
ReleaseDC
ModifyMenuA
GetSubMenu
GetMenuState
AppendMenuA
GetDC
GetMenuItemCount
LoadImageA
GetClientRect
KillTimer
wsprintfA
FindWindowA
RedrawWindow
EnableWindow
CheckMenuItem
EnableMenuItem
ClientToScreen
ScreenToClient
SetCapture
LoadCursorA
LoadIconA
SendMessageA
GetCursorPos
SetCursor
GetMenuItemID
SetWindowPos
PeekMessageA
TranslateMessage
GetMessageA
DispatchMessageA
GetFocus
SetFocus
GetDlgCtrlID
UpdateWindow
IntersectRect
FrameRect
InflateRect
MessageBoxA
OffsetRect
PtInRect
GetMenuStringA
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
GetWindowLongA
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
GetDesktopWindow
UnhookWindowsHookEx
GetWindow
GetWindowPlacement
SetWindowLongA
CallWindowProcA
DefWindowProcA
UnregisterClassA
RegisterClassA
GetClassInfoA
DeferWindowPos
EqualRect
AdjustWindowRectEx
GetMenu
IsWindowVisible
GetScrollPos
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
IsChild
SendDlgItemMessageA
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassInfoExA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
WinHelpA
RegisterWindowMessageA
DestroyIcon
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindowDC
BeginPaint
EndPaint
WindowFromPoint
PostQuitMessage
ValidateRect
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatA
DestroyMenu
SetRectEmpty
CharNextA
IsRectEmpty
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
GetDCEx
LockWindowUpdate
SetParent
PostMessageA
InvalidateRect
DrawFocusRect
GetMenuItemInfoA
GetSysColorBrush
DrawIconEx
ReleaseCapture

gdi32

GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreateDIBSection
GetTextExtentPoint32W
Escape
ExtTextOutA
RectVisible
PtVisible
PatBlt
Rectangle
Ellipse
GetBkMode
CreateFontIndirectA
DPtoLP
GetDeviceCaps
DeleteDC
CreateSolidBrush
SetBkColor
CreateRoundRectRgn
GetObjectA
SetStretchBltMode
StretchDIBits
LineTo
CreatePen
EndPage
StartPage
StartDocA
ResetDCA
LPtoDP
GetPixel
CreateDCA
SetPixel
EndDoc
GetRgnBox
GetTextColor
CombineRgn
SetRectRgn
GetCharWidthA
GetStockObject
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateRectRgn
SelectClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetClipBox
SelectObject
MoveToEx
DeleteObject
CreateFontA
SetBkMode
GetTextExtentPoint32A
SetTextAlign
StretchBlt
SetTextColor
TextOutA
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap

comdlg32

PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
GetFileTitleA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleIsCurrentClipboard
CoTaskMemAlloc
CoRevokeClassObject
CoTaskMemFree
OleFlushClipboard

oleaut32

SysAllocString
SystemTimeToVariantTime
OleCreateFontIndirect
SafeArrayDestroy
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantCopy

comctl32

ImageList_Destroy
ImageList_GetIconSize
ImageList_Create
ImageList_GetIcon
ImageList_AddMasked
ord17
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_ReplaceIcon
ImageList_Draw

shlwapi

UrlUnescapeA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oledlg

ord8

ws2_32

recv
recvfrom
WSAStartup
gethostbyname
inet_ntoa
send
shutdown
sendto
connect
listen
setsockopt
__WSAFDIsSet
ntohs
closesocket
accept
socket
select
htons
inet_addr
bind
WSACleanup

wininet

InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetQueryDataAvailable
InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetOpenUrlA

winmm

timeGetTime
timeBeginPeriod
sndPlaySoundA
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInUnprepareHeader
waveInOpen
waveOutGetNumDevs
timeSetEvent
timeKillEvent

gdiplus

GdipDeleteGraphics
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipFree
GdipGetImageGraphicsContext
GdipGetDC
GdipReleaseDC
GdipAlloc
GdipCloneImage
GdiplusStartup
GdipDisposeImage

dsound

ord1

exceptionhandler

??0HPExceptionHandler@@QAE@XZ
?Create@HPExceptionHandler@@QAEJH@Z
??1HPExceptionHandler@@QAE@XZ

ddraw

DirectDrawEnumerateExA
DirectDrawCreate

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

Sections

.text
Size: 616KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d3cc35bc0070efde7f6f5c5caa4ce7b

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

oledlg

ws2_32

wininet

winmm

gdiplus

dsound

exceptionhandler

ddraw

winspool.drv

Sections

.text Size: 616KB - Virtual size: 614KB

.rdata Size: 108KB - Virtual size: 107KB

.data Size: 12KB - Virtual size: 496KB

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.text
Size: 616KB - Virtual size: 614KB

.rdata
Size: 108KB - Virtual size: 107KB

.data
Size: 12KB - Virtual size: 496KB

.rsrc
Size: 2.0MB - Virtual size: 2.0MB