2024-03-29_5b45cf5f44f57a99951b688e7d3b5b5d_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-29_5b45cf5f44f57a99951b688e7d3b5b5d_icedid
Size

1.5MB
MD5

5b45cf5f44f57a99951b688e7d3b5b5d
SHA1

46e4a6fe275607e45af0f53fc8d65fb85c4c4829
SHA256

d67e225c7cf4a18ef305174c44b944d05373f4f412f7df34d8a6d65d4ee64bc3
SHA512

616f1999515636c94f5f62a75691b3ddde86a28d665d4e9366f9faec510ce7539dcc9cdb36e98ecc50cf938d54f01b5b748c8f372e355d3fc7832a6f658745d0
SSDEEP

24576:dDnz4tRtzV+Go+TxwlqqkW54OEIZgYDY/snDLVmT82HhTH51iUrnEgx2IrFrzPN8:lU+tEIZjDY/sDLVyHhTH51iUrnEgx2Iw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-03-29_5b45cf5f44f57a99951b688e7d3b5b5d_icedid

Files

2024-03-29_5b45cf5f44f57a99951b688e7d3b5b5d_icedid
.exe windows:4 windows x86 arch:x86

49d2b9825caab02d4a40274a6ae6623c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Work\Puzzle\Release\Puzzle.pdb

Imports

ddraw

DirectDrawCreate

winmm

timeGetTime

dsound

ord1

kernel32

VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
RtlUnwind
ExitProcess
TerminateProcess
ExitThread
CreateThread
HeapSize
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetStdHandle
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetUserDefaultLCID
GetSystemInfo
IsValidLocale
IsValidCodePage
SetConsoleCtrlHandler
GetLocaleInfoW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceA
FindFirstFileA
FindClose
SetCurrentDirectoryA
FindNextFileA
CompareFileTime
DeleteFileA
GetTimeFormatA
GetDateFormatA
CreateMutexA
GetLastError
GetCurrentDirectoryA
ReleaseMutex
GetEnvironmentVariableW
lstrlenA
GetStringTypeExW
GetEnvironmentVariableA
CompareStringW
MultiByteToWideChar
lstrlenW
GetStringTypeExA
lstrcmpiA
lstrcmpiW
CompareStringA
GetVersion
LocalAlloc
LocalFree
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
GetDiskFreeSpaceA
GetTempFileNameA
LocalLock
LocalUnlock
GetFileTime
GetFileAttributesA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SetErrorMode
GetShortPathNameA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
SystemTimeToFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
GlobalFlags
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetCurrentThread
lstrcmpA
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
CopyFileA
GlobalSize
GlobalAlloc
FormatMessageA
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
GetCurrentThreadId
GlobalGetAtomNameA
FreeResource
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
lstrcpynA
InterlockedDecrement
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
GlobalLock
GlobalUnlock
GlobalFree
EnumSystemLocalesA

user32

SetParent
ShowOwnedPopups
UnpackDDElParam
ReuseDDElParam
SetCursor
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
AppendMenuA
InsertMenuA
RemoveMenu
GetMenuStringA
GetMenuItemInfoA
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsChild
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
GetKeyState
GetScrollRange
SetForegroundWindow
ShowScrollBar
IsWindowVisible
PostMessageA
GetMenuItemCount
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
UnregisterClassA
SetWindowPlacement
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
LockWindowUpdate
GetWindowPlacement
GetWindow
GetWindowTextLengthA
GetWindowTextA
GetFocus
SetWindowPos
ScrollWindowEx
SetFocus
ShowWindow
SetWindowLongA
GetDlgCtrlID
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
UnhookWindowsHookEx
GetWindowDC
GrayStringA
DrawTextExA
TabbedTextOutA
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
GetMenuItemID
LoadBitmapA
GetClientRect
GetWindowRect
EnableWindow
InflateRect
FillRect
PtInRect
InvalidateRect
LoadCursorA
SetScrollRange
CopyRect
SetCapture
IntersectRect
OffsetRect
DestroyWindow
IsWindow
GetWindowLongA
IsWindowEnabled
GetNextDlgTabItem
CharUpperA
CharLowerW
CharLowerA
CharUpperW
SetTimer
KillTimer
UpdateWindow
MessageBoxA
DialogBoxParamA
EndDialog
SetWindowTextA
GetDCEx
GetTabbedTextExtentA
MessageBeep
IsClipboardFormatAvailable
WindowFromPoint
SetRect
ShowCursor
GetSysColor
ReleaseDC
GetDC
LoadIconA
DeleteMenu
GetSystemMenu
SetMenuItemInfoA
SetMenu
LoadMenuA
DestroyMenu
GetMenu
DestroyIcon
IsRectEmpty
GetDialogBaseUnits
MapVirtualKeyA
IsIconic
GetKeyNameTextA
UnionRect
ReleaseCapture
wsprintfA
SetDlgItemTextA
GetSystemMetrics
GetParent
MoveWindow
SendMessageA
GetDlgItem
ScreenToClient
BeginPaint
GetSysColorBrush
EndPaint
GetScrollPos
DrawTextA
FrameRect
ClientToScreen
PostQuitMessage
TrackPopupMenu
GetSubMenu
SetScrollPos
RedrawWindow

gdi32

SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
GetClipRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocA
PtVisible
RectVisible
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
SaveDC
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
CreateBitmap
PlayMetaFileRecord
GetObjectType
EnumMetaFile
SetBkColor
GetDeviceCaps
ExtCreatePen
CreateHatchBrush
GetDCOrgEx
CreateFontIndirectA
CopyMetaFileA
CreateDCA
CreateRectRgnIndirect
PatBlt
GetTextMetricsA
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
StretchDIBits
GetCharWidthA
GetBkColor
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetPaletteEntries
GetStockObject
CreatePalette
CreateDIBitmap
RealizePalette
SelectPalette
Polygon
GetTextExtentPoint32A
CreateFontA
TextOutA
SelectClipRgn
CreateRectRgn
SetBkMode
SetTextColor
BitBlt
DeleteDC
StretchBlt
SelectObject
SetStretchBltMode
CreateCompatibleDC
SetBitmapBits
CreateCompatibleBitmap
DeleteObject
PlayMetaFile
RestoreDC
CreateSolidBrush
CreatePen
ScaleWindowExtEx
GetObjectA

comdlg32

FindTextA
ReplaceTextA
PrintDlgA
GetFileTitleA
GetSaveFileNameA
ChooseColorA
CommDlgExtendedError
PageSetupDlgA
GetOpenFileNameA

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

GetFileSecurityA
RegCreateKeyA
RegDeleteKeyA
RegCloseKey
RegFlushKey
RegSetValueExA
RegQueryValueExA
RegSetValueA
RegOpenKeyA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueA
RegDeleteValueA
RegCreateKeyExA
SetFileSecurityA

shell32

DragFinish
DragQueryFileA
ExtractIconA
SHGetFileInfoA
ShellExecuteA

comctl32

ord17
ImageList_Draw
ImageList_GetImageInfo
ord13
ImageList_Read
ImageList_Write
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

ole32

SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
CreateBindCtx
CoTaskMemAlloc
ReleaseStgMedium
OleDuplicateData
CoDisconnectObject
CoCreateInstance
StringFromGUID2
CLSIDFromString
CoTaskMemFree

oleaut32

VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
SysReAllocStringLen
VarDateFromStr
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate

Sections

.text
Size: 496KB - Virtual size: 494KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 892KB - Virtual size: 888KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49d2b9825caab02d4a40274a6ae6623c

Headers

File Characteristics

PDB Paths

Imports

ddraw

winmm

dsound

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

Sections

.text Size: 496KB - Virtual size: 494KB

.rdata Size: 108KB - Virtual size: 105KB

.data Size: 24KB - Virtual size: 38KB

.rsrc Size: 892KB - Virtual size: 888KB

.text
Size: 496KB - Virtual size: 494KB

.rdata
Size: 108KB - Virtual size: 105KB

.data
Size: 24KB - Virtual size: 38KB

.rsrc
Size: 892KB - Virtual size: 888KB