2024-05-23_4d0d0bd96bd4c6264e2b960c73dde65f_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-23_4d0d0bd96bd4c6264e2b960c73dde65f_icedid
Size

2.0MB
MD5

4d0d0bd96bd4c6264e2b960c73dde65f
SHA1

4848a3899e8ef6f9b075d50347e192c7ab59ca3a
SHA256

fce26a376a3d9319d6ce59cf94331b76a9dd291a99e9cc8cb7a5a3f5a6dcbb9b
SHA512

ae7267f78425a8be394499f5372781038ef3cef4ebe2ffce5055d80f8ac49fc056c7740809125d4fe369c75514a7574d8db983e378b6774f512cc317ca1f9bf9
SSDEEP

24576:ZqC968inaLchSSEfcYRFv9XogwX+7Vfi6ngQcAw:oUcYRFv99wXuI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-23_4d0d0bd96bd4c6264e2b960c73dde65f_icedid

Files

2024-05-23_4d0d0bd96bd4c6264e2b960c73dde65f_icedid
.exe windows:4 windows x86 arch:x86

0c2ea7cdc64ddbf52d339db292e826fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
VirtualAlloc
GetSystemInfo
VirtualQuery
RaiseException
HeapReAlloc
SetStdHandle
GetFileType
ExitThread
CreateThread
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
TerminateProcess
ExitProcess
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
RtlUnwind
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
GetCurrentDirectoryW
SetErrorMode
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
GlobalGetAtomNameW
lstrlenA
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
FileTimeToSystemTime
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
CompareStringA
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetSystemDirectoryW
VirtualProtect
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetThreadLocale
GetStringTypeExW
GlobalFree
FormatMessageW
GetCurrentProcessId
InterlockedDecrement
CompareStringW
lstrcmpW
GetVersionExA
GetModuleHandleA
LoadLibraryA
FormatMessageA
GetLocalTime
Sleep
CreateDirectoryW
CreateFileMappingW
MapViewOfFile
InterlockedExchange
GlobalAlloc
GlobalLock
GlobalUnlock
EnterCriticalSection
LeaveCriticalSection
EscapeCommFunction
ReadFile
WriteFile
WaitForSingleObject
GetOverlappedResult
CancelIo
GetCommState
SetCommState
CreateEventW
CreateFileW
SetCommTimeouts
PurgeComm
OutputDebugStringW
LocalFree
LocalAlloc
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetCurrentThreadId
MulDiv
GetVersion
GetVersionExW
FreeResource
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcpyW
GetWindowsDirectoryW
GetModuleHandleW
GetLastError
SetLastError
lstrcmpiW
CloseHandle
FreeLibrary
GetModuleFileNameA
WinExec
GetModuleFileNameW
OpenMutexW
CreateMutexW
LoadLibraryW
GetProcAddress
GetTickCount
MultiByteToWideChar
LoadResource
LockResource
SizeofResource
UnhandledExceptionFilter
FindResourceW

user32

TranslateMDISysAccel
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
UnregisterClassW
CharNextW
InvalidateRgn
GetNextDlgGroupItem
GetDCEx
LockWindowUpdate
RegisterClipboardFormatW
PostThreadMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetTopWindow
DestroyWindow
GetMessageTime
PeekMessageW
TrackPopupMenu
SetScrollPos
SetForegroundWindow
GetClassInfoExW
GetClassInfoW
RegisterClassW
EqualRect
SetScrollInfo
SetWindowPlacement
SystemParametersInfoA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
GetKeyState
IsWindowEnabled
IsIconic
EnableMenuItem
DrawIcon
SetMenuItemInfoW
UnregisterDeviceNotification
RegisterDeviceNotificationW
GetWindow
GetSysColorBrush
RegisterClassExW
RegisterWindowMessageW
GetClassLongW
GetWindowRgn
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
SetWindowRgn
MapWindowPoints
AdjustWindowRectEx
ChildWindowFromPointEx
LoadStringW
BringWindowToTop
IsChild
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetDesktopWindow
DrawMenuBar
RemoveMenu
ModifyMenuW
InsertMenuW
GetMenuState
GetMenuItemID
GetMenuDefaultItem
AppendMenuW
DeleteMenu
CreateWindowExW
DefWindowProcW
ValidateRect
BeginPaint
EndPaint
SetMenu
CallNextHookEx
GetClassNameW
SetPropW
CallWindowProcW
GetPropW
RemovePropW
UnhookWindowsHookEx
SetWindowsHookExW
SetLayeredWindowAttributes
IntersectRect
SetWindowPos
IsRectEmpty
GetMenuItemInfoW
GetMenu
GetSystemMenu
WindowFromDC
GetMenuInfo
CopyAcceleratorTableW
MapVirtualKeyW
GetKeyNameTextW
CopyImage
GetMenuItemRect
SystemParametersInfoW
IsMenu
SetMenuInfo
GetWindowDC
MonitorFromRect
MonitorFromWindow
GetMonitorInfoW
GetSystemMetrics
SetCapture
ReleaseCapture
GetCursorPos
SetRect
RedrawWindow
UpdateWindow
DrawEdge
DefMDIChildProcW
DefFrameProcW
SetParent
SetRectEmpty
SetWindowContextHelpId
ShowOwnedPopups
KillTimer
SetTimer
ScreenToClient
PtInRect
CopyIcon
GetMessagePos
SetWindowLongW
ShowCaret
HideCaret
SetCaretPos
CreateCaret
ShowScrollBar
GetFocus
EnableScrollBar
GetScrollInfo
MessageBeep
DestroyCaret
LoadIconW
GetMessageW
TranslateMessage
PostQuitMessage
MapDialogRect
CreateDialogIndirectParamW
EndDialog
CharUpperW
TranslateAcceleratorW
LoadBitmapW
MessageBoxW
LoadAcceleratorsW
GetMenuStringW
GetWindowThreadProcessId
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetFocus
LoadCursorW
GetMenuItemCount
CreatePopupMenu
GetDlgCtrlID
GetDlgItem
DrawFrameControl
IsWindow
GetWindowLongW
EnableWindow
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
DrawFocusRect
DrawStateW
FrameRect
OffsetRect
InflateRect
CopyRect
LoadMenuW
LoadImageW
GetIconInfo
CreateIconIndirect
GetDC
ReleaseDC
GetSysColor
FillRect
GetSubMenu
SendMessageW
TrackPopupMenuEx
PostMessageW
SetCursor
DestroyIcon
DestroyCursor
DestroyMenu
MenuItemFromPoint
UnregisterClassA

gdi32

SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
GetViewportExtEx
GetWindowExtEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetMapMode
PatBlt
DPtoLP
GetCharWidthW
StretchDIBits
GetBkColor
GetRgnBox
PtVisible
RoundRect
GetNearestColor
SetBrushOrgEx
RectVisible
SetBkMode
RestoreDC
SaveDC
GetDIBColorTable
SetDIBColorTable
CreateDIBSection
StretchBlt
GetWindowOrgEx
OffsetRgn
SetRectRgn
FillRgn
CreatePolygonRgn
Polygon
Escape
ExtSelectClipRgn
DeleteObject
GetDeviceCaps
CombineRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
UnrealizeObject
SelectClipRgn
SetWindowOrgEx
GetCurrentObject
GetTextAlign
GetTextMetricsW
GetLayout
SetTextAlign
MoveToEx
ExtTextOutW
GetTextExtentPointW
GetCurrentPositionEx
GetTextColor
Rectangle
GetViewportOrgEx
SetViewportOrgEx
CreateFontIndirectW
CreateFontW
CreatePen
GetTextExtentPoint32W
CreateSolidBrush
GetObjectW
GetPixel
SetPixel
CreateCompatibleBitmap
CreateBitmap
CreateCompatibleDC
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteDC
GetStockObject
TextOutW

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueExW
RegQueryValueW
RegOpenKeyExW
RegCreateKeyW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyW
RegSetValueW
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteExW
SHGetFolderPathW
ExtractIconW
DragQueryFileW
DragFinish
SHGetFileInfoW
ShellExecuteW

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathCompactPathExW
PathIsDirectoryW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathAppendW

oledlg

OleUIBusyW

ole32

OleInitialize
CoTaskMemFree
CoFreeUnusedLibraries
CoRevokeClassObject
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysFreeString
SysStringLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen

winmm

PlaySoundW

gdiplus

GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdiplusStartup
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipAlloc
GdipCloneImage
GdipFree
GdipDisposeImage
GdiplusShutdown
GdipDrawImageI

setupapi

SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList

Sections

.text
Size: 832KB - Virtual size: 829KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 340KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 840KB - Virtual size: 838KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c2ea7cdc64ddbf52d339db292e826fa

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

winmm

gdiplus

setupapi

Sections

.text Size: 832KB - Virtual size: 829KB

.rdata Size: 340KB - Virtual size: 337KB

.data Size: 20KB - Virtual size: 39KB

.rsrc Size: 840KB - Virtual size: 838KB

.text
Size: 832KB - Virtual size: 829KB

.rdata
Size: 340KB - Virtual size: 337KB

.data
Size: 20KB - Virtual size: 39KB

.rsrc
Size: 840KB - Virtual size: 838KB