2024-04-20_a9d65a9d9df2e6627fbd678509b44b68_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-20_a9d65a9d9df2e6627fbd678509b44b68_icedid
Size

3.5MB
MD5

a9d65a9d9df2e6627fbd678509b44b68
SHA1

f80b95057c1517e24c3d624b6718f7a177b80e4b
SHA256

e8abc6e0330c93182c844c8f51fa62d5f3f69963a387eeb6b00b698707c7342b
SHA512

055f556c27776ced1d85ef6094307e3105865af54ab407abac3e3ec3ba1002e0099e6aa186db1d73391c8e2e9ff630131ae1cb1a41cac24b4d8a0a8a10931083
SSDEEP

98304:cBhWCGjrnJHYvP74F/wTaKpAYrkDJtTsGHV:cBhWCGB28wTaKQJtTsI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-20_a9d65a9d9df2e6627fbd678509b44b68_icedid

Files

2024-04-20_a9d65a9d9df2e6627fbd678509b44b68_icedid
.exe windows:4 windows x86 arch:x86

b79143ff14f699e97123d37b8fdf2852

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\src\x72_sync_v3\CaddieSyncApp v3\CaddieSync_SH601_release\CaddieSync.pdb

Imports

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

wininet

InternetCheckConnectionA

gdiplus

GdipDrawImagePointRectI
GdipAddPathArc
GdipDrawPath
GdipFillPath
GdipClosePathFigure
GdipResetPath
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipDeletePath
GdipCreatePath
GdipGetGenericFontFamilySansSerif
GdipCloneBrush
GdipCreateFont
GdipDrawString
GdipFillRectangle
GdipDrawRectangle
GdipMeasureString
GdipDrawImageRect
GdipResetClip
GdipDrawImageI
GdipDrawLineI
GdiplusStartup
GdiplusShutdown
GdipTranslateTextureTransform
GdipAddPathLine
GdipSetClipRect
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipDrawImageRectI
GdipDrawImageRectRect
GdipCloneBitmapAreaI
GdipCreateTexture2I
GdipCloneImage
GdipGraphicsClear
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipImageRotateFlip
GdipSetImageAttributesColorMatrix
GdipDeleteMatrix
GdipDeleteBrush
GdipSetTextureTransform
GdipResetTextureTransform
GdipCreatePen1
GdipDeletePen
GdipCreateStringFormat
GdipDeleteStringFormat
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipDeleteFont
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateTexture
GdipCreateSolidFill
GdipCreateMatrix2

kernel32

SetupComm
CreateFileA
WriteFile
ReadFile
GetTickCount
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
lstrcpynA
lstrcmpW
lstrcatA
FreeLibrary
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
InterlockedDecrement
lstrcpyA
EnumResourceLanguagesA
ConvertDefaultLocale
GetModuleFileNameA
lstrcmpA
GetCurrentThread
SetCommMask
LocalAlloc
LocalFree
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
WritePrivateProfileStringA
InterlockedIncrement
FormatMessageA
SetLastError
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GlobalFlags
GetCPInfo
GetOEMCP
FileTimeToSystemTime
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
ExitProcess
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
TerminateProcess
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
GetCommState
BuildCommDCBA
SetCommState
GetCommTimeouts
SetCommTimeouts
Sleep
MulDiv
HeapAlloc
GetProcessHeap
HeapFree
LoadLibraryA
GetProcAddress
GetModuleHandleA
GlobalAlloc
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
MultiByteToWideChar
GetCurrentDirectoryA
CreateDirectoryA
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
ResumeThread
CreateThread
CloseHandle
GetLastError
GetVersion
WaitForSingleObject
TerminateThread
GetExitCodeThread

user32

GetClassInfoExA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
WinHelpA
RegisterWindowMessageA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
LoadBitmapA
GetMenuCheckMarkDimensions
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageA
GetNextDlgGroupItem
MessageBeep
MapDialogRect
SetWindowContextHelpId
wsprintfA
IsRectEmpty
CopyAcceleratorTableA
GetDC
InvalidateRgn
DestroyMenu
CharNextA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
LoadCursorA
RegisterClipboardFormatA
PostThreadMessageA
MessageBoxA
GetKeyState
SetForegroundWindow
GetMenu
PostMessageA
GetSubMenu
GetMenuItemID
GetClassNameA
GetLastActivePopup
GetClassInfoA
RegisterClassA
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
IsWindowVisible
SetCursor
ScreenToClient
GetMessagePos
GetCapture
CallWindowProcA
MapWindowPoints
CopyRect
ReleaseDC
GetWindowDC
WindowFromDC
InflateRect
FrameRect
OffsetRect
DrawEdge
GetSysColorBrush
SetRect
DrawFrameControl
GetSysColor
FillRect
SetPropA
CreateWindowExA
RemovePropA
SetScrollRange
SetScrollPos
GetScrollPos
EnableScrollBar
GetPropA
ReleaseCapture
GetScrollInfo
SetCapture
PtInRect
TrackMouseEvent
IsWindow
GetAsyncKeyState
GetCursorPos
GetUpdateRect
BeginPaint
EndPaint
EnumWindows
GetWindowTextA
UnregisterClassA
CharUpperA
SetTimer
KillTimer
GetSystemMetrics
RedrawWindow
UpdateWindow
GetSystemMenu
AppendMenuA
SetWindowPos
GetWindowLongA
SetWindowLongA
LoadIconA
EnableWindow
SendMessageA
GetParent
InvalidateRect
GetClientRect
SendDlgItemMessageA
GetFocus
SetFocus
IsChild
GetMenuItemCount
GetForegroundWindow
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
GetWindowRect
DestroyIcon
EqualRect
AdjustWindowRectEx

gdi32

GetBkColor
GetTextColor
SaveDC
RestoreDC
SetMapMode
GetDeviceCaps
GetRgnBox
CreateRectRgnIndirect
GetClipBox
IntersectClipRect
SelectClipRgn
SetWindowOrgEx
PlayEnhMetaFile
GetObjectA
ExtTextOutA
CreatePatternBrush
SetBrushOrgEx
PatBlt
CreateCompatibleDC
CreateBitmap
UnrealizeObject
SelectObject
CreateCompatibleBitmap
SetBkColor
BitBlt
SetTextColor
GetStockObject
DeleteDC
CreateFontIndirectA
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetMapMode
CreateSolidBrush
DeleteObject

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA

comctl32

ord17
InitCommonControlsEx

shlwapi

PathFileExistsA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

oledlg

ord8

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoTaskMemAlloc
CoGetClassObject
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal

oleaut32

SysFreeString
VariantInit
SysAllocString
VariantClear
VariantChangeType
SysAllocStringLen
SystemTimeToVariantTime
SafeArrayDestroy
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
VariantCopy

Sections

.text
Size: 292KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b79143ff14f699e97123d37b8fdf2852

Headers

File Characteristics

PDB Paths

Imports

setupapi

wininet

gdiplus

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 292KB - Virtual size: 290KB

.rdata Size: 72KB - Virtual size: 68KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 3.2MB - Virtual size: 3.2MB

.text
Size: 292KB - Virtual size: 290KB

.rdata
Size: 72KB - Virtual size: 68KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 3.2MB - Virtual size: 3.2MB