2024-05-21_bd9f1a12cf7859940294557c3974317f_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-05-21_bd9f1a12cf7859940294557c3974317f_icedid
Size

2.2MB
MD5

bd9f1a12cf7859940294557c3974317f
SHA1

1624a9d1ab8a4f378856d6e3df7bfc5c9ba66447
SHA256

08c67326eccd984b2e51b1c33cabaac61e11970d4f637e04aff8d7c4108370da
SHA512

c45761b5d8a003d9f968f2a307bf9cfa421f60f224216c75e4ea8d8392ea032f7075b2d66b3970fa0b657f9b263a12042f3bd7ee53e79627389a25be8c6a4cd8
SSDEEP

49152:p+EuSG5qvTQ7awLzZCVijypMaNyUIjKl8mS7OyCUeEKQjCT9i:gHStvTQPL8VijypJNyUiKKpOyCXEKQj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-21_bd9f1a12cf7859940294557c3974317f_icedid

Files

2024-05-21_bd9f1a12cf7859940294557c3974317f_icedid
.exe windows:5 windows x86 arch:x86

6f2415a6f06dac9333d9482d6988cf93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrFormatKBSizeA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA

wininet

InternetQueryOptionA

kernel32

RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleExW
AreFileApisANSI
SetEnvironmentVariableA
SetCurrentDirectoryA
SetCurrentDirectoryW
GetTimeZoneInformation
DeleteFileW
CreateDirectoryW
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
GetCommandLineA
SetFilePointerEx
PeekNamedPipe
ExitThread
GetStringTypeW
GetSystemInfo
GetUserDefaultLCID
VirtualQuery
HeapQueryInformation
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetConsoleCP
GetConsoleMode
ReadConsoleW
GetFullPathNameW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
WriteConsoleW
OutputDebugStringW
GetTempFileNameA
SetErrorMode
GetWindowsDirectoryA
FindResourceExW
VirtualProtect
SetStdHandle
SearchPathA
DecodePointer
HeapAlloc
HeapReAlloc
VerifyVersionInfoA
VerSetConditionMask
GetFileTime
GetFileSizeEx
GetFileAttributesExA
lstrcmpiA
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
LocalReAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetProfileIntA
WritePrivateProfileStringA
GetCurrentThread
ResumeThread
SetThreadPriority
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
LoadLibraryW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FreeResource
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
QueryDosDeviceA
DefineDosDeviceA
DeviceIoControl
QueryPerformanceCounter
ResetEvent
GetSystemDirectoryA
GetCurrentProcessId
SetEvent
OpenEventA
DeleteFileA
FlushViewOfFile
GetTempPathA
OpenFileMappingA
CreateEventA
ReleaseMutex
CreateMutexA
LocalAlloc
InterlockedExchange
InitializeCriticalSection
GetStdHandle
WaitForMultipleObjects
ExpandEnvironmentStringsA
LoadLibraryExA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
DuplicateHandle
SetFilePointer
ReadFile
WriteFile
GetFileSize
GetFileType
GetFileInformationByHandle
IsDBCSLeadByteEx
GetACP
IsValidCodePage
GetComputerNameA
GetVolumeInformationW
GetVolumeInformationA
CopyFileA
FindNextFileA
FindFirstFileW
FindFirstFileA
GetFileAttributesW
GetFileAttributesA
SetFileAttributesW
SetFileAttributesA
CreateFileW
CreateFileA
GetDiskFreeSpaceExW
GetDiskFreeSpaceExA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetCurrentDirectoryW
GetStartupInfoW
GetStartupInfoA
CreateProcessW
CreateProcessA
GetModuleHandleA
FileTimeToSystemTime
FileTimeToLocalFileTime
CloseHandle
FindClose
GetExitCodeProcess
GetCurrentProcess
SetLastError
GlobalAlloc
MulDiv
GlobalSize
GlobalReAlloc
GetModuleFileNameA
FormatMessageA
Sleep
WaitForSingleObject
GetExitCodeThread
TerminateThread
LocalFree
GlobalUnlock
GlobalLock
GetTickCount
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
lstrcatA
lstrcmpA
GetVersion
lstrlenA
lstrcpyA
CreateThread
GlobalFree
WideCharToMultiByte
FindResourceW
SizeofResource
LoadResource
LockResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
GetProcessHeap
HeapSize
HeapFree
VirtualAlloc

user32

GetWindowRgn
DestroyCursor
GetComboBoxInfo
MapDialogRect
CreateMenu
SubtractRect
GetUpdateRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
UpdateLayeredWindow
CharUpperBuffA
MapVirtualKeyExA
IsCharLowerA
HideCaret
GetNextDlgGroupItem
ModifyMenuA
IsMenu
SetMenuDefaultItem
CopyIcon
GetIconInfo
EnableScrollBar
LoadImageW
MonitorFromPoint
SetClassLongA
LockWindowUpdate
SetCursorPos
NotifyWinEvent
LoadMenuW
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
GetKeyboardLayout
SetParent
GetSystemMenu
GetMenuDefaultItem
SetWindowRgn
EnumDisplayMonitors
SetLayeredWindowAttributes
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
CreatePopupMenu
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
PostThreadMessageA
CharUpperA
DeleteMenu
CopyImage
GetMenuItemInfoA
DestroyMenu
RealChildWindowFromPoint
GetSysColorBrush
DrawStateA
TrackMouseEvent
RegisterClipboardFormatA
MapVirtualKeyA
GetKeyNameTextA
WaitMessage
ShowOwnedPopups
PostQuitMessage
TranslateMessage
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
GetWindowThreadProcessId
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
SendDlgItemMessageA
CheckDlgButton
MoveWindow
ShowWindow
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetClassNameA
GetClassLongA
SetWindowLongA
GetWindowLongA
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
CreateWindowExA
GetClassInfoExA
RegisterClassA
UnregisterClassA
DefWindowProcA
GetClassInfoA
IsWindowVisible
GetFocus
CallWindowProcA
GetMessageTime
RegisterWindowMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
EndPaint
BeginPaint
GetWindowDC
UnhookWindowsHookEx
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
GetMonitorInfoA
DrawIconEx
LoadImageA
DestroyIcon
LoadCursorW
GetDesktopWindow
OffsetRect
UnionRect
DrawFocusRect
MessageBeep
GetAsyncKeyState
DestroyWindow
GetTopWindow
FindWindowA
EmptyClipboard
SetClipboardData
PeekMessageA
GetDoubleClickTime
FrameRect
SystemParametersInfoA
IntersectRect
InflateRect
SetRect
InvertRect
IsWindow
GetMessagePos
LoadIconW
LoadIconA
LoadBitmapW
MessageBoxA
UpdateWindow
GetKeyState
SetTimer
KillTimer
EnableWindow
IsZoomed
DrawTextA
RedrawWindow
GetClientRect
GetWindowRect
GetCursorPos
ClientToScreen
GetSysColor
GetParent
LoadCursorA
DrawFrameControl
GetMessageA
DispatchMessageA
SendMessageA
PostMessageA
GetDlgCtrlID
GetCapture
SetCapture
ReleaseCapture
DrawTextExA
GrayStringA
TabbedTextOutA
GetDC
ReleaseDC
InvalidateRect
ScreenToClient
WindowFromPoint
IsRectEmpty
PtInRect
wsprintfA
SetFocus
SetActiveWindow
DrawEdge
DrawTextW
SetCursor
FillRect
SetRectEmpty
CopyRect
GetSystemMetrics
IsIconic
OpenClipboard
CloseClipboard
GetClipboardData
EnumClipboardFormats
IsClipboardFormatAvailable
DrawIcon

gdi32

CreateEllipticRgn
Ellipse
Polygon
Polyline
CreateDIBSection
CreateRoundRectRgn
RealizePalette
SetDIBColorTable
GetRgnBox
OffsetRgn
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextCharsetInfo
GetTextFaceA
EnumFontFamiliesA
CreateDIBitmap
DPtoLP
SetRectRgn
CreateRectRgnIndirect
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
MoveToEx
SetTextAlign
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
SetROP2
SetPolyFillMode
GetLayout
SetLayout
BitBlt
DeleteDC
GetStockObject
GetTextExtentPoint32A
SetPixelV
SelectObject
GetObjectType
ExcludeClipRect
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreateBitmap
CreateDCA
CopyMetaFileA
CreatePolygonRgn
ExtTextOutW
RoundRect
FillRgn
PatBlt
GetDeviceCaps
GetBkColor
GetTextMetricsA
StretchBlt
SetBkMode
PlgBlt
ExtTextOutA
TextOutA
GetObjectA
SetTextColor
SetPixel
Rectangle
RectVisible
PtVisible
GetTextColor
GetPixel
GetCurrentObject
GetClipBox
Escape
DeleteObject
CreateSolidBrush
CreatePen
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
SetMapMode

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

SetSecurityDescriptorDacl
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
OpenSCManagerA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
InitializeSecurityDescriptor
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyA
GetUserNameA
StartServiceA
QueryServiceStatus
OpenServiceA

shell32

SHBrowseForFolderA
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
DragFinish
DragQueryFileA
SHGetFileInfoA
ShellExecuteA

comctl32

_TrackMouseEvent
ImageList_AddMasked
ImageList_Draw

uxtheme

GetThemeSysColor
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
IsAppThemed
DrawThemeBackground
GetWindowTheme

ole32

OleCreateMenuDescriptor
OleTranslateAccelerator
CoTaskMemAlloc
IsAccelerator
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CoUninitialize
CoCreateGuid
CoCreateInstance
CoInitialize
CoInitializeEx
OleGetClipboard
DoDragDrop
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoDisconnectObject
CreateStreamOnHGlobal
OleLockRunning
OleDestroyMenuDescriptor

oleaut32

VarBstrFromDate
VariantCopy
SystemTimeToVariantTime
VariantTimeToSystemTime
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
LoadTypeLi
SysStringLen
SysAllocString

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdiplusShutdown
GdipDrawImageI
GdipAlloc

ws2_32

gethostname
sendto
getpeername
gethostbyaddr
listen
bind
accept
ntohs
__WSAFDIsSet
WSASetLastError
ntohl
inet_ntoa
inet_addr
htonl
WSAGetLastError
gethostbyname
socket
setsockopt
send
select
recv
htons
ioctlsocket
connect
closesocket
WSACleanup
WSAStartup
getsockname

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

timeGetTime
PlaySoundA

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 385KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f2415a6f06dac9333d9482d6988cf93

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

wininet

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

uxtheme

ole32

oleaut32

gdiplus

ws2_32

oleacc

imm32

winmm

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 385KB - Virtual size: 384KB

.data Size: 39KB - Virtual size: 95KB

.rsrc Size: 36KB - Virtual size: 35KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 385KB - Virtual size: 384KB

.data
Size: 39KB - Virtual size: 95KB

.rsrc
Size: 36KB - Virtual size: 35KB