2024-04-15_09030f31ae2cdfd54e939dce2f44d806_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-15_09030f31ae2cdfd54e939dce2f44d806_icedid
Size

3.3MB
MD5

09030f31ae2cdfd54e939dce2f44d806
SHA1

eea81de1c36ff9c4febc0113626ac61eaf0e2ee6
SHA256

211d1bd770bb6a786ca8d730da150091bd3ad72f13c3f0e88a5cd0d7cd047f3c
SHA512

d254b438338650d3e45f52eb67bcada96483f35b005ae5a23edede63c989a199f528eea483525f61c152babe88c4da4e1a960c4e5cd4a69aefb97af1b932634d
SSDEEP

98304:eSoPaTTaBNO/j45i0g6rBS+XyYCo6YHCMXUR7PSietHvfdeXdrqgh+vGVpTwVcyP:eSoPq+raM5i0g6F9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-15_09030f31ae2cdfd54e939dce2f44d806_icedid

Files

2024-04-15_09030f31ae2cdfd54e939dce2f44d806_icedid
.exe windows:5 windows x86 arch:x86

8f3b6615ae103a351d4b1776a1c69045

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Hudson\workspace\Hcfr Windows Zoyd\Release\ColorHCFR.pdb

Imports

msimg32

AlphaBlend

kernel32

GetFileType
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
SetConsoleCtrlHandler
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitThread
SetStdHandle
HeapSize
GetACP
IsValidCodePage
SetHandleCount
FatalAppExitA
GetConsoleCP
LCMapStringA
LCMapStringW
PeekNamedPipe
VirtualFree
HeapCreate
HeapDestroy
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetCurrentDirectoryA
InitializeCriticalSectionAndSpinCount
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetFileInformationByHandle
ExitProcess
HeapReAlloc
GetDriveTypeA
GetStartupInfoA
GetCommandLineA
HeapFree
HeapAlloc
GetDateFormatA
GetTimeFormatA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
GetSystemDirectoryW
lstrcpyW
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GetAtomNameA
FindResourceExA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
InterlockedIncrement
GetModuleHandleW
GetFileSizeEx
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileAttributesExA
GlobalFlags
GetPrivateProfileIntA
GetProfileIntA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
GetVolumeInformationA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiA
GetThreadLocale
GetStringTypeExA
DeleteFileA
MoveFileA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
SuspendThread
ResumeThread
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
CompareStringA
lstrcmpW
VirtualProtect
CopyFileA
FormatMessageA
MultiByteToWideChar
DeviceIoControl
GetOverlappedResult
CancelIo
CreateToolhelp32Snapshot
Process32Next
OpenProcess
TerminateProcess
Beep
QueryPerformanceFrequency
QueryPerformanceCounter
GetStdHandle
ClearCommError
SetErrorMode
LoadLibraryW
LocalAlloc
LocalFree
lstrlenW
GlobalFindAtomA
FreeResource
LoadLibraryExA
GlobalSize
MulDiv
GlobalReAlloc
SetLastError
WriteFile
GetCommTimeouts
GetCommState
SetCommState
lstrcatA
WinExec
lstrcpyA
GetWindowsDirectoryA
GetVersionExA
GlobalDeleteAtom
GetVersion
CreateMutexA
GetLastError
ReleaseMutex
lstrlenA
GetModuleHandleA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GlobalGetAtomNameA
GlobalAddAtomA
WaitForMultipleObjects
GetProcAddress
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
GetModuleFileNameA
FindFirstFileA
FindNextFileA
FindClose
LoadLibraryA
GetPrivateProfileStringA
CreateDirectoryA
WritePrivateProfileSectionA
WritePrivateProfileStringA
CreateFileA
GetDefaultCommConfigA
SetCommConfig
SetCommMask
PurgeComm
SetCommTimeouts
ReadFile
SetThreadPriority
CreateThread
SetEvent
CloseHandle
WaitForSingleObject
TerminateThread
DeleteCriticalSection
CreateEventA
ResetEvent
InitializeCriticalSection
WideCharToMultiByte
Sleep
EnterCriticalSection
LeaveCriticalSection
GetTickCount
FindResourceA
LoadResource
LockResource
SizeofResource
GetTimeZoneInformation
InterlockedCompareExchange

user32

UnhookWindowsHookEx
GetClipboardFormatNameA
LoadMenuA
TrackPopupMenuEx
GetNextDlgTabItem
GetActiveWindow
DrawFocusRect
DrawStateA
GetWindowTextA
GetMenuItemCount
GetMenuItemRect
GetMenuItemID
GetMenuState
EnumChildWindows
GetWindowLongA
SetWindowRgn
SetRectEmpty
EnumWindows
GetClassNameA
DestroyCursor
LoadImageA
DestroyIcon
GetIconInfo
CreateIconIndirect
GetSysColorBrush
SetParent
GetWindow
GetDCEx
AppendMenuA
DeleteMenu
GetDoubleClickTime
IsRectEmpty
ClipCursor
GetSystemMetrics
IsClipboardFormatAvailable
GetClassInfoA
DefWindowProcA
InvertRect
IntersectRect
DrawEdge
FrameRect
SystemParametersInfoA
CallWindowProcA
SetWindowLongA
GetMessagePos
InflateRect
CopyIcon
WindowFromPoint
SetTimer
EqualRect
PtInRect
GetSubMenu
ScreenToClient
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
ShowScrollBar
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetMenu
ReleaseCapture
SetCapture
GetCapture
RegisterWindowMessageA
BroadcastSystemMessageA
WindowFromDC
GetLastActivePopup
IsIconic
LoadStringA
UnpackDDElParam
FreeDDElParam
ReplyMessage
GetSysColor
GetKeyState
ClientToScreen
RemoveMenu
CopyRect
MessageBeep
PackDDElParam
CreateDialogParamA
GetDlgItem
ShowWindow
DestroyWindow
SetWindowTextA
GetMenu
MenuItemFromPoint
GetCursorPos
DestroyMenu
GetSystemMenu
IsChild
GetFocus
KillTimer
InvalidateRect
GetWindowDC
SetWindowPos
EndPaint
BeginPaint
ValidateRect
CreateWindowExA
GetClientRect
GetWindowRect
FillRect
LoadBitmapA
OffsetRect
RedrawWindow
IsWindow
GetParent
IsWindowVisible
MessageBoxA
SendMessageA
GetDesktopWindow
SetRect
wsprintfA
IsZoomed
LoadCursorA
UpdateWindow
ReleaseDC
GetDC
BringWindowToTop
PostMessageA
TranslateMessage
DispatchMessageA
CopyImage
GetScrollRange
GetPropA
RemovePropA
SetPropA
CallNextHookEx
GetKeyNameTextA
MapVirtualKeyA
PeekMessageA
SetCursor
EnableWindow
CreatePopupMenu
GetMenuDefaultItem
GetMenuItemInfoA
InsertMenuA
ModifyMenuA
DrawMenuBar
SetForegroundWindow
IsMenu
CopyAcceleratorTableA
SetWindowsHookExA
EnableMenuItem
GetMessageA
GetClassLongA
DrawFrameControl
GetCursor
GetMenuStringA
IsWindowEnabled
SetFocus
GetAsyncKeyState
MapDialogRect
SetActiveWindow
EndDialog
CreateDialogIndirectParamA
GetWindowPlacement
GetDlgCtrlID
SetWindowPlacement
SetScrollInfo
GetScrollInfo
AdjustWindowRectEx
RegisterClassA
GetClassInfoExA
GetScrollPos
SendNotifyMessageA
GetTabbedTextExtentA
PostThreadMessageA
CreateMenu
InSendMessage
LockWindowUpdate
UnionRect
GetNextDlgGroupItem
InvalidateRgn
CharNextA
UnregisterClassA
GetDialogBaseUnits
RegisterClipboardFormatA
DrawIcon
CharUpperA
TranslateMDISysAccel
DefMDIChildProcA
SetScrollPos
ReuseDDElParam
GetMenuBarInfo
InsertMenuItemA
TranslateAcceleratorA
SetWindowContextHelpId
ShowOwnedPopups
WaitMessage
GetWindowThreadProcessId
PostQuitMessage
LoadAcceleratorsA
ScrollWindowEx
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadIconA
SendDlgItemMessageA
WinHelpA
GetWindowTextLengthA
GetForegroundWindow
GetTopWindow
GetMessageTime
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
CheckMenuItem
DefFrameProcA

gdi32

SetBkColor
SetMapMode
GetMapMode
DPtoLP
Polyline
SetPixel
CreatePen
CreateRoundRectRgn
Rectangle
RoundRect
GetDeviceCaps
GetCurrentObject
StartDocA
StartPage
EndPage
AbortDoc
EndDoc
PatBlt
GetTextMetricsA
EnumFontFamiliesA
GetTextColor
CreateDIBSection
LineTo
MoveToEx
CreateSolidBrush
SetTextColor
FrameRgn
SelectClipRgn
FillRgn
CombineRgn
CreateRectRgn
OffsetRgn
GetPixel
CreateHatchBrush
GetNearestColor
GetCurrentPositionEx
GetTextExtentPointA
SetTextAlign
GetTextAlign
SetWindowOrgEx
CreatePalette
RealizePalette
Polygon
PtInRegion
PlgBlt
Ellipse
Arc
CreateDIBitmap
GetDIBits
SetDIBitsToDevice
SetStretchBltMode
ExtSelectClipRgn
GetClipBox
StretchDIBits
DeleteDC
CopyMetaFileA
GetDCOrgEx
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
GetClipRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
CreateDIBPatternBrushPt
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
SetRectRgn
GetCharWidthA
SetAbortProc
CreateEllipticRgn
LPtoDP
GetViewportOrgEx
EnumFontFamiliesExA
GetRgnBox
GetBkMode
GetPolyFillMode
GetROP2
GetTextFaceA
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
Escape
CreateFontA
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextExtentPoint32A
GetWindowOrgEx
GetBkColor
CreateRectRgnIndirect
CreateFontIndirectA
StretchBlt
PaintRgn
GetStretchBltMode
CreatePolygonRgn
CreatePatternBrush
GetStockObject
SetBrushOrgEx
GetObjectA
UnrealizeObject
CreateBitmap
MaskBlt
DeleteObject
BitBlt
SelectObject
CreateDCA
SetBkMode
CreateCompatibleBitmap
CreateCompatibleDC

comdlg32

GetFileTitleA

winspool.drv

GetJobA
DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegEnumValueA
RegCloseKey
RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegEnumKeyA
GetFileSecurityA
SetFileSecurityA
RegSetValueA
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyA
RegQueryValueExA
RegQueryValueA
RegEnumKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegFlushKey

shell32

DragAcceptFiles
DragQueryFileA
SHGetFileInfoA
ExtractIconA
ShellExecuteExA
DragFinish
ShellExecuteA

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathIsUNCA
PathStripToRootA
PathRemoveFileSpecW
PathRemoveExtensionA
PathFindFileNameA
PathFindExtensionA
UrlUnescapeA

oledlg

ord8

ole32

DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
CoInitializeEx
CoCreateInstance
CoUninitialize
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
OleUninitialize
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoFreeUnusedLibraries
OleInitialize
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
StringFromGUID2
CoDisconnectObject
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleRegEnumVerbs
OleRegGetMiscStatus
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CreateStreamOnHGlobal
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
OleRun
OleSave
WriteClassStm
OleSaveToStream
OleLockRunning
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
GetHGlobalFromILockBytes
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
OleIsRunning
GetRunningObjectTable
CreateFileMoniker
CoGetMalloc
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateOleAdviseHolder
CreateDataAdviseHolder
OleSetMenuDescriptor
OleQueryCreateFromData
OleQueryLinkFromData
CoTaskMemAlloc

oleaut32

SafeArrayDestroyDescriptor
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
SafeArrayDestroyData
VarCyFromStr
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
VariantTimeToSystemTime
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
VarUdateFromDate
SystemTimeToVariantTime
VarDecFromStr

odbc32

ord5
ord72
ord4
ord17
ord41
ord10
ord61
ord3
ord16
ord2
ord1
ord23
ord15
ord9
ord14
ord20
ord8
ord48
ord49
ord11
ord19
ord12
ord46
ord18
ord13
ord59
ord43
ord68
ord44
ord45
ord50
ord51

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

winmm

PlaySoundA

wininet

InternetOpenUrlA
GopherOpenFileA
InternetConnectA
FtpFindFirstFileA
GopherCreateLocatorA
FtpCommandA
FtpOpenFileA
GopherGetAttributeA
HttpSendRequestExA
HttpEndRequestA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
GopherFindFirstFileA
InternetCloseHandle
HttpOpenRequestA
HttpQueryInfoA
HttpAddRequestHeadersA
InternetErrorDlg
FtpGetFileA
FtpPutFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpRenameFileA
FtpDeleteFileA
InternetQueryDataAvailable
InternetGetCookieA
InternetSetCookieA
InternetSetOptionExA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetFindNextFileA

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

Exports

Exports

g_szLongApplicationName
g_szShortApplicationName

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 563KB - Virtual size: 563KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 197KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f3b6615ae103a351d4b1776a1c69045

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msimg32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

odbc32

version

winmm

wininet

setupapi

Exports

Exports

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 563KB - Virtual size: 563KB

.data Size: 197KB - Virtual size: 228KB

.rsrc Size: 250KB - Virtual size: 250KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 563KB - Virtual size: 563KB

.data
Size: 197KB - Virtual size: 228KB

.rsrc
Size: 250KB - Virtual size: 250KB