2024-03-27_31efe89fc331b9c31a5a14b71017b9eb_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-03-27_31efe89fc331b9c31a5a14b71017b9eb_icedid
Size

2.7MB
MD5

31efe89fc331b9c31a5a14b71017b9eb
SHA1

408c083d58bb375f9a81e6314ba66f11614ea910
SHA256

a03ec6592a9e2ef72e1456eebe80b9fee15be4d3afcf0e0a00e3b2fcf4dc27fd
SHA512

c7223f7c3be35f11f5102e0eeceb0a1f60f4d42b614ae75746ec422c47e89b4faeecdcffc429f5167407489c975c1429ab3e414862ee7e640e40155782ee753d
SSDEEP

24576:1ZEb94QszceUxRJRCC7D6e7L4phrL2IzXzTEI:D3clRJRCCyUL4prD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-27_31efe89fc331b9c31a5a14b71017b9eb_icedid

Files

2024-03-27_31efe89fc331b9c31a5a14b71017b9eb_icedid
.exe windows:4 windows x86 arch:x86

5c5126fe1c09ca8ca89e1964527d6543

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Astel\Projects\LiveViewer\bin\LiveViewer.pdb

Imports

kernel32

FreeEnvironmentStringsA
IsBadWritePtr
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetFileSize
SetFilePointer
GlobalAlloc
MulDiv
GetModuleHandleA
ReadFile
CreateFileA
WriteFile
GlobalLock
GlobalUnlock
FreeResource
GetCPInfo
GetLocalTime
GetExitCodeThread
TerminateThread
GetDiskFreeSpaceExA
GlobalMemoryStatus
GetSystemDirectoryA
GetSystemInfo
FormatMessageA
LocalFree
LoadLibraryA
GetProcAddress
FreeLibrary
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
VirtualFree
HeapCreate
MultiByteToWideChar
Beep
SetFileAttributesA
WritePrivateProfileStringA
HeapDestroy
GetStdHandle
SetHandleCount
GetTimeZoneInformation
LCMapStringW
LCMapStringA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
QueryPerformanceCounter
SetStdHandle
HeapSize
HeapReAlloc
GetCommandLineA
CreateMutexA
GetLastError
ReleaseMutex
CreateDirectoryA
DeleteCriticalSection
Sleep
GetTickCount
GetLogicalDrives
GetDriveTypeA
GetCurrentDirectoryA
SetCurrentDirectoryA
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
GetPrivateProfileIntA
CloseHandle
GetPrivateProfileStringA
DeleteFileA
CopyFileA
WinExec
GetStartupInfoA
RemoveDirectoryA
VirtualQuery
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
GetFileType
GetSystemTimeAsFileTime
TerminateProcess
CreateThread
ExitThread
RtlUnwind
ExitProcess
SetErrorMode
GetFileTime
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetOEMCP
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
RaiseException
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
FindFirstFileA
FindNextFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
InterlockedDecrement
SetLastError
GlobalFree
MoveFileExA
GetModuleFileNameA
LocalAlloc
LocalLock
LocalUnlock
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange

user32

TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
CreatePopupMenu
CreateMenu
DrawEdge
FillRect
LoadBitmapA
CopyRect
SetRect
GetSysColor
GetParent
GetKeyState
GetCapture
CharUpperA
SystemParametersInfoA
SetWindowRgn
GetSystemMetrics
SetTimer
GetWindowRect
DrawIcon
SetForegroundWindow
IsIconic
ReleaseDC
ModifyMenuA
GetSubMenu
GetMenuState
AppendMenuA
GetDC
GetMenuItemCount
LoadImageA
GetClientRect
KillTimer
wsprintfA
FindWindowA
RedrawWindow
EnableWindow
CheckMenuItem
EnableMenuItem
ClientToScreen
ScreenToClient
SetCapture
LoadCursorA
LoadIconA
SendMessageA
GetCursorPos
SetCursor
GetMenuItemID
SetWindowPos
PeekMessageA
TranslateMessage
GetMessageA
DispatchMessageA
GetFocus
SetFocus
GetDlgCtrlID
UpdateWindow
IntersectRect
FrameRect
InflateRect
MessageBoxA
OffsetRect
PtInRect
GetMenuStringA
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
GetWindowLongA
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
GetDesktopWindow
UnhookWindowsHookEx
GetWindow
GetWindowPlacement
SetWindowLongA
CallWindowProcA
DefWindowProcA
UnregisterClassA
RegisterClassA
GetClassInfoA
DeferWindowPos
EqualRect
AdjustWindowRectEx
GetMenu
IsWindowVisible
GetScrollPos
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
IsChild
SendDlgItemMessageA
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassInfoExA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
WinHelpA
RegisterWindowMessageA
DestroyIcon
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindowDC
BeginPaint
EndPaint
WindowFromPoint
PostQuitMessage
ValidateRect
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatA
DestroyMenu
SetRectEmpty
CharNextA
IsRectEmpty
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
GetDCEx
LockWindowUpdate
SetParent
PostMessageA
InvalidateRect
DrawFocusRect
GetMenuItemInfoA
GetSysColorBrush
DrawIconEx
ReleaseCapture

gdi32

GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreateDIBSection
GetTextExtentPoint32W
Escape
ExtTextOutA
RectVisible
PtVisible
PatBlt
Rectangle
Ellipse
GetBkMode
CreateFontIndirectA
DPtoLP
GetDeviceCaps
DeleteDC
CreateSolidBrush
SetBkColor
CreateRoundRectRgn
GetObjectA
SetStretchBltMode
StretchDIBits
LineTo
CreatePen
EndPage
StartPage
StartDocA
ResetDCA
LPtoDP
GetPixel
CreateDCA
SetPixel
EndDoc
GetRgnBox
GetTextColor
CombineRgn
SetRectRgn
GetCharWidthA
GetStockObject
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateRectRgn
SelectClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetClipBox
SelectObject
MoveToEx
DeleteObject
CreateFontA
SetBkMode
GetTextExtentPoint32A
SetTextAlign
StretchBlt
SetTextColor
TextOutA
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap

comdlg32

PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
GetFileTitleA

advapi32

RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleIsCurrentClipboard
CoTaskMemAlloc
CoRevokeClassObject
CoTaskMemFree
OleFlushClipboard

oleaut32

SysAllocString
SystemTimeToVariantTime
OleCreateFontIndirect
SafeArrayDestroy
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantCopy

odbc32

ord11
ord4
ord13
ord24
ord75
ord41
ord26
ord31
ord9

comctl32

ImageList_Destroy
ImageList_GetIconSize
ImageList_Create
ImageList_GetIcon
ImageList_AddMasked
ord17
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_ReplaceIcon
ImageList_Draw

shlwapi

PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oledlg

ord8

ws2_32

recv
recvfrom
WSAStartup
gethostbyname
inet_ntoa
send
shutdown
sendto
connect
listen
setsockopt
__WSAFDIsSet
ntohs
closesocket
accept
socket
select
htons
inet_addr
bind
WSACleanup

wininet

InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback

winmm

timeGetTime
timeBeginPeriod
sndPlaySoundA
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInUnprepareHeader
waveInOpen
waveOutGetNumDevs
timeSetEvent
timeKillEvent

gdiplus

GdipDeleteGraphics
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipFree
GdipGetImageGraphicsContext
GdipGetDC
GdipReleaseDC
GdipAlloc
GdipCloneImage
GdiplusStartup
GdipDisposeImage

dsound

ord1

exceptionhandler

??0HPExceptionHandler@@QAE@XZ
?Create@HPExceptionHandler@@QAEJH@Z
??1HPExceptionHandler@@QAE@XZ

ddraw

DirectDrawEnumerateExA
DirectDrawCreate

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

Sections

.text
Size: 608KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c5126fe1c09ca8ca89e1964527d6543

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

odbc32

comctl32

shlwapi

oledlg

ws2_32

wininet

winmm

gdiplus

dsound

exceptionhandler

ddraw

winspool.drv

Sections

.text Size: 608KB - Virtual size: 607KB

.rdata Size: 108KB - Virtual size: 106KB

.data Size: 12KB - Virtual size: 496KB

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.text
Size: 608KB - Virtual size: 607KB

.rdata
Size: 108KB - Virtual size: 106KB

.data
Size: 12KB - Virtual size: 496KB

.rsrc
Size: 2.0MB - Virtual size: 2.0MB