2024-05-07_aa0dd2d80bfb86fe4fa725f871f8d92e_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-05-07_aa0dd2d80bfb86fe4fa725f871f8d92e_icedid
Size

2.5MB
MD5

aa0dd2d80bfb86fe4fa725f871f8d92e
SHA1

07cd6d9003a59ac8d87b46073d89bda12be65390
SHA256

f04e9a4c36df64e2b406e90ed609c169aaa6189c9cbd9149997df1a925b817f7
SHA512

d900694ad17f6d9f4d2c33e3af8529a6940c2fe39f0caeddd1f6811a00abce28290e854fde27d81b1ed6dee126cfbb4e457b482e111c9509bdbcb7490bfe5431
SSDEEP

49152:rZMF66jrKCEPmHhzm/ypCNuO5W9+nSaWPFMBIpr:rZW66jTEmCNuLCWPFMBIl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-07_aa0dd2d80bfb86fe4fa725f871f8d92e_icedid

Files

2024-05-07_aa0dd2d80bfb86fe4fa725f871f8d92e_icedid
.exe windows:4 windows x86 arch:x86

a5fb8fbf16a89296ca287b4bf37d722f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gpng

?Z_deflateInit@@YGHPAUz_stream_s@@H@Z
?Z_deflateEnd@@YGHPAUz_stream_s@@@Z
?Z_inflateInit@@YGHPAUz_stream_s@@@Z
?Z_inflateEnd@@YGHPAUz_stream_s@@@Z
?Z_inflate@@YGHPAUz_stream_s@@H@Z
?Z_deflate@@YGHPAUz_stream_s@@H@Z

picsdk3w32

?PIC_SetPresetOfPresetID@CPicPresetLink@@UAEJJJ@Z
?PIC_SetPresetOfIndex@CPicPresetLink@@UAEJJJ@Z
?PIC_GetPresetOfPresetID@CPicPresetLink@@UAEJAAUPIC_PRESETDATAW@@J@Z
?PIC_GetPresetOfIndex@CPicPresetLink@@UAEJAAUPIC_PRESETDATAW@@J@Z
?PIC_SelectPreset@CPicPresetLink@@UAEJAAJABUEPUTIL_FILESPECW@@ABUPIC_PRESETINFW@@@Z
?PIC_GetString@CPicLink@@UAEJAAY0BAA@_WJJ@Z
?PIC_GetRange@CPicLink@@UAEJAAUPIC_RANGEINFW@@@Z
?PIC_GetData@CPicLink@@UAEJAAY0EAA@_WAAUPIC_DATAINFW@@@Z
?PIC_SetData@CPicLink@@UAEJAAY0EAA@_WABUPIC_DATAINFW@@@Z
?PIC_PrintDialog@CPicLink@@UAEJAAH@Z
?PIC_GetPrintingInfo@CPicLink@@UAEJAAUPIC_PRINTINGINFW@@@Z
?PIC_SetDevMode@CPicLink@@UAEJPBU_devicemodeW@@@Z
?PIC_GetDevMode@CPicLink@@UAEJPAU_devicemodeW@@AAJ@Z
?PIC_SetToDriver@CPicLink@@UAEJXZ
?PIC_PrinterSpecifies@CPicPresetLink@@UAEJAAUPIC_PRINTERTYPEW@@AAY0CAA@$$CB_W@Z
??0CPicPresetLink@@QAE@J@Z
??1CPicPresetLink@@UAE@XZ

kernel32

GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
FreeEnvironmentStringsA
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentDirectoryA
GetDriveTypeA
CreateFileA
SetEnvironmentVariableA
InterlockedCompareExchange
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
WideCharToMultiByte
lstrcmpW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetTempFileNameW
GetTempPathW
GlobalFree
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalReAlloc
GlobalSize
IsDBCSLeadByteEx
lstrcpyW
GetVersionExW
LoadLibraryW
GetModuleHandleW
GetProcAddress
SetLastError
GetModuleFileNameA
GetStdHandle
VirtualQuery
GetSystemInfo
HeapSize
GetFileType
SetStdHandle
HeapReAlloc
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
SetErrorMode
FindResourceExW
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GetTickCount
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
CompareStringA
GetVersion
GlobalGetAtomNameW
GetProfileIntW
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDiskFreeSpaceW
GetFileTime
SetFileTime
InterlockedIncrement
WritePrivateProfileStringW
CreateFileW
GetShortPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetThreadLocale
GetStringTypeExW
MoveFileW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
GetVersionExA
VirtualProtect
GetCurrentProcessId
GetModuleHandleA
CopyFileW
FormatMessageW
RaiseException
InterlockedExchange
LocalFree
LocalAlloc
FindFirstFileW
FindNextFileW
FindClose
GetUserDefaultLangID
GetFileAttributesW
lstrcmpA
LoadLibraryA
GetFullPathNameW
CreateDirectoryW
GetDriveTypeW
GetUserDefaultLCID
GetLocaleInfoW
lstrlenA
InterlockedDecrement
GetModuleFileNameW
lstrcpynW
GetWindowsDirectoryW
FreeLibrary
lstrcatW
lstrcpyA
DeleteFileW
VirtualAlloc
VirtualFree
GetCurrentDirectoryW
SetCurrentDirectoryW
lstrlenW
GetLastError

user32

InSendMessage
ValidateRect
CharUpperW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetDlgItemTextW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
GetClassLongW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
DefWindowProcW
CallWindowProcW
SetWindowLongW
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetActiveWindow
MapDialogRect
SetWindowPos
ShowWindow
GetPropW
RemovePropW
GetAsyncKeyState
SetFocus
GetDlgItem
GetWindowThreadProcessId
GetLastActivePopup
EndPaint
BeginPaint
GetWindowDC
GetMenuState
GetMenuStringW
InsertMenuW
RemoveMenu
SystemParametersInfoW
DestroyCursor
AppendMenuW
KillTimer
SetPropW
SendNotifyMessageW
EnumChildWindows
GetClassNameW
SetTimer
UpdateWindow
DestroyMenu
SetMenu
LoadAcceleratorsW
SetRectEmpty
GetMenuItemCount
EnableMenuItem
PeekMessageW
IsDialogMessageW
SetForegroundWindow
EnableScrollBar
IsWindowEnabled
ClientToScreen
GetWindow
GetFocus
IsZoomed
GetMenu
GetWindowLongW
GetMessageW
TranslateMessage
DispatchMessageW
GetClipboardData
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
IsClipboardFormatAvailable
wsprintfW
GetKeyState
DrawFocusRect
GetDlgCtrlID
GetSystemMetrics
IsWindow
CallNextHookEx
GetScrollRange
GetActiveWindow
UnhookWindowsHookEx
TrackPopupMenu
LoadMenuW
ModifyMenuW
GetSubMenu
GetMenuItemID
SetScrollRange
GetSysColorBrush
UnregisterClassW
UnregisterClassA
CreateMenu
DeleteMenu
GetTabbedTextExtentA
MoveWindow
GetScrollPos
SetWindowTextW
ShowScrollBar
SetScrollPos
HideCaret
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
LoadBitmapW
GetSysColor
GetCursorPos
ScreenToClient
ReleaseCapture
SetCursor
LoadIconW
LoadCursorW
SetCapture
CopyAcceleratorTableW
WindowFromPoint
GetMenuItemInfoW
GetDCEx
TranslateAcceleratorW
BringWindowToTop
CreatePopupMenu
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
FindWindowW
DrawIcon
SetWindowRgn
PostQuitMessage
ShowOwnedPopups
MessageBoxW
SetWindowContextHelpId
PostThreadMessageW
GetNextDlgGroupItem
CharNextW
DestroyIcon
MessageBeep
SetParent
RegisterClipboardFormatW
LockWindowUpdate
OffsetRect
InflateRect
GetWindowRect
InvalidateRect
GetParent
EnableWindow
PtInRect
IntersectRect
FillRect
SendMessageW
IsWindowVisible
GetDC
ReleaseDC
InvalidateRgn
PostMessageW
IsRectEmpty
UnionRect
SetRect
CopyRect
GetCapture
TrackMouseEvent
DrawFrameControl
DrawEdge
GetClientRect
EqualRect
FrameRect

gdi32

CreateEllipticRgnIndirect
CreatePolygonRgn
CombineRgn
LPtoDP
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateFontW
GetTextMetricsW
GetGlyphOutlineW
GetTextExtentPoint32W
RectInRegion
CreateDCW
CreateCompatibleBitmap
CreateRectRgnIndirect
CreateEllipticRgn
CreateRoundRectRgn
CreateCompatibleDC
GetDeviceCaps
Ellipse
Rectangle
GetDIBits
CreatePalette
RealizePalette
GetViewportExtEx
DPtoLP
StretchDIBits
PathToRegion
GetRgnBox
Arc
BeginPath
EndPath
Polyline
Polygon
PolyBezier
AbortPath
CloseFigure
StrokeAndFillPath
SetTextColor
SetBkColor
SetBkMode
GetPath
StrokePath
TextOutW
GetBkColor
PolyPolygon
PlayEnhMetaFile
DeleteEnhMetaFile
SetWinMetaFileBits
SetEnhMetaFileBits
DeleteMetaFile
PlayMetaFile
SetMetaFileBitsEx
DeleteObject
DeleteDC
PatBlt
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
SelectObject
ExtCreatePen
PtVisible
RectVisible
ExtTextOutW
Escape
GetStockObject
GetObjectW
StretchBlt
GetWindowOrgEx
RoundRect
EqualRgn
PtInRegion
EnumFontFamiliesExW
GetTextCharset
EnumFontFamiliesW
GetTextColor
SetBrushOrgEx
BitBlt
SetDIBitsToDevice
SetLayout
GetLayout
CreateFontIndirectW
UnrealizeObject
SetICMMode
StartDocW
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CopyMetaFileW
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
SetStretchBltMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SetTextCharacterExtra
SelectClipRgn
GetClipRgn
SelectClipPath
GetWindowExtEx
GetPixel
OffsetViewportOrgEx
ScaleViewportExtEx
OffsetWindowOrgEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
CreateBitmap
SelectPalette
SetRectRgn
GetMapMode
GetViewportOrgEx
GetCharWidthW
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
GetTextExtentPoint32A
CreateRectRgn

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
GetPrinterW
EnumPrintersW
GetJobW
ClosePrinter

advapi32

RegCreateKeyW
RegQueryValueW
RegEnumKeyW
GetFileSecurityW
SetFileSecurityW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegSetValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
CryptGenRandom
CryptAcquireContextW
CryptReleaseContext

shell32

ExtractIconW
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
DragAcceptFiles
DragQueryFileW
DragFinish
SHGetDesktopFolder
SHGetFileInfoW
SHGetMalloc
SHGetSpecialFolderLocation

shlwapi

PathIsUNCW
PathFindExtensionW
PathRemoveExtensionW
PathStripToRootW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
StgOpenStorageOnILockBytes
OleCreateStaticFromData
OleLockRunning
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleQueryCreateFromData
StgOpenStorage
CreateFileMoniker
OleDuplicateData
CoTreatAsClass
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
OleSave
OleLoad
CoTaskMemFree
CoRegisterMessageFilter
CreateGenericComposite
CreateItemMoniker
OleGetIconOfClass
CoRevokeClassObject
CoGetClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleSetMenuDescriptor
CoDisconnectObject
StgCreateDocfile
OleSetContainedObject
StgIsStorageFile
GetHGlobalFromILockBytes

oleaut32

SysFreeString
VariantClear
SysStringLen
SysAllocStringLen
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
GetErrorInfo
SysAllocString

gdiplus

GdiplusShutdown
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFileICM
GdiplusStartup
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipAlloc
GdipFree
GdipCloneImage

ws2_32

ntohl
ntohs

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 324KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 44KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 504KB - Virtual size: 501KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a5fb8fbf16a89296ca287b4bf37d722f

Headers

DLL Characteristics

File Characteristics

Imports

gpng

picsdk3w32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

gdiplus

ws2_32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 324KB - Virtual size: 322KB

.data Size: 44KB - Virtual size: 63KB

.rsrc Size: 504KB - Virtual size: 501KB

.reloc Size: 184KB - Virtual size: 184KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 324KB - Virtual size: 322KB

.data
Size: 44KB - Virtual size: 63KB

.rsrc
Size: 504KB - Virtual size: 501KB

.reloc
Size: 184KB - Virtual size: 184KB