2024-05-04_f2394eec3608207b8c71c3b96ce4956b_floxif_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-05-04_f2394eec3608207b8c71c3b96ce4956b_floxif_icedid
Size

5.3MB
MD5

f2394eec3608207b8c71c3b96ce4956b
SHA1

697c658080be96af94d3bb33b0c6fa5c534f0bab
SHA256

0e1da2345635c10288749647f02aac3edf6709d12698fe36dd9b301c777c3c93
SHA512

bd4da0ab0f302be302ef1bc70ec34cf85ae3c4852f10591526b53e04ff0bf880a223e86678a33bac4dcf6761d0b49f1193b434cd08ff260c0639a633c5f11bb8
SSDEEP

49152:pVcooVyDDFQogB5+0QKUBuUyPfnJaGuBXUnxWYHmunyn3LrEWtnvBB5P:nkoyQOU4vTWfX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-04_f2394eec3608207b8c71c3b96ce4956b_floxif_icedid

Files

2024-05-04_f2394eec3608207b8c71c3b96ce4956b_floxif_icedid
.exe windows:4 windows x86 arch:x86

b6aa00839876442da84e75bd66414cd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\readiris\readiris.pdb

Imports

kernel32

FileTimeToSystemTime
lstrlenA
GlobalSize
SystemTimeToFileTime
GetThreadLocale
GetCurrentProcessId
EnumResourceLanguagesW
GetVersionExA
ConvertDefaultLocale
GetCurrentThread
lstrcmpA
GlobalFlags
SuspendThread
ResumeThread
GetThreadPriority
SetThreadPriority
GlobalDeleteAtom
SetLastError
InterlockedExchange
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
CompareStringA
WriteFile
_lread
SetErrorMode
TlsAlloc
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
VirtualProtect
GetHandleInformation
DuplicateHandle
GetCurrentProcess
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
SetFileTime
GetFileTime
LocalFileTimeToFileTime
HeapValidate
IsBadReadPtr
RtlUnwind
ExitProcess
GetFullPathNameA
GetConsoleCP
GetConsoleMode
GetFileType
GetSystemTimeAsFileTime
DeleteFileA
DebugBreak
GetStdHandle
OutputDebugStringA
HeapFree
HeapAlloc
GetProcessHeap
CreateFileA
ExitThread
VirtualAlloc
GetSystemInfo
LocalAlloc
GetSystemDefaultLangID
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InitializeCriticalSection
RaiseException
DeleteCriticalSection
CreateThread
InterlockedDecrement
SetEvent
GetCurrentThreadId
CloseHandle
WaitForSingleObject
GetExitCodeProcess
LoadLibraryA
SetThreadLocale
GetVersion
GlobalReAlloc
SizeofResource
GlobalAlloc
MulDiv
LocalFree
GlobalLock
GlobalUnlock
Sleep
GetLastError
GetTickCount
LoadResource
GlobalFree
FreeLibrary
FindClose
LockResource
FreeResource
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FileTimeToLocalFileTime
OpenEventA
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetDateFormatA
GetTimeFormatA
GetStringTypeA
LCMapStringA
GetCommandLineW
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
QueryPerformanceCounter
GetTimeZoneInformation
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStartupInfoA
SetHandleCount
GetDriveTypeA
SetConsoleCtrlHandler
HeapReAlloc
FatalAppExitA
VirtualFree
HeapCreate
HeapDestroy
GetOEMCP
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualQuery

advapi32

SetFileSecurityW
GetFileSecurityW
SetThreadToken
RevertToSelf
OpenThreadToken
RegCloseKey

user32

DdeUninitialize
TranslateMessage
DdeCreateDataHandle
DdeGetData
IsWindow
DdeClientTransaction
DdeDisconnect
UpdateWindow
FrameRect
InflateRect
InvalidateRect
GetSystemMetrics
GetDialogBaseUnits
GetSysColor
IsChild
WindowFromPoint
GetCursorPos
CharToOemA
FillRect
IsWindowEnabled
ReleaseDC
GetDC
EndDialog
SetCursor
DrawFocusRect
SetActiveWindow
MoveWindow
ClientToScreen
DdeNameService
BringWindowToTop
ShowWindow
MessageBeep
GetFocus
PtInRect
GetClientRect
SetFocus
DestroyWindow
GetDlgItem
ScreenToClient
GetWindow
SetCursorPos
CheckDlgButton
OffsetRect
ReleaseCapture
SetCapture
GetSysColorBrush
EndPaint
BeginPaint
SetTimer
GetDoubleClickTime
IsIconic
IsWindowVisible
KillTimer
ScrollDC
SetScrollPos
GetScrollRange
GetScrollPos
GetParent
GetKeyState
GetMenuState
RedrawWindow
SetWindowPos
SetScrollRange
DestroyMenu
TrackPopupMenu
CreatePopupMenu
CallNextHookEx
UnhookWindowsHookEx
GetDlgCtrlID
ValidateRect
EnumChildWindows
GetMenuItemRect
GetDlgItemInt
CheckRadioButton
SetForegroundWindow
GetActiveWindow
SetDlgItemInt
PostQuitMessage
CreateMenu
SetMenu
GetSystemMenu
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DestroyIcon
MessageBoxA
LoadCursorA
IsDlgButtonChecked
DrawMenuBar
GetMenu
CheckMenuItem
EnableMenuItem
GetDesktopWindow
RemoveMenu
MsgWaitForMultipleObjects
PeekMessageA
GetMessageA
DispatchMessageA
UnregisterClassA
SubtractRect
UnionRect
GetWindowPlacement
SystemParametersInfoA
IntersectRect
GetMessagePos
GetMessageTime
SetWindowPlacement
TrackPopupMenuEx
GetCapture
GetTopWindow
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
EqualRect
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
MapDialogRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
DragDetect
HiliteMenuItem
IsZoomed
ArrangeIconicWindows
SetWindowRgn
GetWindowRgn
GetWindowDC
GetUpdateRect
GetUpdateRgn
InvalidateRgn
ValidateRgn
ShowOwnedPopups
GetDCEx
LockWindowUpdate
EnableScrollBar
DrawAnimatedRects
DrawCaption
GetNextDlgGroupItem
GetNextDlgTabItem
ShowScrollBar
ChildWindowFromPoint
ChildWindowFromPointEx
GetLastActivePopup
SetParent
FlashWindow
ChangeClipboardChain
SetClipboardViewer
GetOpenClipboardWindow
GetClipboardOwner
GetClipboardViewer
CreateCaret
GetCaretPos
SetCaretPos
HideCaret
ShowCaret
GetForegroundWindow
SetWindowContextHelpId
GetWindowContextHelpId
CloseWindow
OpenIcon
ScrollWindowEx
GetMenuItemID
GetSubMenu
GetMenuItemCount
IsMenu
SetRect
WindowFromDC
ExcludeUpdateRgn
InvertRect
DrawIcon
DrawEdge
DrawFrameControl
DeleteMenu
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuContextHelpId
GetMenuContextHelpId
CheckMenuRadioItem
GetWindowThreadProcessId
GetClipboardFormatNameA
UnpackDDElParam
GetAsyncKeyState
SetRectEmpty
ReuseDDElParam
IsRectEmpty
GetWindowRect

gdi32

CreatePenIndirect
ExtCreatePen
CreatePatternBrush
CreateDIBPatternBrushPt
CreateBitmapIndirect
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateDiscardableBitmap
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
GetObjectType
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
GetNearestColor
UpdateColors
UnrealizeObject
CloseEnhMetaFile
GetBkMode
CloseMetaFile
GetClipBox
GetDCOrgEx
CreateRectRgnIndirect
GetPolyFillMode
GetROP2
GetStretchBltMode
StretchDIBits
PlayMetaFile
EnumMetaFile
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetPolyFillMode
RestoreDC
SaveDC
PlayEnhMetaFile
GdiComment
WidenPath
StrokePath
StrokeAndFillPath
SetMiterLimit
GetPath
GetMiterLimit
FlattenPath
FillPath
EndPath
CloseFigure
BeginPath
AbortPath
ExtEscape
DrawEscape
PolyBezier
GetCurrentObject
GetColorAdjustment
PolyPolyline
GetArcDirection
AngleArc
SetPixelV
PlgBlt
MaskBlt
SetAbortProc
GetFontData
GetBoundsRect
SetBoundsRect
Escape
GetAspectRatioFilterEx
GetFontLanguageInfo
GetTextCharacterExtra
GetTextAlign
ExtFloodFill
FloodFill
SetPixel
RoundRect
Rectangle
PolyPolygon
Polygon
Pie
Ellipse
Chord
Polyline
Arc
GetCurrentPositionEx
RectVisible
PtVisible
InvertRgn
LPtoDP
GetWindowExtEx
DeleteObject
CreateDIBitmap
RealizePalette
SelectPalette
GetStockObject
SetBkColor
SelectObject
SetTextColor
SetBkMode
PaintRgn
CreateRectRgn
FillRgn
CombineRgn
SetROP2
CreateHatchBrush
GetDeviceCaps
DeleteDC
EndDoc
AbortDoc
EndPage
LineTo
MoveToEx
StartPage
CreatePen
BitBlt
CreateCompatibleDC
CreateSolidBrush
StretchBlt
SetBitmapBits
CreateCompatibleBitmap
SetMapMode
GetMapMode
CreateBitmap
DPtoLP
FrameRgn
CreatePolygonRgn
GetBkColor
CreatePalette
CreateBrushIndirect
PatBlt
GetPixel
GetWindowOrgEx
GetViewportExtEx
GetViewportOrgEx
GetWorldTransform
GetGraphicsMode
GetTextColor

shell32

DragAcceptFiles
DragFinish
SHGetMalloc
SHGetSpecialFolderLocation

comdlg32

CommDlgExtendedError

shlwapi

PathCompactPathW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
PathIsUNCW
PathStripToRootW

ltdis14n

ord122
ord115
ord186
ord199
ord204
ord205
ord127
ord107
ord185
ord132
ord136
ord116

ltfil14n

ord109
ord106
ord103
ord133
ord101
ord100
ord105
ord159
ord157
ord116
ord104

ltimg14n

ord117
ord106
ord101
ord125

ltkrn14n

ord219
ord143
ord112
ord132
ord234
ord197
ord123
ord101
ord217
ord311
ord236
ord196
ord135
ord100
ord141
ord125
ord232
ord151
ord137
ord129
ord136
ord128
ord221
ord110
ord145
ord148
ord139
ord213
ord134
ord115
ord241
ord108
ord116
ord133

drs832

drs_load_shapes
ord1
drs_set_underscore
ord14
drs_rotate_zones
drs_new_shapes
drs_set_format_color
drs_set_image_add_grey
drs_set_image_add_color
do_format
do_xml_output
ord2
drs_lrn_get_solution
drs_lrn_is_undo_possible
drs_lrn_set_solution
drs_lrn_get_coords
do_ocr_separ
drs_lrn_get_win_coords
drs_lrn_get_n_index
drs_lrn_get_suspect_index
drs_reset_language
drs6_read_one
drs6_read_coordinates
drs7_prep_coords
drs7_free_coords
drs_set_contrast
drs_set_brightness
drs_set_smoothing
do_zones
do_zones_rect
drs_save_shapes
drs_reset_barcode
drs_add_barcode
ord4
use_apptek_lexicon
set_drs_language
drs_set_gr_filter
ord63
drs_lrn_get_bitmap_and_dim
drs_set_best_accuracy
drs_use_handprint_env

fmtcp8

Format_FmtmsmCheck

format5

FMT_SetParagColorFlag
FMT_SetOutputFormat
FMT_SetTextOverImageFlag
FMT_Set_Metadata
FMT_SetTextColorFlag
FMT_SetFormatOptions
FMT_SetPdfEmbededFontsFlag
FMT_Close
FMT_Write
FMT_Init
FMT_Callback_MemoryTools_GlobalFree
FMT_Callback_MemoryTools_GlobalUnLock
FMT_Callback_MemoryTools_GlobalLock
FMT_Set_PreferredDocumentSize
FMT_Callback_ImageFileName
FMT_Set_Callback_ImgTools_CopyBitmapPolygon
FMT_Set_Callback_BinarizedImageHandle
FMT_Set_Callback_ImageHandle
FMT_SetNextInFile
FMT_Set_Callback_ImgTools_IsGrayScale
FMT_Set_Callback_ImgTools_GrayScaleBitmap
FMT_Set_Callback_ImgTools_SizeBitmap
FMT_Set_Callback_ImgTools_SetResolution
FMT_Set_Callback_ImgTools_CopyBitmap
FMT_Set_Callback_ImgTools_FreeBitmap
FMT_Set_Callback_ImgTools_InvertBitmap
FMT_Set_Callback_ImgTools_SaveFile
FMT_Set_Callback_ImgTools_SaveBitmapMemory
FMT_Set_Callback_ImgTools_FillBitmap
FMT_Set_Callback_ImgTools_CreateBitmap
FMT_Set_Callback_ImgTools_PutPixelColor
FMT_Set_Callback_ImgTools_GetPixelColor
FMT_Set_Callback_ImgTools_GetBitsPerPixel
FMT_Set_Callback_ImgTools_GetResolution
FMT_Set_Callback_ImgTools_GetHeight
FMT_Set_Callback_ImgTools_GetWidth
FMT_Set_Callback_ImgTools_DeleteImageHandle
FMT_Set_Callback_ImgTools_InitImageHandle
FMT_SetPagePerSheetFlag
FMT_SetIgnoreTextOutsideTable
FMT_SetSeparatorFlag
FMT_SetOutputImage_Color
FMT_SetTypeColorText
FMT_SetOutputImage_Resolution
FMT_SetOutputImage_JpegQ
FMT_SetNumberOfFiles
FMT_SetOutFile
FMT_SetColumnBreakFlag

prepro

skrotimg
skrotdim
sk_color
skrotbmp
skbitmap
bi_upset
bi_gradl_do
bi_set_satur
bi_set_sigma
bi_set_smooth
bi_set_delta2
bi_set_delta1
bi_set_black2
bi_set_black1
bi_setup
despeckl

regstr

RegisterDlg4

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

comctl32

ord17
ImageList_Destroy
InitCommonControlsEx

ole32

CoUnmarshalInterface
CreateStreamOnHGlobal
CoRegisterMessageFilter
CoMarshalInterface
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoInitialize
CoRegisterClassObject
CoRevokeClassObject
StringFromGUID2
CoCreateInstance
OleDuplicateData
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
CoReleaseMarshalData
CLSIDFromProgID
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
CLSIDFromString
CoDisconnectObject
OleRun

oleaut32

VarUdateFromDate
VarDateFromUdate
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromDate
VarDateFromStr
VarDecFromStr
VarBstrFromDec
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SystemTimeToVariantTime
SafeArrayDestroy
SafeArrayUnlock
SysFreeString
GetActiveObject
VariantInit
VariantClear
SysAllocString
VarUI4FromStr
RegisterTypeLi
SysStringLen
LoadTypeLi
UnRegisterTypeLi
LoadRegTypeLi
VariantChangeType
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantCopy
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock

imagehlp

MakeSureDirectoryPathExists

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 608KB - Virtual size: 605KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 832KB - Virtual size: 870KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6aa00839876442da84e75bd66414cd3

Headers

File Characteristics

PDB Paths

Imports

kernel32

advapi32

user32

gdi32

shell32

comdlg32

shlwapi

ltdis14n

ltfil14n

ltimg14n

ltkrn14n

drs832

fmtcp8

format5

prepro

regstr

winspool.drv

comctl32

ole32

oleaut32

imagehlp

oleacc

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 608KB - Virtual size: 605KB

.data Size: 832KB - Virtual size: 870KB

.rsrc Size: 2.0MB - Virtual size: 2.0MB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 608KB - Virtual size: 605KB

.data
Size: 832KB - Virtual size: 870KB

.rsrc
Size: 2.0MB - Virtual size: 2.0MB