2024-04-23_2fcc0afc8cbd5347e0fdd7ca88649a7b_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-23_2fcc0afc8cbd5347e0fdd7ca88649a7b_icedid
Size

2.2MB
MD5

2fcc0afc8cbd5347e0fdd7ca88649a7b
SHA1

0bff7e50123d5ae6dfe38852388e08202cd2fd35
SHA256

6ac5de322182c1d87d4d920754bdd60d8dfb9bde44cc27cded9c1a6338b83d64
SHA512

812d36c9f335dd07b682d9647646031aadf7ef0428a1d05bfbbd9678550bfafe379a7c759428f6f9b56c3cec5f148febc91e30f4485ba5a8574519e052de41ad
SSDEEP

49152:Nt7393VLjzU393VLjzJHHHTLzzkH09x46Zgyy7mbKR9kK2eNIFZNze3IBGy0FtvF:Nt/sqzyy7mmR9k4NI1eMGyUau

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-23_2fcc0afc8cbd5347e0fdd7ca88649a7b_icedid

Files

2024-04-23_2fcc0afc8cbd5347e0fdd7ca88649a7b_icedid
.exe windows:5 windows x86 arch:x86

9bf4601fc4b5f995fa1ad001a479890d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Program Files\Microsoft Visual Studio\passcape\ie\Release\PIEPR.pdb

Imports

ole32

ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
OleDuplicateData
ReadClassStg
ReadFmtUserTypeStg
CoCreateInstance
CoInitializeEx
StringFromGUID2
CoDisconnectObject
StringFromCLSID
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateStreamOnHGlobal
CoTaskMemFree
CLSIDFromString
CoInitialize
CoUninitialize

oleaut32

SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VariantInit
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromDate
VarDateFromStr
OleLoadPicture
SysAllocStringLen
VariantClear
SysFreeString
VarBstrCmp
SysStringLen
SafeArrayDestroyDescriptor
SysReAllocStringLen
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
GetErrorInfo
SetErrorInfo
CreateErrorInfo

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

kernel32

GetModuleHandleW
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetAtomNameA
GlobalFlags
GetCPInfo
GetOEMCP
LocalUnlock
LocalLock
LoadLibraryW
GetSystemDirectoryW
GetDiskFreeSpaceA
RtlUnwind
UnhandledExceptionFilter
ExitProcess
SetConsoleCtrlHandler
HeapFree
HeapAlloc
IsDebuggerPresent
RaiseException
VirtualProtect
VirtualAlloc
SetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
GetStartupInfoA
HeapReAlloc
ExitThread
CreateThread
HeapSize
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetStdHandle
FatalAppExitA
WaitForMultipleObjects
SetHandleCount
HeapCreate
HeapDestroy
VirtualFree
CreateFileW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
SetEnvironmentVariableA
ReleaseMutex
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcpynA
lstrlenA
FormatMessageA
LoadLibraryExA
DebugBreak
GetModuleFileNameA
lstrcatA
GetLastError
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
GetCurrentProcess
GetModuleHandleA
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
ConvertDefaultLocale
EnumResourceLanguagesA
InterlockedExchange
CreateEventA
SuspendThread
ResumeThread
SetThreadPriority
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExA
GetShortPathNameA
GetFullPathNameA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleFileNameW
GlobalSize
GetProcessHeap
VirtualQuery
GlobalMemoryStatus
GetSystemInfo
GetLocaleInfoA
IsBadReadPtr
SetUnhandledExceptionFilter
TerminateProcess
GetTimeZoneInformation
ResetEvent
SetEvent
lstrcmpiW
GetFileTime
SetFileTime
DosDateTimeToFileTime
FileTimeToDosDateTime
DeviceIoControl
GetTempFileNameA
GetTempPathA
GetDriveTypeA
SetCurrentDirectoryA
RemoveDirectoryA
FindFirstFileA
FindNextFileA
FindClose
MoveFileA
SetFileAttributesA
CopyFileA
GetFileAttributesA
GetWindowsDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
lstrcmpA
CloseHandle
OpenProcess
SetLastError
GetPrivateProfileSectionNamesA
CompareStringA
SystemTimeToFileTime
DeleteFileA
Sleep
WriteFile
GetTickCount
GetExitCodeProcess
SetErrorMode
ReadFile
CompareStringW
GetSystemDirectoryA
lstrcmpW
GetCurrentThread
lstrcatW
ReadProcessMemory
WriteProcessMemory
MulDiv
GetVolumeInformationA
CreateFileA
GetFileSize
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
InitializeCriticalSection
WritePrivateProfileStringA
ExpandEnvironmentStringsA
GetPrivateProfileIntA
FreeResource
GetPrivateProfileStringA
lstrcpyW
GetLocalTime
GetCurrentProcessId
InterlockedDecrement
InterlockedIncrement
SetFilePointer
LocalAlloc
LocalFree
GetSystemTimeAsFileTime
CompareFileTime
GetCommandLineA
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetVersionExA
FindResourceA
LoadResource
LockResource
SizeofResource
CreateProcessA
WaitForSingleObject
InitializeCriticalSectionAndSpinCount

user32

UnionRect
GetDCEx
ScrollWindowEx
ShowWindow
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemInt
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
IntersectRect
GetWindowPlacement
GetDesktopWindow
SetActiveWindow
GetNextDlgTabItem
EndPaint
BeginPaint
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetLastActivePopup
GetWindowTextLengthA
GetScrollPos
SetScrollPos
SetFocus
UnhookWindowsHookEx
GetMenuState
GetMenuStringA
InsertMenuA
RemoveMenu
GetActiveWindow
DialogBoxParamA
SetWindowTextA
EndDialog
MsgWaitForMultipleObjects
CharLowerBuffW
LockWindowUpdate
GetClipboardData
SetParent
GetFocus
PostQuitMessage
GetDC
SetRect
InvalidateRgn
CharUpperA
CharUpperBuffA
GetKeyState
DrawFocusRect
DrawFrameControl
DrawStateA
DrawIconEx
GetSubMenu
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
DrawEdge
InflateRect
SetMenuDefaultItem
FillRect
OffsetRect
IsCharLowerA
MapVirtualKeyA
GetKeyNameTextA
GetKeyboardLayoutList
MapVirtualKeyExW
ToUnicodeEx
MapVirtualKeyExA
ToAsciiEx
VkKeyScanExW
GetKeyboardLayout
VkKeyScanExA
SetWindowLongA
GetDlgItemTextA
CreateDialogIndirectParamA
DestroyWindow
CreateWindowExA
KillTimer
SetTimer
CharLowerA
SetDlgItemTextA
PeekMessageA
TranslateMessage
DispatchMessageA
CharLowerBuffA
CharLowerW
GetQueueStatus
LoadAcceleratorsA
TranslateAcceleratorA
GetWindowTextA
CopyRect
GetSysColor
GetCursorPos
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
CreatePopupMenu
GetWindowLongA
GetClassNameA
SendMessageTimeoutA
SetWindowPos
ReleaseCapture
SetCursor
RegisterWindowMessageA
SetForegroundWindow
ChildWindowFromPoint
SetCapture
ClientToScreen
GetClientRect
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
WindowFromPoint
GetParent
GetWindow
PtInRect
IsWindowVisible
IsWindow
GetWindowRect
GetWindowDC
GetSystemMetrics
ReleaseDC
DestroyIcon
IsRectEmpty
UnpackDDElParam
ReuseDDElParam
LoadMenuA
GetMenuBarInfo
InsertMenuItemA
BringWindowToTop
GetTabbedTextExtentA
IsClipboardFormatAvailable
DeleteMenu
SetRectEmpty
GetDialogBaseUnits
UnregisterClassA
GetSysColorBrush
ShowOwnedPopups
GetMessageA
ValidateRect
OemToCharBuffA
DestroyMenu
DestroyCursor
MessageBeep
GetWindowThreadProcessId
MessageBoxA
IsCharAlphaNumericA
wsprintfA
IsWindowEnabled
LoadImageA
InvalidateRect
UpdateWindow
PostMessageA
GetDlgItem
LoadBitmapA
LoadCursorA
EnableWindow
LoadIconA
SendMessageA
RedrawWindow
SystemParametersInfoA

gdi32

OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
SetWindowOrgEx
ExtCreatePen
CreateHatchBrush
GetDCOrgEx
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetCharWidthA
StretchDIBits
GetBkColor
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetTextColor
SetStretchBltMode
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
SetGraphicsMode
GetTextMetricsA
GetNearestColor
GetDeviceCaps
GetTextExtentPoint32A
PatBlt
GetTextColor
CreateBitmap
CreateFontA
CreateDIBitmap
GetViewportOrgEx
SetViewportOrgEx
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectA
GetObjectA
SetROP2
CreatePen
SelectObject
GetStockObject
Rectangle
PlayMetaFile
DeleteObject

winspool.drv

DocumentPropertiesA
OpenPrinterA
GetJobA
ClosePrinter

advapi32

GetSecurityDescriptorDacl
RegQueryValueA
RegOpenKeyA
RegSetValueA
RegDeleteKeyA
RegEnumValueA
RegEnumKeyA
RegQueryInfoKeyA
RegDeleteValueA
RegFlushKey
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegConnectRegistryA
GetFileSecurityA
SetFileSecurityA
RegSetKeySecurity
RegOpenKeyExA
RegGetKeySecurity
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
InitializeAcl
AddAccessAllowedAce
GetAce
SetSecurityDescriptorDacl
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegCloseKey
RegSaveKeyA
LookupAccountSidW
GetSidSubAuthority
DeleteAce
GetSecurityDescriptorOwner
LookupAccountNameA
CopySid
EqualSid
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
GetTokenInformation
GetUserNameA
CryptExportKey
GetLengthSid
CryptDecrypt
CryptDeriveKey
CryptSetHashParam
CryptDestroyKey
CryptEnumProvidersA
CryptAcquireContextA
CryptReleaseContext
CryptGetKeyParam
CryptSetKeyParam
CryptGetProvParam
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
FreeSid
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetFileInfoA
ExtractIconA
DragFinish
DragQueryFileA
ShellExecuteA

shlwapi

PathMatchSpecA
StrRetToStrA
PathRemoveFileSpecW
PathFindExtensionA
PathRemoveExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
UrlUnescapeA

wininet

InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpSendRequestA
HttpEndRequestA
HttpSendRequestExA
InternetGetLastResponseInfoA
FtpOpenFileA
FtpCommandA
GopherCreateLocatorA
FtpFindFirstFileA
InternetConnectA
GopherOpenFileA
InternetOpenUrlA
HttpOpenRequestA
GopherFindFirstFileA
InternetCloseHandle
GopherGetAttributeA
InternetFindNextFileA
InternetAutodial
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetSetOptionExA
InternetSetCookieA
InternetGetCookieA
InternetQueryDataAvailable
FtpDeleteFileA
FtpRenameFileA
FtpCreateDirectoryA
HttpQueryInfoA
HttpAddRequestHeadersA
InternetErrorDlg
FtpGetFileA
FtpPutFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA

comdlg32

GetFileTitleA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 639KB - Virtual size: 638KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9bf4601fc4b5f995fa1ad001a479890d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ole32

oleaut32

version

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

wininet

comdlg32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 309KB - Virtual size: 309KB

.data Size: 17KB - Virtual size: 101KB

.rsrc Size: 639KB - Virtual size: 638KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 309KB - Virtual size: 309KB

.data
Size: 17KB - Virtual size: 101KB

.rsrc
Size: 639KB - Virtual size: 638KB