2024-04-22_68760ea4a5e0c1088b48b703d24ee2e1_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-22_68760ea4a5e0c1088b48b703d24ee2e1_icedid
Size

1.5MB
MD5

68760ea4a5e0c1088b48b703d24ee2e1
SHA1

1ceb76dbc4a283bb20d7be5b73cd0184714b7aa5
SHA256

a2ea47ef5489e6216c8a4b96ad442f4972bb2834d091d86bde9cfebd54b9163b
SHA512

b1a02e0d3fcb33cad1cde52c518bf8179fea8de8b4cec08755940547f79caa8eda779472c518083d6d1507a1910b03ee2115964706432066095cb09461e96d02
SSDEEP

24576:vscgXK+QsNhhi91uCz1RouLML/Tej/kOIJiTuaSdgb3g1vpSYj55PXO+zYsXVr8K:kcgXK+Q+ribuCz1DMjajUxgb3g14APeU

Score

1^/10

Malware Config

Signatures

Files

2024-04-22_68760ea4a5e0c1088b48b703d24ee2e1_icedid
.exe windows:5 windows x86 arch:x86

df0473c0a26112b62929f2b2c6aa516c

Code Sign

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:0d:8e:7b:88:93:ab
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

04/04/2014, 09:08

Not After

04/04/2017, 09:08

Subject

CN=Parallels International GmbH,O=Parallels International GmbH,L=Schaffhausen,ST=Schaffhausen,C=CH

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a7:76:54:47:ee:e2:39:08:5d:b3:56:63:34:bc:2c:43:77:af:a1:73
Signer

Actual PE Digest

a7:76:54:47:ee:e2:39:08:5d:b3:56:63:34:bc:2c:43:77:af:a1:73

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Projects\2X\Bin\Release-Unicode\AppServer\Binaries\TUXCredProv.pdb

Imports

kernel32

GetDriveTypeW
FindFirstFileExW
HeapReAlloc
RtlUnwind
RaiseException
HeapQueryInformation
HeapSize
ExitThread
CreateThread
ExitProcess
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
GetStdHandle
SetHandleCount
GetStartupInfoW
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetFileInformationByHandle
PeekNamedPipe
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
IsProcessorFeaturePresent
GetTimeZoneInformation
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
EncodePointer
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
InitializeCriticalSectionAndSpinCount
GetNumberFormatW
lstrcpyW
FreeResource
GlobalFindAtomW
GlobalDeleteAtom
GetUserDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
GetCurrentThreadId
ResumeThread
SetThreadPriority
GlobalAddAtomW
GlobalFlags
lstrcmpW
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExW
FileTimeToSystemTime
lstrlenA
lstrcmpA
GlobalGetAtomNameW
GetSystemTimeAsFileTime
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetCurrentProcessId
CompareStringW
ReleaseActCtx
InterlockedDecrement
InterlockedIncrement
GetFullPathNameW
GetVolumeInformationW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
ActivateActCtx
DeactivateActCtx
GlobalSize
MulDiv
Sleep
TerminateProcess
GetTickCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
lstrcmpiW
LocalAlloc
GetCurrentDirectoryW
GetFileSize
GetComputerNameW
HeapFree
GetProcessHeap
HeapAlloc
FreeLibrary
GlobalAlloc
SetLastError
GetVersionExW
GlobalFree
GlobalUnlock
GlobalLock
MultiByteToWideChar
WideCharToMultiByte
CopyFileW
FindClose
FindFirstFileW
GetTempFileNameW
GetTempPathW
CreateFileW
LoadLibraryW
WaitForSingleObjectEx
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
OpenFileMappingW
GetFileAttributesW
InterlockedCompareExchange
MoveFileW
DeleteFileW
GetSystemTime
WritePrivateProfileStringW
GetPrivateProfileStringW
GetModuleHandleW
OpenEventW
LocalFree
GetProcAddress
FormatMessageW
lstrlenW
HeapSetInformation
GetCommandLineW
TlsFree
DecodePointer
FindResourceW
LoadResource
LockResource
SizeofResource
ResetEvent
WaitForMultipleObjects
UnmapViewOfFile
SetEvent
CreateEventW
MapViewOfFile
GetLastError
ReleaseMutex
CreateFileMappingW
CreateMutexW
GetModuleFileNameW
SetConsoleCtrlHandler
CloseHandle
WaitForSingleObject
GetCurrentThread
GetCurrentProcess
GetWindowsDirectoryW
DuplicateHandle

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegQueryValueExW
RegSetValueExW
GetLengthSid
CopySid
IsValidSid
GetSidSubAuthority
InitializeSid
GetSidLengthRequired
LookupAccountNameW
AddAce
InitializeAcl
GetAclInformation
MakeAbsoluteSD
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetSecurityDescriptorSacl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
GetSecurityDescriptorControl
MakeSelfRelativeSD
GetSecurityDescriptorLength
ConvertSidToStringSidW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
DeleteService
ControlService
OpenServiceW
CloseServiceHandle
StartServiceW
ChangeServiceConfig2W
CreateServiceW
OpenSCManagerW

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathStripToRootW

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

user32

GetAsyncKeyState
SetCapture
IsRectEmpty
CreatePopupMenu
GetMenuDefaultItem
RedrawWindow
DestroyMenu
GetMenuItemInfoW
KillTimer
SetTimer
InvalidateRect
DeleteMenu
ShowOwnedPopups
SetCursor
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoW
SetRectEmpty
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
IntersectRect
InflateRect
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
UpdateWindow
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
GetWindowPlacement
DefWindowProcW
CallWindowProcW
GetMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
PostQuitMessage
IsIconic
CharUpperBuffW
BeginPaint
GetWindowDC
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
ShowWindow
MoveWindow
SetWindowLongW
IsWindow
IsDialogMessageW
SendDlgItemMessageW
CheckDlgButton
GetScrollPos
SetScrollPos
GetWindowRgn
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
DestroyIcon
GetFocus
GetDesktopWindow
RealChildWindowFromPoint
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
SendMessageW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
UnhookWindowsHookEx
LoadCursorW
GetSysColor
GetSysColorBrush
CharUpperW
GetSystemMetrics
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
CopyIcon
RegisterClipboardFormatW
GetUpdateRect
FrameRect
IsClipboardFormatAvailable
PostMessageW
GetClassNameW
GetWindowThreadProcessId
ReleaseDC
GetDC
EnableWindow
GetDlgItem
BringWindowToTop
SetForegroundWindow
SetWindowPos
SetMenuDefaultItem
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
WaitMessage
PostThreadMessageW
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
IsMenu
MonitorFromPoint
UpdateLayeredWindow
UnionRect
MapVirtualKeyExW
IsCharLowerW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetKeyNameTextW
LockWindowUpdate
SetCursorPos
SetRect
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyAcceleratorTableW
DrawFrameControl
DrawEdge
DrawStateW
GetSystemMenu
LoadMenuW
SetClassLongW
WindowFromPoint
DestroyAcceleratorTable
SetParent
DestroyCursor
DrawIcon
MapDialogRect
SubtractRect
SetFocus
GetDoubleClickTime
SetWindowRgn
IsZoomed
DrawIconEx
GetNextDlgGroupItem
LoadImageW
CopyImage
GetIconInfo
OffsetRect
MessageBeep
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
EndPaint
ReleaseCapture
MapVirtualKeyW

gdi32

SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
GetDeviceCaps
SetMapMode
GetClipBox
ExcludeClipRect
DeleteObject
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetObjectW
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateBitmap
GetStockObject
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateFontIndirectW
CreateRectRgnIndirect
SetRectRgn
CombineRgn
PatBlt
DPtoLP
CreateDIBitmap
CreateCompatibleBitmap
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
GetTextExtentPoint32W
GetBkColor
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateRoundRectRgn
CreatePolygonRgn
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
OffsetRgn
GetRgnBox
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceW
SetTextColor
SelectPalette
SelectObject
CreateDIBSection
CreateCompatibleDC

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

comdlg32

GetFileTitleW

shell32

ShellExecuteW
SHGetFileInfoW
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHAppBarMessage

ole32

OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
RevokeDragDrop

oleaut32

VarBstrFromDate
VariantInit
SysAllocStringLen
SysAllocString
SysFreeString
VariantClear
VariantChangeType
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

df0473c0a26112b62929f2b2c6aa516c

Code Sign

07Certificate

Key Usages

04:0d:8e:7b:88:93:abCertificate

Extended Key Usages

Key Usages

a7:76:54:47:ee:e2:39:08:5d:b3:56:63:34:bc:2c:43:77:af:a1:73Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

msimg32

comctl32

shlwapi

gdiplus

version

oleacc

imm32

winmm

user32

gdi32

winspool.drv

comdlg32

shell32

ole32

oleaut32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 293KB - Virtual size: 293KB

.data Size: 23KB - Virtual size: 58KB

.rsrc Size: 2KB - Virtual size: 1KB

07
Certificate

04:0d:8e:7b:88:93:ab
Certificate

a7:76:54:47:ee:e2:39:08:5d:b3:56:63:34:bc:2c:43:77:af:a1:73
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 293KB - Virtual size: 293KB

.data
Size: 23KB - Virtual size: 58KB

.rsrc
Size: 2KB - Virtual size: 1KB