2024-06-01_e63fc865a62e32d95c5fb6efb6de7369_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-01_e63fc865a62e32d95c5fb6efb6de7369_icedid
Size

320KB
MD5

e63fc865a62e32d95c5fb6efb6de7369
SHA1

ec672939c9158fec79542d710bdf246c6bcad99a
SHA256

253827dae64004406077fc2645b53d009827ea0b557d025be7abb8dd849b0ae9
SHA512

41202f5dd3958162bbf86b48f7a29408fbdcb47791b0bc0ad6a6836e3e8e5724a536729334d39b07ade1d05b41e3435c9a7a3cf0a05b09de9cce1969ed0d68d0
SSDEEP

3072:+JYQZMer4QKQyeu48/UVE3IZfMMsffe/ij53VcVonogeqrRJB6z3lqDiTLCwJk26:+JPZVrh8/UVTZfMMsZ+V4oge+5LCk33

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-01_e63fc865a62e32d95c5fb6efb6de7369_icedid

Files

2024-06-01_e63fc865a62e32d95c5fb6efb6de7369_icedid
.exe windows:4 windows x86 arch:x86

bcf13c402861e1c35024363ecd77c3d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\newbuild\Tmassmb_3.2sp1\Source\output\Release\aseepwd.pdb

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

libmysql

mysql_close
mysql_fetch_row
mysql_get_client_info
mysql_store_result
mysql_ping
mysql_error
mysql_real_connect
mysql_options
mysql_init
mysql_num_fields
mysql_num_rows
mysql_query
mysql_real_query
mysql_free_result

kernel32

GetFileTime
GetTickCount
GetStartupInfoW
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
TerminateProcess
VirtualProtect
VirtualAlloc
GetFileAttributesW
VirtualQuery
HeapReAlloc
HeapSize
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetTimeZoneInformation
IsBadWritePtr
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetErrorMode
CreateFileW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
GlobalFlags
WritePrivateProfileStringW
GlobalFindAtomW
GetModuleHandleA
LoadLibraryA
lstrcatW
GetVersionExA
SetLastError
MulDiv
FormatMessageW
lstrcpynW
GlobalUnlock
FreeResource
GlobalAddAtomW
GetCurrentThread
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
GetProcAddress
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcpyW
LoadLibraryW
GetLocaleInfoW
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
DeleteFileW
MoveFileW
FindFirstFileW
FindClose
GetCurrentThreadId
WideCharToMultiByte
LocalAlloc
LocalFree
GetUserDefaultLangID
FileTimeToLocalFileTime
FileTimeToSystemTime
GetComputerNameW
lstrlenA
lstrcmpiW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetLastError
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
GlobalFree
InterlockedDecrement
InterlockedIncrement
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CloseHandle
OpenProcess
GetSystemInfo

user32

MessageBeep
GetNextDlgGroupItem
RegisterClipboardFormatW
DestroyMenu
SetWindowContextHelpId
MapDialogRect
CharNextW
InvalidateRgn
InvalidateRect
CopyAcceleratorTableW
SetRect
IsRectEmpty
CharUpperW
GetSysColorBrush
ReleaseCapture
LoadCursorW
SetCapture
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
wsprintfW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageA
IsChild
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
GetSysColor
AdjustWindowRectEx
EqualRect
GetClassInfoW
RegisterClassW
DefWindowProcW
CallWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowTextLengthW
GetWindowTextW
SetWindowPos
SetFocus
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
SetMenuItemBitmaps
GetFocus
ModifyMenuW
PostThreadMessageW
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
SetForegroundWindow
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
MessageBoxW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
SetCursor
PostQuitMessage
PostMessageW
UnregisterClassW
LoadStringW
GetSystemMetrics
LoadIconW
EnableWindow
GetClientRect
IsIconic
SendMessageW
WinHelpW

gdi32

GetStockObject
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
GetMapMode
GetTextColor
GetBkColor
GetRgnBox
CreateRectRgnIndirect
SetMapMode
RestoreDC
SaveDC
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateBitmap
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RevertToSelf
ImpersonateLoggedOnUser
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CryptDestroyKey
CryptReleaseContext
CryptGenKey
CryptGetUserKey
CryptAcquireContextW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
OpenProcessToken
CryptDecrypt
RegCreateKeyW
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
RegSetValueExW
CryptDestroyHash

shell32

CommandLineToArgvW

comctl32

ord17

shlwapi

PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CoRegisterMessageFilter
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
StgCreateDocfileOnILockBytes

oleaut32

SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
DispCallFunc
VariantCopy
SafeArrayCreate
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringByteLen
SysFreeString
SafeArrayDestroy
SystemTimeToVariantTime
SysStringLen
OleCreateFontIndirect
SysAllocString

wininet

InternetSetOptionW
InternetCloseHandle
HttpSendRequestW
HttpQueryInfoW
InternetConnectW
InternetOpenW
HttpAddRequestHeadersW
HttpOpenRequestW

Sections

.text
Size: 196KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bcf13c402861e1c35024363ecd77c3d4

Headers

File Characteristics

PDB Paths

Imports

version

libmysql

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

Sections

.text Size: 196KB - Virtual size: 192KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 12KB - Virtual size: 36KB

.rsrc Size: 48KB - Virtual size: 45KB

.text
Size: 196KB - Virtual size: 192KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 12KB - Virtual size: 36KB

.rsrc
Size: 48KB - Virtual size: 45KB