2024-03-26_1e0567d64b958f4e386f2ff97cb3c537_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-26_1e0567d64b958f4e386f2ff97cb3c537_icedid
Size

3.0MB
MD5

1e0567d64b958f4e386f2ff97cb3c537
SHA1

7b4d00d19d60c16efe84d44bd7cdd7e5476adcd8
SHA256

9d4830ff2020a98b14025a180d7bd6d665654c2651040baa3d3b828f1aede420
SHA512

e6bdddd34e6e672d84bb72f8f5c6fa7ac7591ee229ce411e6afc490f4e034156bb63f938125853575bc807c5d91648c9dd5ce41d3db421683acc7faedca6abe9
SSDEEP

49152:g0D7+/9eZO9kxi4HBHZCeTxGXw4P3TPgW2bo/8MxjO+QCMn47L64cw8t9zoRjNsg:C90O9EiKHZvTWw4r4W2bo/rjO+QCNc7Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-26_1e0567d64b958f4e386f2ff97cb3c537_icedid

Files

2024-03-26_1e0567d64b958f4e386f2ff97cb3c537_icedid
.exe windows:6 windows x86 arch:x86

6787b9922781b1bcafccf4cc6e50ebd6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Projects\WorkSite8\Releases\WorkSite90\desktop\View\Win32\Release\View.pdb

Imports

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

lstrlenA
MultiByteToWideChar
LoadResource
LockResource
SizeofResource
FindResourceW
GlobalGetAtomNameW
GetPrivateProfileIntW
GetModuleHandleW
GetProcAddress
lstrlenW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetWindowsDirectoryW
FreeLibrary
LoadLibraryW
DecodePointer
RaiseException
GetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
GetTimeFormatW
GetFileAttributesW
SetLastError
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
LoadLibraryExW
LocalFree
FormatMessageW
lstrcmpiW
GetThreadUILanguage
FindClose
FindFirstFileW
GetCurrentProcess
GetCurrentThreadId
FlushInstructionCache
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
SetEnvironmentVariableA
WriteConsoleW
HeapSize
LCMapStringW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
VirtualFree
GetComputerNameW
EnumSystemLocalesW
IsValidLocale
OutputDebugStringW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
SetConsoleCtrlHandler
FatalAppExitA
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
CreateSemaphoreW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetStdHandle
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
HeapQueryInformation
VirtualQuery
VirtualAlloc
GetSystemInfo
AreFileApisANSI
GetModuleHandleExW
ExitProcess
ExitThread
CreateThread
lstrcmpW
FileTimeToSystemTime
GetDateFormatW
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
GetCommandLineW
LocalUnlock
LocalLock
FindResourceExW
VirtualProtect
SearchPathW
Sleep
GetTempPathW
GetProfileIntW
VerifyVersionInfoW
VerSetConditionMask
SetErrorMode
lstrcpyW
SetFileAttributesW
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
GetCurrentDirectoryW
GetStringTypeExW
MoveFileW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFileSize
FlushFileBuffers
DeleteFileW
CreateFileW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
GetThreadLocale
GetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileW
SetFileTime
GetTempFileNameW
GetFullPathNameW
GetFileTime
GetDiskFreeSpaceW
GetTickCount
CompareStringA
GetCurrentThread
GetVersionExW
lstrcmpA
LoadLibraryExA
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
CloseHandle
GetCurrentProcessId
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
GlobalDeleteAtom
GetModuleHandleA
FreeResource
GetSystemDirectoryW
InitializeCriticalSectionAndSpinCount
EncodePointer
OutputDebugStringA
WideCharToMultiByte
CopyFileW
GlobalFree
GlobalSize
ExpandEnvironmentStringsA

user32

DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
IsClipboardFormatAvailable
WaitMessage
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
GetIconInfo
DrawIconEx
DrawFocusRect
LockWindowUpdate
GetDCEx
GetMenuDefaultItem
CreateMenu
WindowFromDC
InSendMessage
GetTabbedTextExtentW
DrawIcon
GetNextDlgGroupItem
CopyAcceleratorTableW
PostThreadMessageW
SetParent
GetSystemMenu
IsRectEmpty
UnionRect
GetDialogBaseUnits
CopyImage
RealChildWindowFromPoint
GetSysColorBrush
DestroyCursor
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
PostQuitMessage
SetRect
WindowFromPoint
KillTimer
ShowOwnedPopups
SendDlgItemMessageA
SystemParametersInfoW
InflateRect
GetMenuItemInfoW
MapVirtualKeyW
GetKeyNameTextW
TranslateMessage
GetMessageW
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
ReuseDDElParam
UnpackDDElParam
DestroyIcon
OffsetRect
IntersectRect
SetRectEmpty
InsertMenuItemW
DestroyMenu
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
GetWindowThreadProcessId
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
ScrollWindowEx
IsWindowEnabled
DrawFrameControl
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemInt
SetDlgItemInt
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassLongW
PtInRect
EqualRect
CopyRect
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetDlgCtrlID
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
GetClassInfoW
RegisterClassW
GetMessageTime
PeekMessageW
DispatchMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
UnhookWindowsHookEx
RemoveMenu
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringW
GetWindow
GetDesktopWindow
GetWindowTextLengthW
RedrawWindow
InvalidateRgn
EndPaint
BeginPaint
ReleaseDC
GetDC
IsMenu
UpdateLayeredWindow
MonitorFromPoint
TrackMouseEvent
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
SendNotifyMessageW
ToUnicodeEx
GetKeyboardState
SetCursorPos
SetClassLongW
GetDoubleClickTime
SetMenuDefaultItem
DeleteMenu
DestroyAcceleratorTable
CreateAcceleratorTableW
ReleaseCapture
ModifyMenuW
GetWindowRgn
SubtractRect
GetUpdateRect
FrameRect
SendDlgItemMessageW
CharUpperBuffW
SetCapture
GetFocus
SetFocus
GetDlgItem
MoveWindow
ShowWindow
IsChild
GetClassInfoExW
RegisterClassExW
CallWindowProcW
FindWindowW
CharNextW
SetWindowLongW
MapWindowPoints
SetWindowTextW
GetDlgItemTextW
SetDlgItemTextW
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterWindowMessageW
CopyIcon
SetCursor
MessageBeep
InvalidateRect
SetTimer
FillRect
GetSysColor
AppendMenuW
SetWindowPos
LoadIconW
EnumChildWindows
GetWindowTextW
UpdateWindow
IsZoomed
IsIconic
wsprintfW
MessageBoxW
IsWindow
GetParent
GetWindowLongW
ScreenToClient
ClientToScreen
GetCursorPos
GetSubMenu
LoadMenuW
GetSystemMetrics
GetKeyState
SendMessageW
GetMessagePos
CharLowerW
CharUpperW
LoadStringW
LoadCursorW
DefWindowProcW
LoadImageW
LoadBitmapW
GetClassNameW
GetWindowRect
GetClientRect
SetWindowRgn
EnableWindow
PostMessageW
GetMenuBarInfo

gdi32

IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocW
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
TextOutW
ExtTextOutW
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetTextExtentPoint32W
GetTextMetricsW
GetBkColor
GetWindowExtEx
StartPage
EndPage
AbortDoc
SetAbortProc
DPtoLP
GetViewportOrgEx
Rectangle
GetMapMode
SetRectRgn
CreateFontW
GetCharWidthW
GetObjectType
GetTextColor
GetRgnBox
CreateEllipticRgn
Ellipse
CreateDIBSection
LPtoDP
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetWindowOrgEx
GetTextFaceW
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
CloseMetaFile
CreateMetaFileW
DeleteMetaFile
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
SetPixel
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
EnumFontFamiliesExW
OffsetRgn
CreateRoundRectRgn
GetCurrentObject
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
Escape
GetViewportExtEx
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
CreateBitmap
CreateDCW
CopyMetaFileW
SelectObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateSolidBrush
CreateFontIndirectW
PatBlt
CreateHalftonePalette
GetDIBColorTable
RealizePalette
CreatePalette
GetObjectW
StretchBlt
GetStockObject
GetPixel
CreateRectRgn
GetCurrentPositionEx
GetClipRgn
GetClipBox
StretchDIBits
ExcludeClipRect
CreateCompatibleDC
CreateCompatibleBitmap
EndDoc
BitBlt
UnrealizeObject
RectInRegion
CombineRgn

msimg32

AlphaBlend
TransparentBlt

comdlg32

CommDlgExtendedError

winspool.drv

GetJobW
ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegConnectRegistryW
RegGetKeySecurity
RegLoadKeyW
RegNotifyChangeKeyValue
RegEnumValueW
SetFileSecurityW
GetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegSetValueW
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegReplaceKeyW
RegRestoreKeyW
RegSaveKeyW
RegSetKeySecurity
RegUnLoadKeyW
RegFlushKey

shell32

SHGetMalloc
SHGetFileInfoW
DragAcceptFiles
DragQueryFileW
DragFinish
ExtractIconW
SHAddToRecentDocs
ShellExecuteExW
SHAppBarMessage
SHBrowseForFolderW
ShellExecuteW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW

comctl32

ord8
ord17
ImageList_AddMasked
ImageList_ReplaceIcon

shlwapi

PathRemoveExtensionW
PathFindExtensionW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
PathFindFileNameW
StrFormatKBSizeW

uxtheme

DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeText
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme

ole32

CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoCreateGuid
CoInitializeEx
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
WriteClassStg
CoFreeUnusedLibraries
StgOpenStorage
CoTreatAsClass
StringFromCLSID
OleLockRunning
OleUninitialize
OleInitialize
StringFromGUID2
OleSetMenuDescriptor
StgCreateDocfile
OleGetClipboard
CLSIDFromString
CoGetClassObject
CreateStreamOnHGlobal
CoTaskMemFree
PropVariantCopy
CoDisconnectObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
OleRegGetMiscStatus
OleRegEnumVerbs
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleRun
CreateGenericComposite
CreateItemMoniker
WriteClassStm
OleCreate
OleCreateFromData
RevokeDragDrop
RegisterDragDrop
ReadClassStg
DoDragDrop
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
OleIsRunning
OleQueryCreateFromData
OleQueryLinkFromData
GetRunningObjectTable
CreateFileMoniker
CoLockObjectExternal
GetHGlobalFromILockBytes
OleGetIconOfClass
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
CoGetMalloc
CreateOleAdviseHolder
CreateDataAdviseHolder
CLSIDFromProgID
StgIsStorageFile
CreateBindCtx
OleCreateLinkFromData

oleaut32

SysAllocStringLen
VarDecFromStr
VarBstrFromDec
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
VarDateFromStr
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
RegisterTypeLi
VariantCopy
VariantChangeType
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VariantClear
VariantInit
SysStringLen
VarUI4FromStr
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SysAllocString
SysReAllocStringLen
GetErrorInfo
SetErrorInfo
SafeArrayGetLBound
CreateErrorInfo

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 599KB - Virtual size: 598KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6787b9922781b1bcafccf4cc6e50ebd6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 599KB - Virtual size: 598KB

.data Size: 41KB - Virtual size: 72KB

.rsrc Size: 25KB - Virtual size: 25KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 599KB - Virtual size: 598KB

.data
Size: 41KB - Virtual size: 72KB

.rsrc
Size: 25KB - Virtual size: 25KB