2024-04-25_d8ccc66a2df9de1493eeabd40702dc87_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-25_d8ccc66a2df9de1493eeabd40702dc87_icedid
Size

3.4MB
MD5

d8ccc66a2df9de1493eeabd40702dc87
SHA1

8ab3648c2ad5d22fad78fb852e9b0186884c657e
SHA256

74c329a7de4ef2419a29e1e66b22fd5935658da72a273a7795ddd8692fdc55f2
SHA512

2c03d1d990405c767622054d915c9fc6f5122f16cdba390a5d0ac3c5d8eb516296227198c07779d786f1c7639a1ca2f0a18e1ef9713274fcbe607334c622af0b
SSDEEP

49152:9KKan6y7tw056eaJ5wtmrr8OPIBU77RLwhlWN4:9S6y2056eaJ5wQrr8OPIR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-25_d8ccc66a2df9de1493eeabd40702dc87_icedid

Files

2024-04-25_d8ccc66a2df9de1493eeabd40702dc87_icedid
.exe windows:5 windows x86 arch:x86

b06279a023278df174f95e2bc148ad83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW
StrStrIW
PathRemoveFileSpecW
SHDeleteValueW
PathFileExistsW
SHGetValueW
SHSetValueW

powrprof

PowerReadDCValueIndex
PowerEnumerate
PowerCanRestoreIndividualDefaultPowerScheme
PowerReadACValueIndex
PowerGetActiveScheme
PowerSetActiveScheme
PowerWriteDCValueIndex
PowerWriteACValueIndex
PowerSettingAccessCheck
SetSuspendState
PowerRestoreIndividualDefaultPowerScheme

setupapi

SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupDiOpenDevRegKey
SetupDiClassGuidsFromNameW
SetupDiEnumDeviceInfo
CM_Get_Child_Ex
CM_Get_Device_ID_ExW
CM_Get_Sibling_Ex
CM_Locate_DevNodeW
CM_Reenumerate_DevNode
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW

psapi

GetModuleFileNameExW

rpcrt4

UuidFromStringW

wlanapi

WlanIhvControl
WlanAllocateMemory
WlanCloseHandle
WlanGetInterfaceCapability
WlanFreeMemory
WlanOpenHandle

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

dwmapi

DwmIsCompositionEnabled
ord102

gdiplus

GdiplusShutdown
GdipFree
GdipAlloc
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipDeleteBrush
GdipSetSolidFillColor
GdipCreatePath
GdipDeletePath
GdipDeleteGraphics
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipDeleteFont
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipDrawImageI
GdipSetPageUnit
GdipCreateFromHWND
GdipGetImageHeight
GdipGetImageWidth
GdiplusStartup
GdipCloneImage
GdipCloneBrush
GdipCreateFont
GdipDrawImageRectRectI
GdipMeasureString
GdipDrawString
GdipFillPath
GdipCreateFromHDC
GdipAddPathArcI
GdipAddPathLineI
GdipClosePathFigure
GdipStartPathFigure
GdipSetPathFillMode
GdipCreateSolidFill
GdipSetImageAttributesColorKeys
GdipBitmapGetPixel
GdipCreateBitmapFromResource
GdipDisposeImage

user32

CopyRect
PtInRect
PostMessageW
GetWindowRect
SetTimer
KillTimer
GetDesktopWindow
EnableWindow
OffsetRect
RegisterWindowMessageW
SetWindowPos
ShowWindow
GetClassNameW
GetWindowThreadProcessId
GetWindowPlacement
FindWindowW
EnumWindows
GetForegroundWindow
DrawTextW
SetWindowRgn
UpdateWindow
InvalidateRect
SetLayeredWindowAttributes
TrackMouseEvent
SendMessageW
GetClientRect
LoadIconW
LoadBitmapW
UpdateLayeredWindow
LoadImageW
FillRect
EnumDisplayDevicesW
SetActiveWindow
GetWindow
GetDlgItem
FindWindowExW
SendDlgItemMessageW
PostThreadMessageW
RegisterClipboardFormatW
MessageBeep
GetNextDlgGroupItem
SetCapture
InvalidateRgn
CopyAcceleratorTableW
SetRect
CharNextW
IsRectEmpty
CharUpperW
UnregisterClassW
GetSysColorBrush
GetMenuItemInfoW
InflateRect
SetWindowContextHelpId
UnpackDDElParam
ReuseDDElParam
DestroyMenu
ReleaseCapture
LoadAcceleratorsW
InsertMenuItemW
SetRectEmpty
BringWindowToTop
TranslateAcceleratorW
ShowOwnedPopups
PostQuitMessage
GetMessageW
TranslateMessage
ValidateRect
MapDialogRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
PeekMessageW
MapWindowPoints
TrackPopupMenu
SetMenu
IsWindowVisible
CreateWindowExW
GetClassInfoExW
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
SetWindowPlacement
GetDlgCtrlID
CallWindowProcW
GetMenu
IntersectRect
SystemParametersInfoA
GetMenuState
GetMenuStringW
GetMenuItemID
GetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
IsWindowEnabled
GetNextDlgTabItem
EndDialog
DefWindowProcW
GetSystemMetrics
SendInput
GetWindowLongW
GetParent
IsIconic
GetMessagePos
SetCursor
SetWindowLongW
ScreenToClient
LoadCursorW
UnhookWindowsHookEx
GetCursorPos
GetClassInfoW
RegisterClassW
LoadMenuW
RemoveMenu
ModifyMenuW
InsertMenuW
GetSubMenu
GetMenuItemCount
CheckMenuItem
CreatePopupMenu
UnregisterPowerSettingNotification
RegisterPowerSettingNotification
AttachThreadInput
SetForegroundWindow
MonitorFromWindow
SystemParametersInfoW
GetWindowTextW
SetWindowsHookExW
GetKeyState
DestroyIcon
MessageBoxW
OpenInputDesktop
CloseDesktop
ReleaseDC
GetDC

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize
CLSIDFromProgID
PropVariantClear
CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
CoInitializeSecurity
CoUninitialize

oleaut32

OleCreateFontIndirect
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
SysAllocString
SafeArrayPutElement
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
SysStringLen
VariantCopy
VariantChangeType
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime

kernel32

ExitThread
GetCurrentThread
ResetEvent
SetEvent
SetSystemPowerState
GetCurrentProcess
GetSystemPowerStatus
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
OpenEventW
HeapAlloc
GetProcessHeap
HeapFree
GetVolumeNameForVolumeMountPointW
GetCurrentThreadId
ReleaseMutex
CreateMutexW
DeviceIoControl
GetDriveTypeW
EnterCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
CloseHandle
CreateProcessW
Sleep
Module32NextW
Module32FirstW
CreateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
FreeLibrary
MulDiv
GetProcAddress
LoadLibraryW
LocalFree
FormatMessageW
GetLastError
FindResourceExW
GetModuleHandleW
GetUserDefaultUILanguage
OutputDebugStringW
GetModuleFileNameW
TerminateProcess
WaitForSingleObject
OpenProcess
GetCurrentProcessId
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetDriveTypeA
GetCurrentDirectoryA
CreateFileA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
LCMapStringA
InitializeCriticalSectionAndSpinCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
CreateFileW
GetSystemTimeAsFileTime
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
HeapSize
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
ExitProcess
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
GetStartupInfoW
GetTickCount
GetFileTime
GetFileSizeEx
GetFileAttributesW
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileW
WritePrivateProfileStringW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
GetThreadLocale
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GlobalGetAtomNameW
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
CreateEventW
SuspendThread
SetThreadPriority
VirtualProtect
GetModuleHandleA
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
SetLastError
lstrlenA
LocalAlloc
GetVersionExW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
SetThreadExecutionState
GetDevicePowerState
lstrcpyW
lstrlenW
WideCharToMultiByte
ResumeThread
QueryDosDeviceW
GetProductInfo
GetExitCodeThread
TerminateThread
SleepEx
lstrcpynW
GetLogicalDriveStringsW

advapi32

RegCloseKey
RegSetValueExW
RegOpenKeyW
RegQueryValueExW
RegGetValueW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetNamedSecurityInfoW
AdjustTokenPrivileges
PrivilegeCheck
LookupPrivilegeValueW
OpenProcessToken
GetTokenInformation
EqualSid
OpenThreadToken
ImpersonateSelf
AllocateAndInitializeSid
RegDeleteValueW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
NotifyServiceStatusChangeW
RegEnumKeyExW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExW

shell32

ShellExecuteW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
Shell_NotifyIconW
DragFinish
DragQueryFileW
SHGetFolderPathW

gdi32

GetDIBColorTable
DeleteDC
StretchBlt
GetDeviceCaps
CombineRgn
DeleteObject
SelectObject
CreateCompatibleDC
CreateRoundRectRgn
CreateRectRgn
CreateSolidBrush
GetRgnBox
GetTextColor
GetBkColor
GetMapMode
CreateCompatibleBitmap
CreateRectRgnIndirect
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
SetDIBColorTable
CreateFontW
CreateFontIndirectW
GetStockObject
GetTextExtentPoint32W
GetTextMetricsW
GetPixel
CreateDIBSection
GetObjectW
BitBlt

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

oledlg

OleUIBusyW

Sections

.text
Size: 437KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b06279a023278df174f95e2bc148ad83

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

powrprof

setupapi

psapi

rpcrt4

wlanapi

version

dwmapi

gdiplus

user32

ole32

oleaut32

kernel32

advapi32

shell32

gdi32

msimg32

comdlg32

winspool.drv

oledlg

Sections

.text Size: 437KB - Virtual size: 437KB

.rdata Size: 127KB - Virtual size: 127KB

.data Size: 28KB - Virtual size: 44KB

.rsrc Size: 2.9MB - Virtual size: 2.9MB

.text
Size: 437KB - Virtual size: 437KB

.rdata
Size: 127KB - Virtual size: 127KB

.data
Size: 28KB - Virtual size: 44KB

.rsrc
Size: 2.9MB - Virtual size: 2.9MB