2024-06-03_a0d04a0bf681af47a8e45ed46857fe9c_icedid

Sharing

Copy URL Twitter E-mail

General

Target
2024-06-03_a0d04a0bf681af47a8e45ed46857fe9c_icedid
Size 321KB
Sample240603-w2gpbsef2v
SHA256 7eb0be71c5e12044851fcff2aaec06d9f1942d87ea73657fd4b09fa2a154b340
MD5 a0d04a0bf681af47a8e45ed46857fe9c
SHA1 0bbede1f8b6989955c51bbf52081cd72eb3c00d3
SHA512 1117a35219d40957d0eaa9d84d7882b531fb965fcba1bc22913aafb8896eae51053bd1f8ade48888e2b911f88a9d1f360b511e41e31b8bf0efca73089fb393a7
SSDEEP 6144:xGPEvbL4+tRfb9puSt/jbO/4MvJZju0WB2s:xpX4+tRfb9Z9O/pvin
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

2024-06-03_a0d04a0bf681af47a8e45ed46857fe9c_icedid

.exe 321KB

2024-06-03_a0d04a0bf681af47a8e45ed46857fe9c_icedid

IMPHASH 79c0ee776b47707a40fc26756a24deb8
SHA256 7eb0be71c5e12044851fcff2aaec06d9f1942d87ea73657fd4b09fa2a154b340
MD5 a0d04a0bf681af47a8e45ed46857fe9c
SHA1 0bbede1f8b6989955c51bbf52081cd72eb3c00d3
SHA512 1117a35219d40957d0eaa9d84d7882b531fb965fcba1bc22913aafb8896eae51053bd1f8ade48888e2b911f88a9d1f360b511e41e31b8bf0efca73089fb393a7
SSDEEP 6144:xGPEvbL4+tRfb9puSt/jbO/4MvJZju0WB2s:xpX4+tRfb9Z9O/pvin
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

c6:2f:48:15:89:82:4c:99:33:c1:bf:38:af:44:f4:03:8f:dc:bb:cd

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Electronic Arts,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Synthetic,O=Electronic Arts,L=Redwood City,ST=Ca,C=US

Chains

Jun 3, 2024

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Electronic Arts,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Synthetic,O=Electronic Arts,L=Redwood City,ST=Ca,C=US

Serial Number

71:4e:ce:03:10:80:c3:24:06:ec:f0:1d:69:8f:fe:1d

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 14, 2006 - Oct 4, 2008

Minor OS version

Major OS version

Entry point

38187

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\installer\CDKey\CDKey2\Release\CDKey2.pdb

kernel32

RtlUnwind ExitProcess GetStartupInfoA GetCommandLineA HeapReAlloc TerminateProcess HeapSize HeapDestroy HeapCreate VirtualFree IsBadWritePtr QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA LCMapStringW VirtualQuery EnumSystemLocalesA IsValidLocale IsValidCodePage GetStringTypeA GetStringTypeW GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType SetUnhandledExceptionFilter GetTimeZoneInformation IsBadReadPtr IsBadCodePtr SetStdHandle GetLocaleInfoW SetEnvironmentVariableA GetSystemInfo VirtualAlloc VirtualProtect HeapFree HeapAlloc WritePrivateProfileStringA GetFileTime GetFileAttributesA FileTimeToLocalFileTime SetErrorMode GetOEMCP GetCPInfo FileTimeToSystemTime TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement GlobalFlags DeleteCriticalSection InitializeCriticalSection RaiseException InterlockedDecrement GetCurrentThread lstrcmpA ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose lstrcpyA GetCurrentProcess DuplicateHandle CloseHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom FreeLibrary lstrcatA lstrcmpW MulDiv GlobalAlloc FormatMessageA lstrcpynA LocalFree GlobalLock GlobalUnlock GlobalFree FreeResource LoadLibraryA GetProcAddress GetCurrentDirectoryA FindResourceExA GetUserDefaultLangID GetModuleHandleA SetLastError CompareStringW CompareStringA lstrlenA lstrcmpiA GetVersion FindResourceA LoadResource LockResource SizeofResource GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP GetUserDefaultLCID InterlockedExchange

user32

DestroyMenu LoadCursorA GetSysColorBrush GetMessageA TranslateMessage GetCursorPos ValidateRect SetCursor PostQuitMessage EndPaint BeginPaint ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA SetMenuItemBitmaps ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA ShowWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA GetFocus GetForegroundWindow GetLastActivePopup DispatchMessageA GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints GetKeyState IsWindowVisible CharUpperA EnableWindow MessageBoxA PostMessageA GetClientRect InvalidateRect SetActiveWindow SetForegroundWindow SendMessageA LoadIconA UpdateWindow GetMenu GetSysColor AdjustWindowRectEx GetClassInfoA RegisterClassA UnregisterClassA GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect CopyRect PtInRect wsprintfA GetWindowTextLengthA GetClassLongA EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA GetSystemMetrics GetActiveWindow GetDesktopWindow GetSubMenu GetMenuItemCount GetMenuItemID GetWindowTextA GetWindow SetFocus GetMenuState

gdi32

GetStockObject DeleteDC RectVisible ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA CreateDIBitmap PtVisible DeleteObject SetMapMode RestoreDC SaveDC CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDeviceCaps TextOutA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegQueryValueExA RegOpenKeyExA RegSetValueExA RegCreateKeyExA RegEnumKeyExA RegDeleteKeyA RegOpenKeyA RegEnumKeyA RegQueryValueA RegCloseKey

comctl32

ord17

shlwapi

PathIsUNCA PathFindExtensionA PathStripToRootA PathFindFileNameA

oleaut32

VariantClear VariantChangeType VariantInit

Sharing

General

Malware Config

Signatures

File Explorer

2024-06-03_a0d04a0bf681af47a8e45ed46857fe9c_icedid

PE Signature issue

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oleaut32

generic