2024-03-19_bcbc2b48bf476176b7440f02d2c744fb_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-19_bcbc2b48bf476176b7440f02d2c744fb_icedid
Size

13.5MB
MD5

bcbc2b48bf476176b7440f02d2c744fb
SHA1

c4b3023264666daa4228491cc945a5a9a89e18a0
SHA256

f40b9e3732f290505c8edefe67f597b3312fde647e27db3016ddf80b933a9a4d
SHA512

f7c606ad60fb8233ff581de7190489ed3fc506b6ec8e8a006d52ca59d7e058af158eeb7bbf93bf22a713d4d8dc8317e2983ba355cdc6ef71933de4d2e736bef5
SSDEEP

393216:s/PxIOTdel4Hhm3+kSuERf4BJ3nZp5KFi7XqAWumsqh5hF:0delZrWuLq5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-19_bcbc2b48bf476176b7440f02d2c744fb_icedid

Files

2024-03-19_bcbc2b48bf476176b7440f02d2c744fb_icedid
.exe windows:5 windows x86 arch:x86

3d4576727010f3877c0570778fc5dd55

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

dbcapi

ord2
ord64
ord4
ord19
ord18
ord10
ord84
ord86
ord85
ord87
ord20
ord41
ord37
ord23
ord52
ord22
ord36
ord51
ord38
ord3
ord35

crypt32

CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertVerifyTimeValidity
CertVerifyRevocation
CertFreeCertificateChain
CertCloseStore
CertFreeCertificateContext

ws2_32

WSASend
WSASocketA
shutdown
gethostname
send
recv
gethostbyname
inet_addr
gethostbyaddr
socket
htons
getservbyname
connect
WSAStartup
WSACleanup
listen
setsockopt
WSAGetLastError

rijndael

rijndael_init
rijndael_ecbdecode
rijndael_ecbencode

kernel32

GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetACP
GetCPInfo
GetOEMCP
SetErrorMode
GetProfileIntA
SearchPathA
GetTempPathA
GetWindowsDirectoryA
GetPrivateProfileStringA
VirtualProtect
FindResourceExW
EncodePointer
DecodePointer
RtlUnwind
GetTimeZoneInformation
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetDriveTypeA
FindFirstFileExA
ExitThread
CreateThread
ExitProcess
HeapReAlloc
HeapSize
HeapQueryInformation
SetStdHandle
GetFileType
SetHandleCount
IsProcessorFeaturePresent
GetLocaleInfoW
HeapCreate
LCMapStringW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
PeekNamedPipe
SetConsoleCtrlHandler
GetDriveTypeW
GetStringTypeW
CompareStringW
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
lstrcmpA
GetModuleHandleW
GetSystemDirectoryW
lstrcpyA
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
FindNextFileA
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExA
GetShortPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
MoveFileA
GlobalReAlloc
GetThreadLocale
GetStringTypeExA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
CompareStringA
LoadLibraryW
ActivateActCtx
DeactivateActCtx
lstrcmpW
FindResourceA
FreeResource
SuspendThread
GetCurrentThreadId
ResumeThread
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
ReleaseMutex
TlsGetValue
LocalAlloc
GetDiskFreeSpaceA
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
GetFullPathNameW
GetFullPathNameA
GetCurrentDirectoryW
GetStdHandle
DuplicateHandle
CreateFileW
GetVersionExA
IsValidCodePage
IsDBCSLeadByteEx
GetCurrentProcessId
GetComputerNameA
DeviceIoControl
LocalFree
FormatMessageA
InitializeCriticalSection
TerminateThread
RemoveDirectoryA
DeleteFileA
GetPriorityClass
SetPriorityClass
GetSystemTime
GetDateFormatA
GetTimeFormatA
WaitForSingleObject
ResetEvent
SetEvent
CreateEventA
RaiseException
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
lstrlenW
GetModuleFileNameA
CopyFileA
SetThreadPriority
lstrlenA
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
MulDiv
GetTickCount
GetLocalTime
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileInformationByHandle
GetFileSize
FileTimeToSystemTime
WriteFile
SetFileTime
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
CloseHandle
CreateFileA
SetFilePointer
InterlockedDecrement
MultiByteToWideChar
LoadLibraryA
GetLastError
GetProcAddress
FreeLibrary
SetLastError
GetCurrentProcess
IsWow64Process
Sleep
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceW
GetTempFileNameA
ReplaceFileA
lstrcmpiA
GetUserDefaultLCID
QueryPerformanceFrequency
OpenProcess
GetVersion
GlobalMemoryStatus
FlushConsoleInputBuffer
CreatePipe
ReadConsoleInputA
SetConsoleMode
GetExitCodeProcess
CreateProcessA
GetNumberFormatA

user32

EnumChildWindows
GetUpdateRect
SubtractRect
InvertRect
HideCaret
GetWindowRgn
IsCharLowerA
MapVirtualKeyExA
UpdateLayeredWindow
EnableScrollBar
UnionRect
LockWindowUpdate
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
LoadAcceleratorsW
ShowOwnedPopups
CharNextA
GetMenuItemInfoA
SetRect
DrawFrameControl
SetLayeredWindowAttributes
EnumDisplayMonitors
GetIconInfo
CopyImage
DrawIconEx
GetNextDlgGroupItem
DrawFocusRect
IsRectEmpty
GetSysColorBrush
SetClassLongA
MessageBeep
LoadMenuW
LoadCursorW
DestroyCursor
MapVirtualKeyA
GetKeyNameTextA
IsMenu
GetAsyncKeyState
MonitorFromPoint
SystemParametersInfoA
IsZoomed
GetSystemMenu
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
DestroyIcon
LoadAcceleratorsA
InsertMenuItemA
OffsetRect
SetRectEmpty
TranslateAcceleratorA
DestroyAcceleratorTable
NotifyWinEvent
SetWindowRgn
CharUpperA
GetSystemMetrics
GetWindowThreadProcessId
IntersectRect
InflateRect
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
TabbedTextOutA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetTabbedTextExtentW
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetForegroundWindow
ShowScrollBar
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
PtInRect
GetWindow
SetActiveWindow
CreateDialogIndirectParamA
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetClassNameA
LoadBitmapW
UpdateWindow
FillRect
DrawStateA
WaitMessage
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
GetKeyState
ValidateRect
GetMenuState
GetMenuItemID
InsertMenuA
GetSubMenu
RemoveMenu
DrawEdge
LoadIconW
RedrawWindow
CreateMenu
DestroyWindow
SendMessageTimeoutA
BringWindowToTop
IsIconic
GetMenuStringA
TranslateMessage
DispatchMessageA
DrawTextA
GetSysColor
SetCursorPos
SetParent
ModifyMenuA
CheckMenuItem
LoadCursorA
SetCursor
CopyRect
GetDoubleClickTime
CopyIcon
FrameRect
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
DrawIcon
InvalidateRgn
UnregisterClassA
CharUpperBuffA
TranslateMDISysAccel
PostQuitMessage
LoadBitmapA
SetCapture
ClientToScreen
GetMenuItemCount
DeleteMenu
ReleaseCapture
AppendMenuA
CreatePopupMenu
GetParent
SetScrollRange
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
GetFocus
ToAsciiEx
GetScrollRange
SetScrollPos
GetScrollPos
SetTimer
ReleaseDC
GetDC
ScreenToClient
GetCursorPos
WindowFromPoint
PeekMessageA
GetWindowRect
LoadIconA
KillTimer
IsWindowVisible
InvalidateRect
PostMessageA
SendMessageA
EnableWindow
GetClientRect
LoadImageA
GetDesktopWindow
wsprintfA
PostThreadMessageA
FindWindowA
CopyAcceleratorTableA
GetMenuDefaultItem
IsClipboardFormatAvailable
GetMonitorInfoA
SetMenuDefaultItem
GetUserObjectInformationW
GetProcessWindowStation
GetMessagePos
RealChildWindowFromPoint

gdi32

DeleteObject
DeleteDC
GetObjectA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
Rectangle
StartDocA
StartPage
EndPage
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
GetLayout
DPtoLP
CreateRoundRectRgn
CreateDIBSection
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
CreateEllipticRgn
GetCurrentObject
Polyline
SetAbortProc
GetViewportOrgEx
GetCharWidthA
StretchDIBits
RoundRect
OffsetRgn
GetRgnBox
LPtoDP
SetDIBColorTable
GetDIBits
RealizePalette
StretchBlt
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
GetWindowOrgEx
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
EnumFontFamiliesExA
SetPixelV
SetPixel
Polygon
SetTextAlign
MoveToEx
Ellipse
GetTextColor
GetBkColor
CreateFontIndirectA
GetDeviceCaps
CreatePolygonRgn
GetTextExtentPoint32A
Escape
ExtTextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
CreateCompatibleBitmap
CreateFontA
CreatePen
BitBlt
SelectObject
CreateCompatibleDC
CreateDIBitmap
CreateSolidBrush
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
CreateDCA
CopyMetaFileA
TextOutA
EndDoc
AbortDoc
SetLayout

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA
GetJobA

advapi32

GetFileSecurityA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegEnumKeyExA
RegSetValueA
RegOpenKeyExW
RegCreateKeyExA
RegEnumValueA
GetUserNameA
SetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA

shell32

SHBrowseForFolderA
SHGetFileInfoA
DragFinish
DragQueryFileA
SHAppBarMessage
SHAddToRecentDocs
SHGetDesktopFolder
ExtractIconA
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathRemoveExtensionA
PathFindExtensionA
PathFindFileNameA

ole32

CoInitializeEx
CoUninitialize
CoTaskMemFree
StringFromCLSID
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoInitialize
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleLockRunning
CoCreateInstance
OleRun
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoGetClassObject
StgCreateDocfileOnILockBytes
CreateStreamOnHGlobal
OleDestroyMenuDescriptor
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoRegisterMessageFilter
CoRevokeClassObject

oleaut32

SystemTimeToVariantTime
VarBstrFromDate
SafeArrayCreate
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
OleCreateFontIndirect
VariantCopy
SysAllocStringByteLen
VariantTimeToSystemTime
VariantInit
DispCallFunc
SysStringLen
LoadTypeLi
LoadRegTypeLi
VariantClear
SysAllocString
SysFreeString
SafeArrayGetUBound
SysAllocStringLen
VariantChangeType
GetErrorInfo
SysStringByteLen
SafeArrayGetElement
SafeArrayDestroy

oledlg

ord8

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdiplusShutdown
GdipSaveImageToFile
GdipDisposeImage
GdipFree
GdipCloneImage
GdipAlloc
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipDeleteGraphics
GdipGetImageWidth
GdipGetImageHeight

wsock32

closesocket
htonl
WSAAsyncSelect
recvfrom
WSASetLastError
getpeername
getsockname
bind
select
accept
ntohs
inet_ntoa
getsockopt
__WSAFDIsSet
sendto

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

iphlpapi

GetAdaptersInfo

wininet

InternetCrackUrlA
InternetCloseHandle
InternetReadFile
HttpSendRequestA
HttpAddRequestHeadersA
InternetSetOptionA
InternetQueryOptionA
HttpOpenRequestA
InternetConnectA
InternetOpenA

psapi

GetProcessMemoryInfo

Sections

.text
Size: 6.7MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3d4576727010f3877c0570778fc5dd55

Headers

DLL Characteristics

File Characteristics

Imports

winmm

dbcapi

crypt32

ws2_32

rijndael

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

wsock32

oleacc

imm32

iphlpapi

wininet

psapi

Sections

.text Size: 6.7MB - Virtual size: 6.7MB

.rdata Size: 4.2MB - Virtual size: 4.2MB

.data Size: 1.2MB - Virtual size: 1.4MB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 6.7MB - Virtual size: 6.7MB

.rdata
Size: 4.2MB - Virtual size: 4.2MB

.data
Size: 1.2MB - Virtual size: 1.4MB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB