2024-04-16_a87949c98f7c56febf007dda97d2de4f_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-16_a87949c98f7c56febf007dda97d2de4f_icedid
Size

2.3MB
MD5

a87949c98f7c56febf007dda97d2de4f
SHA1

903e48bc24a8b9a5f773dfd88457282a0863cc9d
SHA256

c2dea56ad0392eb33d7f68bfa9bf5413f88eaf079cc9bd81f974889974e80481
SHA512

75974639ef43100f0f81cea736f1f220479aa40d72ef803c2181895fd676d7bf382a8dff444f9bb755e93d229b8b500051506e0b14ac9f0457a6a1f471f55a18
SSDEEP

24576:hdwKaiDFe+XMISLNmYnEoayKmrnJrtxKfzGE5:AkjcISnKmrnJZx6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-16_a87949c98f7c56febf007dda97d2de4f_icedid

Files

2024-04-16_a87949c98f7c56febf007dda97d2de4f_icedid
.exe windows:4 windows x86 arch:x86

aaccf3dfd0c9046879ebe11623eb7111

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Astel\Projects\LiveViewer\bin\SearchViewer.pdb

Imports

kernel32

HeapCreate
VirtualFree
IsBadWritePtr
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsBadReadPtr
FreeLibrary
IsBadCodePtr
SetEnvironmentVariableA
GetProcAddress
LoadLibraryA
GetDiskFreeSpaceExA
TerminateThread
GetExitCodeThread
GetLocalTime
GetCPInfo
FreeResource
SetEvent
WaitForSingleObject
LocalFree
GetFileSize
SetFilePointer
MulDiv
GetModuleHandleA
GetSystemInfo
ReadFile
CreateFileA
WriteFile
GlobalAlloc
GlobalHandle
GlobalFree
GlobalLock
GlobalUnlock
CreateEventA
HeapDestroy
GetTimeZoneInformation
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
QueryPerformanceCounter
SetStdHandle
HeapSize
HeapReAlloc
GetCommandLineA
GetStartupInfoA
RemoveDirectoryA
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
MultiByteToWideChar
WritePrivateProfileStringA
CreateMutexA
GetLastError
ReleaseMutex
CreateDirectoryA
SetFileAttributesA
DeleteCriticalSection
Sleep
Beep
GetLogicalDrives
GetDriveTypeA
GetCurrentDirectoryA
SetCurrentDirectoryA
InterlockedIncrement
VirtualQuery
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
TerminateProcess
GetFileType
CreateThread
ExitThread
RtlUnwind
ExitProcess
GetTickCount
SetErrorMode
GetFileTime
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetOEMCP
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalReAlloc
RaiseException
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
FindFirstFileA
FindNextFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
InterlockedDecrement
SetLastError
FormatMessageA
GetSystemDirectoryA
MoveFileExA
GetModuleFileNameA
LocalLock
LocalUnlock
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileIntA
InterlockedExchange
CloseHandle
GetPrivateProfileStringA
DeleteFileA
CopyFileA
WinExec
WideCharToMultiByte
lstrcpynA
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
LocalAlloc

user32

DrawTextA
DrawTextExA
GrayStringA
DestroyIcon
DrawIconEx
GetSysColorBrush
GetMenuItemInfoA
DrawFocusRect
FillRect
LoadBitmapA
CopyRect
SetRect
TabbedTextOutA
GetParent
GetSubMenu
GetCapture
CharUpperA
SystemParametersInfoA
SetWindowRgn
GetSystemMetrics
SetTimer
GetWindowRect
DrawIcon
ModifyMenuA
GetSysColor
SetForegroundWindow
IsIconic
GetDC
ReleaseDC
GetMenuState
DrawEdge
GetMenuItemCount
AppendMenuA
CreatePopupMenu
GetKeyState
CreateMenu
LoadImageA
GetClientRect
RedrawWindow
GetCursorPos
EnableWindow
ReleaseCapture
SetCursor
CheckMenuItem
EnableMenuItem
ClientToScreen
ScreenToClient
KillTimer
SetCapture
LoadCursorA
LoadIconA
SendMessageA
FindWindowA
GetMenuItemID
SetWindowPos
RegisterWindowMessageA
GetClassInfoA
DefWindowProcA
GetMessageA
GetFocus
SetFocus
GetDlgCtrlID
UpdateWindow
IntersectRect
FrameRect
InflateRect
PeekMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
OffsetRect
GetMenuStringA
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
GetWindowLongA
IsWindow
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetActiveWindow
GetDesktopWindow
UnhookWindowsHookEx
GetWindow
GetWindowPlacement
SetWindowLongA
CallWindowProcA
UnregisterClassA
RegisterClassA
DeferWindowPos
EqualRect
AdjustWindowRectEx
GetMenu
IsWindowVisible
GetScrollPos
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
IsChild
SendDlgItemMessageA
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassInfoExA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
WinHelpA
InvalidateRect
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindowDC
BeginPaint
EndPaint
WindowFromPoint
PostQuitMessage
ValidateRect
MapDialogRect
SetWindowContextHelpId
DestroyMenu
SetRectEmpty
CharNextA
IsRectEmpty
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
GetDCEx
LockWindowUpdate
PostThreadMessageA
SetParent
PtInRect
PostMessageA
wsprintfA

gdi32

EndDoc
GetDIBits
Polygon
ResetDCA
StartDocA
StartPage
EndPage
SelectObject
SetPixel
GetPixel
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreateDIBSection
DeleteDC
GetTextExtentPoint32W
Escape
ExtTextOutA
RectVisible
PtVisible
PatBlt
Rectangle
Ellipse
GetRgnBox
GetTextColor
CombineRgn
SetRectRgn
GetCharWidthA
GetStockObject
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateRectRgn
SelectClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetClipBox
GetBkMode
GetDeviceCaps
CreateFontIndirectA
SetBkColor
CreateRoundRectRgn
GetObjectA
SetStretchBltMode
StretchDIBits
CreatePen
MoveToEx
LineTo
DeleteObject
CreateFontA
SetBkMode
GetTextExtentPoint32A
SetTextAlign
StretchBlt
CreateSolidBrush
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
TextOutA
SetTextColor

comdlg32

PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
GetFileTitleA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

ole32

CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleInitialize
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
OleIsCurrentClipboard

oleaut32

OleCreateFontIndirect
SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantCopy

odbc32

ord11
ord4
ord13
ord24
ord75
ord9
ord31
ord26
ord41

comctl32

ImageList_Destroy
ImageList_GetIconSize
ImageList_Draw
ImageList_GetIcon
ImageList_AddMasked
ord17
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_ReplaceIcon
ImageList_Create

shlwapi

PathFileExistsA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

oledlg

ord8

ws2_32

recv
recvfrom
WSAStartup
gethostbyname
inet_ntoa
send
shutdown
sendto
connect
listen
setsockopt
__WSAFDIsSet
ntohs
closesocket
accept
socket
select
htons
inet_addr
bind
WSACleanup

wininet

InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback

winmm

timeGetTime
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInUnprepareHeader
waveInOpen
waveOutGetNumDevs
timeKillEvent
waveOutClose
waveOutReset
waveOutUnprepareHeader
waveOutPause
timeSetEvent
waveOutOpen
waveOutPrepareHeader
waveOutWrite

avifil32

AVIFileInit
AVIFileOpenA
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIStreamSetFormat
AVIStreamWrite
AVISaveOptionsFree
AVIStreamRelease
AVIFileRelease
AVIFileExit

msvfw32

ord2

gdiplus

GdipDeleteGraphics
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipFree
GdipGetImageGraphicsContext
GdipGetDC
GdipReleaseDC
GdipAlloc
GdipCloneImage
GdiplusStartup
GdipDisposeImage

dsound

ord1

exceptionhandler

??1HPExceptionHandler@@QAE@XZ
?Create@HPExceptionHandler@@QAEJH@Z
??0HPExceptionHandler@@QAE@XZ

sms_sdk_h264_dec

PT_H264dec_Init
PT_H264dec_GetOneFrame
PT_H264dec_Uninit

ddraw

DirectDrawCreate
DirectDrawEnumerateExA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

Sections

.text
Size: 624KB - Virtual size: 621KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aaccf3dfd0c9046879ebe11623eb7111

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

odbc32

comctl32

shlwapi

oledlg

ws2_32

wininet

winmm

avifil32

msvfw32

gdiplus

dsound

exceptionhandler

sms_sdk_h264_dec

ddraw

winspool.drv

Sections

.text Size: 624KB - Virtual size: 621KB

.rdata Size: 112KB - Virtual size: 111KB

.data Size: 12KB - Virtual size: 1.1MB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.text
Size: 624KB - Virtual size: 621KB

.rdata
Size: 112KB - Virtual size: 111KB

.data
Size: 12KB - Virtual size: 1.1MB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB