2024-05-20_01f8e7aaf74f001ff5f4e47d0a1182f6_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-20_01f8e7aaf74f001ff5f4e47d0a1182f6_icedid
Size

5.6MB
MD5

01f8e7aaf74f001ff5f4e47d0a1182f6
SHA1

fb9f4490dfe455469be9fd514518df06609586f1
SHA256

75de53b407add36aaec676a8e95a88e278bed6e4e1712014f3ac9d1ea7fbdd55
SHA512

ab908822c1a4b5b01aae55bd0221f43ce3b3bb8a6c96463fbb7b05b84f569ccac4cc25945c4ae4c9674e9868e1345515686d47b3574b78b924900aa49d3c7c98
SSDEEP

98304:Q6xWPLO7sPB5xZ13uiDKfuoJTEK533k4knYy:zSfK3533kx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-20_01f8e7aaf74f001ff5f4e47d0a1182f6_icedid

Files

2024-05-20_01f8e7aaf74f001ff5f4e47d0a1182f6_icedid
.exe windows:6 windows x86 arch:x86

908a7678379e07c86abb924d3f9ebafe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetStartupInfoW
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetTimeZoneInformation
ReadConsoleW
DeleteFileW
QueryPerformanceCounter
HeapQueryInformation
FreeEnvironmentStringsW
GetStringTypeW
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
OutputDebugStringW
WriteConsoleW
CreateFileW
GetFileType
SetStdHandle
AreFileApisANSI
GetModuleHandleExW
ExitProcess
VirtualQuery
VirtualAlloc
GetSystemInfo
GetCommandLineA
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableA
DecodePointer
ExitThread
CreateThread
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
SearchPathA
GetProfileIntA
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
FindResourceExW
SetErrorMode
GetACP
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
FileTimeToSystemTime
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
VirtualProtect
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileA
SetFileTime
GetFileTime
GetDiskFreeSpaceA
GetCurrentProcessId
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GetVersionExA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetDriveTypeW
GetStdHandle
GetCurrentThread
SetThreadPriority
GetStringTypeExA
GetThreadLocale
GetVolumeInformationA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
CreateFileA
FormatMessageA
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
LoadLibraryW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
SetLastError
EncodePointer
OutputDebugStringA
lstrcpyA
GetModuleFileNameA
SetCurrentDirectoryA
ResumeThread
CreateEventA
WaitForSingleObject
ResetEvent
SetEvent
CloseHandle
GetLocalTime
GetFileAttributesA
CreateDirectoryA
GlobalSize
DeleteFileA
GetSystemTime
MultiByteToWideChar
GlobalUnlock
GlobalLock
FindNextFileA
FindFirstFileA
FindClose
FindResourceA
MulDiv
LocalFree
LocalUnlock
LocalLock
GlobalReAlloc
GlobalAlloc
WideCharToMultiByte
CopyFileA
GetTempFileNameA
GetTempPathA
FindResourceW
WinExec
GlobalFree
SizeofResource
LockResource
LoadResource
Sleep
LeaveCriticalSection
EnterCriticalSection
GetCurrentDirectoryA
GetTickCount
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetLastError
RaiseException
GetEnvironmentStringsW

user32

CharUpperBuffA
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
GetUpdateRect
SubtractRect
GetWindowRgn
LoadImageW
DrawStateA
EnumDisplayMonitors
SetLayeredWindowAttributes
IsClipboardFormatAvailable
WaitMessage
LockWindowUpdate
NotifyWinEvent
InvertRect
HideCaret
GetIconInfo
DrawIconEx
DrawFocusRect
GetNextDlgGroupItem
GetMenuDefaultItem
CopyAcceleratorTableA
PostThreadMessageA
GetTabbedTextExtentW
SetWindowRgn
DrawIcon
SetParent
GetSystemMenu
IsRectEmpty
UnionRect
LoadAcceleratorsW
DeleteMenu
CopyImage
GetSysColorBrush
RealChildWindowFromPoint
MapVirtualKeyA
GetKeyNameTextA
IsZoomed
LoadBitmapA
MapDialogRect
GetAsyncKeyState
DestroyCursor
LoadCursorW
ReuseDDElParam
UnpackDDElParam
LoadImageA
DestroyIcon
IntersectRect
InsertMenuItemA
CreatePopupMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
GetWindowThreadProcessId
ShowOwnedPopups
GetMessageA
CharUpperA
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
GetDesktopWindow
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
IsWindowEnabled
SendDlgItemMessageA
CheckRadioButton
CheckDlgButton
SetDlgItemTextA
MoveWindow
GetMonitorInfoA
ModifyMenuA
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassLongA
EqualRect
MapWindowPoints
MessageBoxA
AdjustWindowRectEx
GetWindowTextLengthA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
GetClassInfoExA
GetClassInfoA
RegisterClassA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuA
GetSubMenu
EnableMenuItem
CheckMenuItem
CreateMenu
ClientToScreen
GetMenuState
GetMenuStringA
GetActiveWindow
IsIconic
ScreenToClient
EnableScrollBar
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetWindowLongA
CallWindowProcA
SystemParametersInfoA
InflateRect
KillTimer
DrawTextA
GetWindowTextA
PeekMessageA
DispatchMessageA
TranslateMessage
GetClassNameA
EnumWindows
WindowFromPoint
GetCursorPos
GetMenuItemRect
GetMenuItemID
GetSystemMetrics
IsWindowVisible
SetMenuInfo
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
SetClassLongA
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
GetKeyboardState
RegisterClipboardFormatA
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
DrawFrameControl
MonitorFromWindow
DrawEdge
GetMenuInfo
DestroyMenu
FrameRect
GetFocus
GetNextDlgTabItem
ShowWindow
DestroyWindow
IsWindow
CreateWindowExA
ReleaseCapture
SetCapture
LoadIconW
LoadCursorA
LoadBitmapW
GetParent
GetWindowLongA
PtInRect
OffsetRect
CopyRect
SetRect
FillRect
GetSysColor
SetCursor
MessageBeep
AdjustWindowRect
GetClientRect
RedrawWindow
ReleaseDC
GetDC
RemoveMenu
AppendMenuA
GetMenuItemCount
LoadMenuW
SetTimer
PostQuitMessage
PostMessageA
wsprintfA
UpdateWindow
BringWindowToTop
InvalidateRect
GetWindow
GetWindowRect
SendMessageA
EnableWindow
UnregisterClassA
SetWindowTextA

gdi32

GetPixel
SetPolyFillMode
SetROP2
SetTextAlign
StartDocA
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetViewportOrgEx
CreateRectRgnIndirect
GetCharWidthA
GetBkColor
SetRectRgn
CreateEllipticRgn
GetLayout
CreateDIBSection
LPtoDP
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextColor
GetTextExtentPointA
GetTextExtentPoint32W
GetWindowOrgEx
GetTextFaceA
EnumFontFamiliesExA
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
SetDIBColorTable
Polygon
Polyline
OffsetRgn
CreateRoundRectRgn
RoundRect
SetPixelV
ExtFloodFill
SetPaletteEntries
GetBoundsRect
GetObjectType
GetCurrentPositionEx
GetClipBox
SetLayout
SetBkMode
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
Ellipse
CreateFontA
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreateDCA
CopyMetaFileA
SetTextColor
CreatePen
GetStockObject
DPtoLP
SetMapMode
SetBkColor
PtInRegion
GetRgnBox
CombineRgn
CreateFontIndirectA
StretchBlt
CreateBitmap
CreateCompatibleBitmap
GetObjectA
SetStretchBltMode
SelectPalette
CreatePalette
CreatePolygonRgn
SelectObject
Rectangle
Pie
FrameRgn
FillRgn
GetTextMetricsA
GetDeviceCaps
StretchDIBits
DeleteObject
CreateDIBitmap
CreateCompatibleDC
BitBlt
PatBlt
GetTextExtentPoint32A
DeleteDC
CreateSolidBrush
GetViewportExtEx

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterA
ClosePrinter
GetJobA
DocumentPropertiesA

advapi32

RegEnumValueA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegSetValueA
RegCloseKey
GetUserNameA
RegEnumKeyExA

shell32

SHBrowseForFolderA
SHGetFileInfoA
DragQueryFileA
DragFinish
SHAddToRecentDocs
ExtractIconA
SHGetPathFromIDListA
SHAppBarMessage
ShellExecuteA
SHGetDesktopFolder
SHGetSpecialFolderLocation

shlwapi

PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
StrFormatKBSizeA

uxtheme

DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeText
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme

ole32

IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoDisconnectObject
CoInitializeEx
CoInitialize
CoCreateGuid
CoUninitialize
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CreateStreamOnHGlobal
OleLockRunning
RevokeDragDrop
RegisterDragDrop
DoDragDrop
ReleaseStgMedium
OleGetClipboard
CoLockObjectExternal
CoCreateInstance

oleaut32

OleLoadPicture
SysAllocString
VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SysStringLen
LoadTypeLi
SysAllocStringByteLen
SysFreeString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SystemTimeToVariantTime

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 445KB - Virtual size: 444KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

908a7678379e07c86abb924d3f9ebafe

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

oleacc

imm32

winmm

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 445KB - Virtual size: 444KB

.data Size: 32KB - Virtual size: 63KB

.rsrc Size: 3.1MB - Virtual size: 3.1MB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 445KB - Virtual size: 444KB

.data
Size: 32KB - Virtual size: 63KB

.rsrc
Size: 3.1MB - Virtual size: 3.1MB