2024-04-29_4808e1640127eadb5870e3fca843774a_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-29_4808e1640127eadb5870e3fca843774a_icedid
Size

1016KB
MD5

4808e1640127eadb5870e3fca843774a
SHA1

9a79164ff23a568ac2992344ed7a7f6938c6367d
SHA256

5cd94ff59fbbaa739bd38bd2eb5367d9269e723dfcc8dc63bb7f7af4d0c476fe
SHA512

3516fc49e4f8fdca607be303ea7839c16461ba0409f67d5889b9254f18a1805e15c381d77f24eef7505eae7e6b27627705f7f0197e5cba69a01719d05ce0fbc7
SSDEEP

12288:FrugpUnhmKeFotRhijJI3gOUBli3swpSxjwSo8SBZXP3WPF9baYbbtJMGWLUE+D4:Fru7nhmKeFi4FIg3licwpSySoMlI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-29_4808e1640127eadb5870e3fca843774a_icedid

Files

2024-04-29_4808e1640127eadb5870e3fca843774a_icedid
.exe windows:4 windows x86 arch:x86

eebe07bea30288fc3e7d04394c709599

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\My Projects\Macro Expert\Output\MacroPlayer.pdb

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

winmm

mixerGetControlDetailsA
mixerSetControlDetails
mixerGetNumDevs
mixerGetLineControlsA
PlaySoundA
mixerClose
mciSendCommandA
timeEndPeriod
timeBeginPeriod
mixerGetLineInfoA
timeGetTime

wininet

FindCloseUrlCache
DeleteUrlCacheEntry
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA

document office

?Open_Document@CDocument_Excel@@QAEHPBD00HHI@Z
??0CDocument_Excel@@QAE@XZ
??1CDocument_Excel@@QAE@XZ
?Close_Document@CDocument_Excel@@QAEHPBDH@Z
?ActivateSheet@CDocument_Excel@@QAEHEPBD@Z
?RemoveSheet@CDocument_Excel@@QAEHEPBD@Z
?InsertSheet@CDocument_Excel@@QAEHEPBD0E@Z
?Find_Cell@CDocument_Excel@@QAEHPBD00AAJHHH@Z
?IsValidColName@CDocument_Excel@@QAEHPBD@Z
?Write_Cell@CDocument_Excel@@QAEHPBD0AAVCOleVariant@@H@Z
?Read_Cell@CDocument_Excel@@QAEHPBD0AAVCOleVariant@@H@Z
?IsValidCellName@CDocument_Excel@@QAEHPBD@Z
?ShowAppWnd@CDocument_Excel@@QAEHH@Z

playerassistant

ord1
ord7
ord8
ord9
ord3
ord2
ord6
ord5
ord4

database

?ExecuteSQL@CDatabase_Dataset@@QAEHPBDI@Z
?Connect@CDatabase_Dataset@@QAEHPBD@Z
?SetTimeout@CDatabase_Dataset@@QAEXI@Z
?GetSQLEffectCount@CDatabase_Dataset@@QAEJXZ
?SetDBName@CDatabase_Dataset@@QAEXPBD@Z
??0CDatabase_Dataset@@QAE@XZ
?Close_Dataset@CDatabase_Dataset@@QAEHXZ
?SetValue@CDatabase_Dataset@@QAEHPBDJPAXII@Z
?SetAuthInfo@CDatabase_Dataset@@QAEXPBD0@Z
?Move@CDatabase_Dataset@@QAEHIJPAH@Z
??1CDatabase_Dataset@@QAE@XZ
?GetValue@CDatabase_Dataset@@QAEHPBDJAAPAXAAI2AAH@Z

mk_dial

ord1
ord2

kernel32

SearchPathA
lstrcpyA
GetVersionExA
GetTimeFormatA
GetDateFormatA
GetModuleFileNameA
RemoveDirectoryA
lstrcpynA
WritePrivateProfileStringA
GetPrivateProfileIntA
MulDiv
LocalFree
FreeResource
GetModuleHandleA
GetModuleFileNameW
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalGetAtomNameA
InterlockedIncrement
SetThreadPriority
SuspendThread
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
ExitProcess
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
HeapSize
RaiseException
ExitThread
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetHandleCount
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
ReleaseSemaphore
CreateSemaphoreA
SetSystemPowerState
CreateProcessA
IsDBCSLeadByte
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
MoveFileA
ResumeThread
WaitForMultipleObjects
OpenEventA
TerminateThread
CreateThread
InterlockedDecrement
DisconnectNamedPipe
PeekNamedPipe
ConnectNamedPipe
CreateFileMappingA
CreateNamedPipeA
GetPrivateProfileStringA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetCurrentProcess
FormatMessageA
CancelIo
WaitNamedPipeA
CreateEventA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetSystemDirectoryA
GetLocalTime
lstrcmpA
DeviceIoControl
OpenProcess
GetCurrentThreadId
GetProcAddress
LoadLibraryA
FreeLibrary
SetLastError
GetWindowsDirectoryA
FindClose
FindNextFileA
FindFirstFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
DeleteFileA
CopyFileA
CompareFileTime
GetFileTime
OutputDebugStringA
GetFileAttributesA
CreateDirectoryA
CloseHandle
WriteFile
GetACP
CreateFileA
ReadFile
SetFilePointer
GetFileSize
FindResourceA
LoadResource
LockResource
SizeofResource
SetEvent
GetCurrentProcessId
Sleep
GetTickCount
ResetEvent
WaitForSingleObject
GetVersion
CompareStringA
lstrcmpiA
GetLastError
InterlockedExchange
lstrlenW
CompareStringW
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
GlobalAddAtomA

user32

SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
DestroyMenu
ReuseDDElParam
UnpackDDElParam
GetSysColorBrush
UnregisterClassA
PostThreadMessageA
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRgn
MessageBeep
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
CallWindowProcA
IntersectRect
EndPaint
BeginPaint
UnhookWindowsHookEx
ShowOwnedPopups
GetDlgItem
GetNextDlgTabItem
GetMenuState
GetMenuItemID
GetSubMenu
DestroyCursor
SetCursor
ShowCursor
GetSystemMenu
SetMenuItemInfoA
DefWindowProcA
SetWindowRgn
IsDialogMessageA
WindowFromPoint
GetMenuItemCount
GetMenuItemInfoA
GetMenuStringA
LoadMenuA
SetScrollInfo
SetScrollPos
GetScrollPos
GetScrollInfo
SetMenu
GetMenu
ToAscii
GetCapture
ScreenToClient
DrawFrameControl
GrayStringA
DrawTextExA
TabbedTextOutA
DrawFocusRect
GetClassLongA
SetClassLongA
GetNextDlgGroupItem
GetDoubleClickTime
SetCapture
IsWindowEnabled
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
TranslateAcceleratorA
EndDialog
GetIconInfo
DrawIconEx
SetPropA
DrawAnimatedRects
BringWindowToTop
SetWindowLongA
FillRect
ClientToScreen
OffsetRect
GetWindowDC
PtInRect
DrawTextA
WaitForInputIdle
SetCursorPos
mouse_event
VkKeyScanA
GetMessageA
GetClipboardData
IsClipboardFormatAvailable
CloseClipboard
EmptyClipboard
OpenClipboard
ExitWindowsEx
GetDlgCtrlID
LoadCursorA
LoadIconA
LockWindowUpdate
RegisterWindowMessageA
DestroyWindow
SendMessageTimeoutA
EnumThreadWindows
SystemParametersInfoA
DestroyIcon
MapVirtualKeyA
LoadStringA
DispatchMessageA
TranslateMessage
PeekMessageA
GetWindowLongA
GetParent
MessageBoxA
GetFocus
GetKeyState
RegisterHotKey
UnregisterHotKey
GetWindowTextLengthA
GetWindowTextA
GetClassNameA
EnumWindows
SetForegroundWindow
UpdateWindow
InvalidateRect
ReleaseCapture
GetClientRect
EnableWindow
KillTimer
IsWindowVisible
SetWindowPos
SetTimer
LoadBitmapA
keybd_event
PostMessageA
GetWindowThreadProcessId
AttachThreadInput
GetSystemMetrics
ReleaseDC
GetDC
LoadImageA
GetSysColor
CopyRect
GetDesktopWindow
SendMessageA
MoveWindow
ShowWindow
IsIconic
IsZoomed
GetWindowPlacement
GetCursorPos
PostQuitMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
InflateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowTextA
SetDlgItemTextA
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
MapWindowPoints
CallNextHookEx
GetWindowRect
IsWindow
GetWindow
GetForegroundWindow
GetAsyncKeyState
CharUpperA
GetPropA
RemovePropA
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
TrackPopupMenu
SetFocus
SetClipboardData

gdi32

Ellipse
SetBkMode
SetStretchBltMode
SelectPalette
PtVisible
RectVisible
TextOutA
SetMapMode
GetClipBox
SetTextCharacterExtra
RoundRect
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
MoveToEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
OffsetRgn
IntersectClipRect
SaveDC
ExcludeClipRect
RestoreDC
LineTo
GetDeviceCaps
DPtoLP
CreateRectRgn
GetDIBits
CombineRgn
CreateBitmap
GetTextExtentPoint32A
GetStockObject
Rectangle
CreateSolidBrush
SetBkColor
SetTextColor
GetTextMetricsA
StretchBlt
CreateFontIndirectA
ScaleViewportExtEx
GetObjectA
CreateDIBSection
GdiFlush
GetPixel
GetSystemPaletteEntries
BitBlt
SelectObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
CreatePen
DeleteObject
TextOutW
GetCharABCWidthsA
GetCharWidthA
RealizePalette
GetDIBColorTable
SetDIBColorTable
Escape
ExtTextOutA

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
RegEnumKeyA
RegOpenKeyA
ControlService
StartServiceA
DeleteService
OpenServiceA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
LookupAccountSidA
GetTokenInformation
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

SHFileOperationA
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExA
Shell_NotifyIconA
DragFinish
DragQueryFileA
SHGetSpecialFolderPathA

shlwapi

SHDeleteKeyA
PathFileExistsA
StrStrIA
UrlCompareA
StrStrA
PathFindExtensionA
SHDeleteEmptyKeyA
PathCompactPathA
ChrCmpIA
PathFindFileNameA
PathStripToRootA
PathIsRootA
PathIsUNCA

oledlg

ord8

ole32

OleInitialize
CoRevokeClassObject
CoSetProxyBlanket
OleIsCurrentClipboard
OleRun
CoTaskMemFree
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoDisconnectObject
OleUninitialize
CoFreeUnusedLibraries
CoGetClassObject
CLSIDFromString
CoCreateGuid
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
StringFromGUID2
CLSIDFromProgID
CoCreateInstance

oleaut32

SysAllocString
VariantCopy
SysAllocStringByteLen
VarR8FromCy
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
OleCreateFontIndirect
VarDateFromStr
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VarUdateFromDate
SysStringLen
SysFreeString
GetErrorInfo

ddraw

DirectDrawCreate

wtsapi32

WTSSendMessageA

psapi

EnumProcesses
GetModuleBaseNameA
GetModuleFileNameExA
EnumProcessModules

mpr

WNetConnectionDialog1A
WNetCancelConnection2A
WNetAddConnection3A

Sections

.text
Size: 732KB - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eebe07bea30288fc3e7d04394c709599

Headers

File Characteristics

PDB Paths

Imports

version

winmm

wininet

document office

playerassistant

database

mk_dial

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

ddraw

wtsapi32

psapi

mpr

Sections

.text Size: 732KB - Virtual size: 731KB

.rdata Size: 140KB - Virtual size: 139KB

.data Size: 20KB - Virtual size: 268KB

.rsrc Size: 120KB - Virtual size: 119KB

.text
Size: 732KB - Virtual size: 731KB

.rdata
Size: 140KB - Virtual size: 139KB

.data
Size: 20KB - Virtual size: 268KB

.rsrc
Size: 120KB - Virtual size: 119KB