2024-05-29_92d0a6763388b208410b37da77fd6ff9_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-05-29_92d0a6763388b208410b37da77fd6ff9_icedid
Size

8.7MB
MD5

92d0a6763388b208410b37da77fd6ff9
SHA1

aa7cef920c1e9fc34a538de3b006a539984b08f9
SHA256

c3736c9a6ca1cc465238a26c94b58c9bb34abd0f44d154c8ee29b7dfa44aeddc
SHA512

7d27d719fc4033f80a710c302fdf39bb92d32db36baf6cf679ca9831266559324fefd99e065b3271403e1030164cb3e1f9a2166dd672199cd680306554d55474
SSDEEP

196608:pQhHLiVaeHmh0jXCY+rCnNxN4S1BsoTHENqXXsvJ//I/TlE0e:kNeXXCY++p1BsoDniz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-29_92d0a6763388b208410b37da77fd6ff9_icedid

Files

2024-05-29_92d0a6763388b208410b37da77fd6ff9_icedid
.exe windows:4 windows x86 arch:x86

45b15b6a8cc1e898c46bef33c53cc99f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\prj_pwdcard\src\Release\pwdcard.pdb

Imports

kernel32

RtlUnwind
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
VirtualQuery
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetSystemInfo
InterlockedExchange
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
GetFileTime
FileTimeToLocalFileTime
SetErrorMode
GetOEMCP
GetCPInfo
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedIncrement
GlobalFlags
RaiseException
WritePrivateProfileStringA
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
InterlockedDecrement
SetLastError
FormatMessageA
LocalFree
GlobalFree
FreeResource
GetFileAttributesA
CopyFileA
GetTempPathA
GetTempFileNameA
CreateProcessA
CloseHandle
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
GetSystemTime
SystemTimeToFileTime
GetTickCount
Sleep
DeleteFileA
DebugBreak
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FindResourceA
LoadResource
LockResource
SizeofResource
ExitProcess
lstrcpynA
CompareStringW
CompareStringA
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
FreeEnvironmentStringsA

user32

MessageBeep
InvalidateRgn
CopyAcceleratorTableA
SetRect
IsRectEmpty
CharNextA
SetCapture
DestroyMenu
LoadCursorA
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
GetMessageA
TranslateMessage
ValidateRect
SetCursor
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsChild
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
MessageBoxA
GetKeyState
SetForegroundWindow
GetMenu
AdjustWindowRectEx
PostThreadMessageA
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
IntersectRect
ShowWindow
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
wsprintfA
GetWindowTextLengthA
GetWindowTextA
GetWindow
SetFocus
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
DrawFocusRect
GetNextDlgGroupItem
ReleaseCapture
GetCapture
ClientToScreen
WindowFromPoint
RegisterClipboardFormatA
GetSysColor
DrawEdge
GetDesktopWindow
UpdateWindow
IsWindowVisible
EqualRect
MessageBoxExA
IsWindow
GetCursorPos
ReleaseDC
GetParent
GetFocus
KillTimer
SetTimer
ScreenToClient
PostMessageA
FrameRect
LoadBitmapA
MoveWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
InvalidateRect
PtInRect
CopyRect
SendMessageA
EnableWindow
LoadIconA
GetDC
EndPaint
BeginPaint
GetClientRect
GetWindowRect
SetWindowRgn
OffsetRect
CharUpperA
GetClassInfoA

gdi32

ExtSelectClipRgn
CreateFontIndirectA
CreateRectRgnIndirect
GetBkColor
GetTextColor
GetRgnBox
GetClipBox
SetTextColor
SetBkMode
RestoreDC
SaveDC
SelectClipRgn
CreateRectRgn
CombineRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
CreatePen
GetPixel
GetStockObject
EndDoc
EndPage
StartPage
StartDocA
RoundRect
GetDeviceCaps
DPtoLP
CreateBitmap
GetMapMode
SetMapMode
SetBkColor
DeleteObject
SelectObject
SetStretchBltMode
DeleteDC
GetObjectA
CreateFontA
StretchBlt
BitBlt
Rectangle
CreateCompatibleDC
CreateRoundRectRgn
CreateCompatibleBitmap
CreateSolidBrush

msimg32

AlphaBlend

comdlg32

PrintDlgA
GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

comctl32

ord17
_TrackMouseEvent

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

oledlg

ord8

ole32

CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateStreamOnHGlobal
CoGetClassObject
StgOpenStorageOnILockBytes
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize

oleaut32

OleLoadPicture
OleCreateFontIndirect
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringByteLen
SysFreeString
SysStringLen

winmm

PlaySoundA

Sections

.text
Size: 224KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 856KB - Virtual size: 854KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45b15b6a8cc1e898c46bef33c53cc99f

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

winmm

Sections

.text Size: 224KB - Virtual size: 222KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 16KB - Virtual size: 32KB

.rsrc Size: 856KB - Virtual size: 854KB

.text
Size: 224KB - Virtual size: 222KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 16KB - Virtual size: 32KB

.rsrc
Size: 856KB - Virtual size: 854KB