2024-04-30_7ab3d402a1fee5daf79058a20f4af1c7_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-04-30_7ab3d402a1fee5daf79058a20f4af1c7_icedid
Size

6.6MB
MD5

7ab3d402a1fee5daf79058a20f4af1c7
SHA1

427b5e6577befec7cfc755ea021dd602f2e982c6
SHA256

3971ea8f5e6d711a7504a0911101e4ced2afc7d88087c3e026523940a69106a5
SHA512

2517fff43757fe293a274894828cc8f897332c52b6b07ce160ce290ae0d89b98a88138d973731e25fea4d4f34416e3e6a7f5f0e7f5ff124757627f9b8edd5f9a
SSDEEP

196608:VE+D09SWt62iXK2c+JRymToqMl+/2X+9kcAh4ZwmKQxO:m06Bp2kfZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-30_7ab3d402a1fee5daf79058a20f4af1c7_icedid

Files

2024-04-30_7ab3d402a1fee5daf79058a20f4af1c7_icedid
.exe windows:5 windows x86 arch:x86

b37ec17ebd5ca65dd7166aabb4c85f9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA
sndPlaySoundA

kernel32

GetLocaleInfoW
EnumSystemLocalesA
IsValidLocale
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetDriveTypeW
CompareStringW
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
MulDiv
DeleteFileA
Sleep
MultiByteToWideChar
lstrlenA
GetLocaleInfoA
GetLastError
FindFirstFileA
FindNextFileA
FindClose
HeapCreate
GetFileAttributesA
CreateDirectoryA
GlobalLock
WriteProfileStringA
lstrcatA
WinExec
lstrcpyA
GlobalUnlock
GlobalAlloc
FindResourceA
FreeResource
CreateMutexA
ReleaseMutex
GetDateFormatA
GetTimeFormatA
GetCurrencyFormatA
GetNumberFormatA
lstrcpynA
CreateFileA
GetCommState
CloseHandle
SetCommState
GetCommTimeouts
SetCommTimeouts
WriteFile
ReadFile
PurgeComm
LoadLibraryA
GetStdHandle
GetStringTypeW
LCMapStringW
IsValidCodePage
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
CreateThread
ExitThread
RaiseException
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapReAlloc
ExitProcess
DecodePointer
EncodePointer
HeapFree
VirtualQuery
GetSystemInfo
GetProcAddress
FreeLibrary
GetTimeZoneInformation
SetLastError
GetTickCount
lstrcmpA
VirtualAlloc
HeapAlloc
GetSystemTimeAsFileTime
FindResourceExW
VirtualProtect
DeactivateActCtx
GetModuleHandleA
ActivateActCtx
GetUserDefaultLCID
SearchPathA
GetProfileIntA
GetTempPathA
GetTempFileNameA
GetWindowsDirectoryA
GetCurrentDirectoryA
GetSystemDirectoryW
GetOEMCP
GetCPInfo
SetErrorMode
GetACP
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
LoadLibraryExA
InterlockedExchange
GetModuleHandleW
GetFileTime
GetFileSizeEx
GetFileAttributesExA
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
FileTimeToLocalFileTime
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
FileTimeToSystemTime
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
lstrlenW
CompareStringA
LoadLibraryW
lstrcmpW
GetCurrentProcessId
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
MoveFileA
lstrcmpiA
GetThreadLocale
GlobalFree
CopyFileA
GlobalSize
FormatMessageA
LocalFree

user32

ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
GetSystemMenu
SetClassLongA
DestroyAcceleratorTable
SetParent
IsZoomed
DrawIconEx
NotifyWinEvent
EnableScrollBar
HideCaret
InvertRect
CreatePopupMenu
GetMenuDefaultItem
IsClipboardFormatAvailable
MessageBeep
GetNextDlgGroupItem
ReleaseCapture
SetCapture
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableA
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
UnregisterClassA
RealChildWindowFromPoint
GetSysColorBrush
CharNextA
ShowOwnedPopups
WaitMessage
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
SystemParametersInfoA
GetMenuItemInfoA
GetMessageA
TranslateMessage
ValidateRect
IntersectRect
MapVirtualKeyA
GetKeyNameTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
RegisterWindowMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassNameA
SetPropA
GetPropA
RemovePropA
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetScrollRange
SetForegroundWindow
ShowScrollBar
IsWindowVisible
UnpackDDElParam
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetWindowThreadProcessId
GetLastActivePopup
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
TabbedTextOutA
GetWindowTextLengthA
GetWindowTextA
SetFocus
SetWindowPos
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
CheckDlgButton
GetWindow
CharUpperA
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
EndDialog
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
DrawIcon
RegisterClipboardFormatA
LoadImageW
IsCharLowerA
MapVirtualKeyExA
IsIconic
SetWindowRgn
PtInRect
GetCursorPos
EnableMenuItem
GetAsyncKeyState
SetMenu
GetMenu
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DrawMenuBar
MessageBoxA
wsprintfA
GetForegroundWindow
CopyImage
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
PostThreadMessageA
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
GetWindowRgn
KillTimer
FindWindowA
LoadIconW
LoadCursorA
ClipCursor
BringWindowToTop
ModifyMenuA
DeleteMenu
LoadMenuW
SetTimer
GetKeyState
SubtractRect
GetDoubleClickTime
CharUpperBuffA
CopyIcon
GetUpdateRect
CreateWindowExA
GetSystemMetrics
GetClipCursor
RedrawWindow
UpdateWindow
LoadMenuA
LoadImageA
ReleaseDC
CreateIconIndirect
GetIconInfo
DrawStateA
OffsetRect
GetClientRect
DrawFocusRect
GetSysColor
FrameRect
PostMessageA
TrackPopupMenuEx
GetSubMenu
GetWindowRect
GetActiveWindow
WindowFromPoint
ClientToScreen
SetCursor
GetParent
GetNextDlgTabItem
GetWindowLongA
DestroyIcon
DestroyMenu
DestroyCursor
GetScrollPos
SetScrollPos
SetScrollRange
keybd_event
LoadIconA
InvalidateRect
GetFocus
DrawTextA
DrawFrameControl
CopyRect
ScreenToClient
GetDC
SendMessageA
EnableWindow
DrawEdge
FillRect
InflateRect
GetClassLongA

gdi32

LineTo
EndPath
StrokeAndFillPath
Rectangle
CopyMetaFileA
CreateDCA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CombineRgn
AngleArc
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
CreateFontIndirectA
SetRectRgn
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetTextMetricsA
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
StretchBlt
OffsetRgn
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceA
MoveToEx
BeginPath
CreatePen
GetDIBits
CreateRectRgn
ResetDCA
EnumFontFamiliesExA
SetPixel
GetPixel
GetObjectA
DeleteDC
SetTextColor
SetBkColor
CreateBitmap
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
GetStockObject
DeleteObject
EndDoc
EndPage
StartPage
StartDocA
GetDeviceCaps
CreateFontA
CreateSolidBrush
GetTextExtentPoint32A

msimg32

TransparentBlt
AlphaBlend

comdlg32

ChooseFontA
ChooseColorA
GetFileTitleA

winspool.drv

ord201
OpenPrinterA
StartDocPrinterA
StartPagePrinter
WritePrinter
EndPagePrinter
EndDocPrinter
ClosePrinter
DocumentPropertiesA

advapi32

RegEnumKeyExA
RegQueryValueA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA

shell32

ShellExecuteA
ShellExecuteExA
SHFileOperationA
SHAppBarMessage
DragQueryFileA
DragFinish
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoA
SHGetFolderPathA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc

comctl32

_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathIsUNCA
PathRemoveFileSpecW
PathFindExtensionA
PathFindFileNameA
PathStripToRootA

ole32

StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoRevokeClassObject
CreateStreamOnHGlobal
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoTaskMemFree
CoGetClassObject
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoRegisterMessageFilter

oleaut32

VariantTimeToSystemTime
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
VarCyFromStr
VarBstrFromCy
SysStringLen
SafeArrayDestroy
VariantCopy
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringByteLen
SysFreeString
OleLoadPicture
VarUdateFromDate
VarDateFromStr
SystemTimeToVariantTime

ws2_32

WSACleanup
select
bind
WSASetLastError
inet_addr
closesocket
recv
connect
htons
socket
WSAStartup
gethostname
gethostbyname
send

oledlg

ord8

mpr

WNetOpenEnumA
WNetCloseEnum
WNetEnumResourceA

rpcrt4

RpcStringFreeA
UuidToStringA
UuidCreate

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

wininet

InternetConnectA
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
FtpGetFileA
FtpPutFileA
FtpSetCurrentDirectoryA
FtpCreateDirectoryA

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 796KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 930KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b37ec17ebd5ca65dd7166aabb4c85f9e

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

ws2_32

oledlg

mpr

rpcrt4

oleacc

wininet

gdiplus

imm32

Sections

.text Size: 4.3MB - Virtual size: 4.3MB

.rdata Size: 796KB - Virtual size: 796KB

.data Size: 34KB - Virtual size: 930KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.text
Size: 4.3MB - Virtual size: 4.3MB

.rdata
Size: 796KB - Virtual size: 796KB

.data
Size: 34KB - Virtual size: 930KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB