2024-04-20_bec896d81c1a87dc6f38c3dd4448fd59_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-20_bec896d81c1a87dc6f38c3dd4448fd59_icedid
Size

1.8MB
MD5

bec896d81c1a87dc6f38c3dd4448fd59
SHA1

34303612c1a4dfea3118884c5364dad38b9c459a
SHA256

b73ab2a75dc54429b45fa9614afb7af7c690de0e57e8197597bcff1f11d7b478
SHA512

d9337ce9e9f8c03ad30fb0f9e032f5a669ff24e220d677129dd2db3d3cb570ca64bf534844d9de0313d048e07fbfb9491f7dad84c5d860450b278488d683de33
SSDEEP

49152:oWt/SZaJgg3Tp/I2hjLvkc6c/c17pdK9c/HXDCdvJxFtx6AKh:oWt/XX3Tp/I2xvp6mc17pdK9c/3uvvFW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-20_bec896d81c1a87dc6f38c3dd4448fd59_icedid

Files

2024-04-20_bec896d81c1a87dc6f38c3dd4448fd59_icedid
.exe windows:5 windows x86 arch:x86

d2fce894684c3a71098b91a4cc7bb9f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mc3adv

MC_Get_Next_pValue_To_String
MC_Get_Value_To_String
MC_Release_Application
MC_Free_File
MC_Open_File
MC_Create_Empty_File
MC_Register_Application
MC_Get_Value_To_Int
MC_Get_Tag_Info
MC_Free_Message
MC_Set_Message_Transfer_Syntax
MC_File_To_Message
MC_Write_File
MC_Message_To_File
MC_Get_Message_Transfer_Syntax
MC_Send_Response_Message
MC_Set_Value_From_String
MC_Open_Message
MC_Empty_Message
MC_Validate_Message
MC_Get_Message_Service
MC_Close_Association
MC_Read_Message
MC_Open_Association
MC_Send_Request_Message
MC_Set_Next_Value_From_Int
MC_Open_Item
MC_Set_Value_From_Int
MC_Get_Next_Attribute
MC_Get_First_Attribute
MC_Abort_Association
MC_Create_File
MC_Accept_Association
MC_Reject_Association
MC_Get_Association_Info
MC_Library_Release
MC_Wait_For_Association
MC_Cleanup_Memory
MC_Report_Memory
MC_Get_Int_Config_Value
MC_Get_Listen_Socket
MC_Get_String_Config_Value
MC_Set_Int_Config_Value
MC_Get_Version_String
MC_Set_String_Config_Value
MC_Library_Initialization
MC_Set_MergeINI
MC_Add_Standard_Attribute
MC_Set_Value_From_Function
MC_Get_Next_Validate_Error
MC_Delete_Attribute
MC_Validate_File
MC_Message_To_SR
MC_SR_Get_Root
MC_Get_Attribute_Info
MC_Get_Next_Value_To_String
MC_Set_Value_To_NULL
MC_SR_To_Message
MC_Get_Value_To_Function
MC_Free_Item
MC_Set_Value_From_Double
MC_Get_pValue_Length
MC_List_Message
MC_Get_Value_To_LongInt
MC_Get_Value_To_Double
MC_Get_pValue_To_Float
MC_Set_pValue_Representation
MC_Get_pValue_To_Int
MC_Get_pValue_To_String
MC_Get_pValue_To_Double
MC_Get_Next_pValue_To_Int
MC_Get_Next_Value_To_Int
MC_Get_Value_Length
MC_Get_Value_To_Buffer

combridgehelper

??0CSafeArrayHelper@@QAE@PAUtagSAFEARRAY@@@Z
?IsEmpty@CSafeArrayHelper@@QAE_NXZ
?RowStart@CSafeArrayHelper@@QAEJXZ
?RowEnd@CSafeArrayHelper@@QAEJXZ
?GetNumber@CSafeArrayHelper@@QAEJJJ@Z
??1CSafeArrayHelper@@QAE@XZ
?ReleaseCoMem@CTransferObjectHelper@@SAXAAUTblDcmScuStackBridge@@@Z
?InitializeSCUStack@CTransferObjectHelper@@SA?AUTblDcmScuStackBridge@@XZ
?CreateList@CSafeArrayHelper@@QAEPAUtagSAFEARRAY@@GH@Z
?InitializeMPPSData@CTransferObjectHelper@@SA?AUMPPSDataBridge@@XZ
?InitializeTBU_RUNBridge@CTransferObjectHelper@@SA?AUTBU_RUNBridge@@XZ
?ReleaseCoMem@CTransferObjectHelper@@SAXAAUMPPSDataBridge@@@Z
?ReleaseCoMem@CTransferObjectHelper@@SAXAAUDicomWorklistDataBridge@@@Z
?ReleaseCoMem@CTransferObjectHelper@@SAXAAUExaminationBridge@@@Z
?InitializePatient@CTransferObjectHelper@@SA?AUPatientBridge@@XZ
?CreateTable@CSafeArrayHelper@@QAEPAUtagSAFEARRAY@@GHH@Z
?InitializeExam@CTransferObjectHelper@@SA?AUExaminationBridge@@XZ
?ReleaseCoMem@CTransferObjectHelper@@SAXAAUPatientBridge@@@Z
??0CSafeArrayHelper@@QAE@XZ

kernel32

GlobalHandle
ReleaseActCtx
GetModuleFileNameW
FreeLibrary
CompareStringA
GetModuleHandleW
GlobalGetAtomNameA
SetThreadPriority
ResumeThread
GlobalAddAtomA
GlobalFlags
lstrcmpW
LoadLibraryW
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomA
FreeResource
FindResourceA
InterlockedExchange
GetLocaleInfoA
GetUserDefaultUILanguage
GetCPInfo
GetOEMCP
lstrcpyA
GetWindowsDirectoryA
GetNumberFormatA
GetTempFileNameA
GetTempPathA
GetProfileIntA
SearchPathA
VirtualProtect
FindResourceExW
GetSystemTimeAsFileTime
RtlUnwind
GetTimeFormatA
GetDateFormatA
HeapFree
LocalReAlloc
EncodePointer
DecodePointer
RaiseException
ExitProcess
GetCommandLineA
HeapSetInformation
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
SetStdHandle
GetFileType
HeapQueryInformation
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetTimeZoneInformation
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
IsValidCodePage
HeapCreate
GetStdHandle
GetStringTypeW
LCMapStringW
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoW
QueryPerformanceCounter
GetDriveTypeW
CompareStringW
WriteConsoleW
GetCurrentDirectoryW
EnumSystemLocalesA
IsValidLocale
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
GlobalReAlloc
TlsGetValue
TlsSetValue
TlsAlloc
HeapAlloc
InitializeCriticalSection
LocalAlloc
GetCurrentProcessId
GetFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
lstrcmpA
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
ActivateActCtx
LoadLibraryA
DeactivateActCtx
GetModuleHandleA
GetProcAddress
CreateFileA
lstrcmpiA
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenW
MulDiv
lstrlenA
SetLastError
GetACP
GetUserDefaultLCID
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
GetTickCount
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetComputerNameA
CopyFileA
ResetEvent
DeleteFileA
MoveFileA
ExitThread
CreateMutexA
CreateEventA
CreateThread
CloseHandle
OpenEventA
WaitForSingleObject
ReleaseMutex
SetEvent
Sleep
CreateDirectoryA
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
MultiByteToWideChar
GetPrivateProfileStringA
GetPrivateProfileIntA
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
TlsFree

user32

TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
WaitMessage
PostThreadMessageA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
IsMenu
MonitorFromPoint
UpdateLayeredWindow
UnionRect
MapVirtualKeyExA
IsCharLowerA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetKeyNameTextA
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
DrawFrameControl
DrawEdge
DrawStateA
GetSystemMenu
LoadMenuW
SetClassLongA
WindowFromPoint
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
DrawIconEx
GetNextDlgGroupItem
LoadImageA
CopyImage
GetIconInfo
OffsetRect
MessageBeep
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
GetAsyncKeyState
SetCapture
MapVirtualKeyA
IsRectEmpty
CreatePopupMenu
GetMenuDefaultItem
RedrawWindow
KillTimer
SetTimer
InvalidateRect
DeleteMenu
ShowOwnedPopups
SetCursor
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
CreateMenu
IsIconic
RegisterWindowMessageA
LoadIconW
LoadIconA
WinHelpA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetClientRect
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuA
GetMenuItemID
CheckMenuItem
IntersectRect
InflateRect
CopyRect
SetWindowPos
ShowWindow
MoveWindow
SetWindowLongA
IsWindow
IsDialogMessageA
SendDlgItemMessageA
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
RegisterClipboardFormatA
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
MapDialogRect
GetDlgItem
CheckDlgButton
GetScrollPos
SetScrollPos
SetFocus
GetFocus
GetDesktopWindow
RealChildWindowFromPoint
GetWindowRgn
DestroyCursor
DrawIcon
PostQuitMessage
AppendMenuA
GetMenuStringA
GetMenuState
GetSystemMetrics
CharUpperA
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
SendMessageA
GetWindowThreadProcessId
UnhookWindowsHookEx
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
LoadCursorA
GetWindowTextA
GetWindowTextLengthA
FillRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ScreenToClient
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
SetWindowsHookExA
DestroyIcon
SetWindowTextA
PtInRect
GetClassNameA
GetWindowRect
GetDlgCtrlID
GetWindow
ReleaseCapture

gdi32

SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateBitmap
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
SelectObject
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateFontIndirectA
CreateRectRgnIndirect
SetRectRgn
Escape
OffsetViewportOrgEx
TextOutA
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetObjectA
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
GetTextFaceA
ExtTextOutA
SetViewportOrgEx
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
SetPixelV
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
EnumFontFamiliesExA
GetRgnBox
OffsetRgn
Rectangle
SetPixel
StretchBlt
SetDIBColorTable
Polygon
Ellipse
Polyline
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
CreateRoundRectRgn
CreateDIBSection
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
GetBkColor
GetTextCharsetInfo
EnumFontFamiliesA
GetTextMetricsA
CreateCompatibleBitmap
CreateDIBitmap
GetTextExtentPoint32A
DPtoLP
PatBlt
CombineRgn

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegSetValueExA
RegCloseKey

shell32

DragQueryFileA
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
SHAppBarMessage
DragFinish
SHBrowseForFolderA
SHGetFileInfoA

comctl32

ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA

ole32

DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoInitialize
CoUninitialize
CoInitializeEx
RevokeDragDrop
CoLockObjectExternal
OleGetClipboard
RegisterDragDrop
CoCreateInstance
OleRun

oleaut32

VarBstrFromDate
GetErrorInfo
LoadRegTypeLi
GetRecordInfoFromTypeInfo
SafeArrayCreateEx
SafeArrayPutElement
SafeArrayGetLBound
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringLen
VariantChangeType
SysStringLen
VariantClear
VariantInit
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime

ws2_32

__WSAFDIsSet
select

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipBitmapUnlockBits
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipDrawImageI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 329KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d2fce894684c3a71098b91a4cc7bb9f1

Headers

DLL Characteristics

File Characteristics

Imports

mc3adv

combridgehelper

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

ws2_32

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 329KB - Virtual size: 328KB

.data Size: 24KB - Virtual size: 54KB

.rsrc Size: 1024B - Virtual size: 696B

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 329KB - Virtual size: 328KB

.data
Size: 24KB - Virtual size: 54KB

.rsrc
Size: 1024B - Virtual size: 696B