2024-06-07_216a4ee5e3a7bf293d1bb714743e3a11_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-07_216a4ee5e3a7bf293d1bb714743e3a11_icedid
Size

9.3MB
MD5

216a4ee5e3a7bf293d1bb714743e3a11
SHA1

d20f2797742f54975d12c85881d4b9484b086e3f
SHA256

c25ac25e7e47a07478b13b99cce89f114cd0b4342d55fdd627c9beaffee6a55f
SHA512

f058197212b3ee3a0826f3d2bca6c7f243460115b1ff83b025021b20e85105527037eb7b69558a47fb117bf321abed314145f4cc6ba66e8acd8ecf5981c45d4b
SSDEEP

98304:2TbxwYQMKqR3pSRs/Nprgy5O9yhIXVwnFO1esZfo4bF93Hru2Jil:ybGLMKqbS4zPepcMw4bFNJo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-07_216a4ee5e3a7bf293d1bb714743e3a11_icedid

Files

2024-06-07_216a4ee5e3a7bf293d1bb714743e3a11_icedid
.exe windows:4 windows x86 arch:x86

c962490ec540b4593d5ea54378b2411a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\roz2008_UI\Release\roz.pdb

Imports

winmm

PlaySoundA
timeGetTime

gdiplus

GdipFillRectangle
GdipCloneBrush
GdipSetLineBlend
GdipCreateLineBrushFromRectWithAngle
GdiplusShutdown
GdipCreateFromHDC
GdipSetPageUnit
GdipSetPageScale
GdipGetDpiX
GdipCreateLineBrushI
GdipCreateLineBrush
GdipDeleteGraphics
GdipDeleteBrush
GdipCloneImage
GdipDrawImageRectI
GdipDisposeImage
GdipGetImageHeight
GdipGetImageWidth
GdiplusStartup
GdipLoadImageFromFile
GdipFree
GdipAlloc

kernel32

RtlUnwind
GetSystemTimeAsFileTime
GetDriveTypeA
RemoveDirectoryA
TerminateProcess
GetTimeFormatA
GetDateFormatA
PeekNamedPipe
HeapReAlloc
GetStartupInfoA
VirtualQuery
SetStdHandle
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
IsBadCodePtr
SetEnvironmentVariableA
VirtualAlloc
HeapFree
HeapAlloc
FindResourceExA
GetOEMCP
GetCPInfo
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
SearchPathA
GlobalFlags
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetProfileIntA
InterlockedIncrement
GetDiskFreeSpaceA
GetTempFileNameA
VirtualProtect
ResumeThread
lstrcmpA
CreateEventA
GetPrivateProfileSectionNamesA
EnumResourceNamesA
EnumResourceTypesA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetFileTime
GetFileAttributesA
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetShortPathNameA
GetFullPathNameA
SetEndOfFile
FlushFileBuffers
MoveFileA
SetLastError
FormatMessageA
UnlockFile
LockFile
UnmapViewOfFile
GetLocalTime
CreateFileMappingA
MapViewOfFile
GetFileInformationByHandle
FileTimeToDosDateTime
FileTimeToSystemTime
SetFileTime
GetCurrentDirectoryA
DosDateTimeToFileTime
SystemTimeToFileTime
GetCurrentProcess
DuplicateHandle
GetFileType
SetFilePointer
WinExec
MulDiv
WriteFile
LoadLibraryA
FreeLibrary
GetModuleFileNameA
SetUnhandledExceptionFilter
IsBadReadPtr
GetUserDefaultLangID
CreateFileA
GetFileSize
ReadFile
TerminateThread
GetSystemDirectoryA
GetVolumeInformationA
lstrcpynA
lstrcpyA
lstrcatA
CreateDirectoryA
SetThreadPriority
CopyFileA
GetModuleHandleA
GetProcAddress
GetTickCount
FreeResource
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FindFirstFileA
FindNextFileA
FindClose
InterlockedDecrement
LocalFree
ExitProcess
DeleteFileA
_lopen
_lclose
_llseek
_lread
_hread
CreateThread
GetExitCodeThread
CloseHandle
WaitForSingleObject
GetTempPathA
LeaveCriticalSection
EnterCriticalSection
SetEvent
GetSystemInfo
Sleep
FindResourceA
LoadResource
LockResource
SizeofResource
OutputDebugStringA
GetStringTypeExA
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCommandLineA

user32

ShowOwnedPopups
GetDCEx
SetParent
GetSystemMenu
IsRectEmpty
WindowFromPoint
GetAsyncKeyState
DestroyCursor
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
TranslateAcceleratorA
GetMessageA
ValidateRect
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
MoveWindow
IsDialogMessageA
SetDlgItemTextA
MapVirtualKeyA
GetKeyNameTextA
WinHelpA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
GetDlgCtrlID
CallWindowProcA
IsIconic
GetWindowPlacement
SystemParametersInfoA
DestroyMenu
wsprintfA
WaitMessage
DestroyWindow
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringA
InsertMenuA
OemToCharA
CharToOemA
SetWindowPos
DrawFrameControl
IntersectRect
GetCapture
SetWindowRgn
ShowWindow
SetWindowTextA
SetMenuItemBitmaps
EqualRect
SetWindowContextHelpId
SetRectEmpty
MapWindowPoints
IsWindowEnabled
GetActiveWindow
ReleaseCapture
SetCapture
SetActiveWindow
CreateIconIndirect
CheckMenuRadioItem
PostQuitMessage
GetWindowThreadProcessId
GetClassNameA
SetWindowsHookExA
MessageBoxA
GetMenuItemRect
ClientToScreen
mouse_event
SetCursorPos
CallNextHookEx
UnhookWindowsHookEx
SetForegroundWindow
GetWindow
LockWindowUpdate
GetDesktopWindow
GetWindowRgn
MapDialogRect
PeekMessageA
DispatchMessageA
TranslateMessage
GetMenuItemInfoA
LookupIconIdFromDirectoryEx
LoadStringA
GetCursor
IsZoomed
SendMessageTimeoutA
CreateIconFromResourceEx
GetMenuDefaultItem
HideCaret
ShowCaret
IsMenu
DrawStateA
SetClassLongA
GetKeyboardLayout
MapVirtualKeyExA
SetMenu
GetMenu
LoadMenuA
RemoveMenu
GetSubMenu
GetMenuItemID
DeleteMenu
UnpackDDElParam
ReuseDDElParam
GetCursorPos
FrameRect
UpdateWindow
DestroyAcceleratorTable
IsWindowVisible
GetMenuItemCount
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
AppendMenuA
CreateMenu
GetClipboardData
CloseClipboard
OpenClipboard
PtInRect
GetFocus
RedrawWindow
GetWindowLongA
SetWindowLongA
LoadIconA
GrayStringA
DrawTextExA
TabbedTextOutA
PostMessageA
DestroyIcon
GetIconInfo
LoadImageA
LoadCursorA
RegisterClipboardFormatA
GetTabbedTextExtentA
GetSysColorBrush
GetDialogBaseUnits
GetWindowDC
UnionRect
IsCharLowerA
GetKeyboardLayoutList
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
GetDoubleClickTime
InvertRect
DrawEdge
DrawIconEx
CopyIcon
RegisterClassA
KillTimer
GetDlgItem
ScreenToClient
CreateWindowExA
GetWindowTextA
SetCursor
BeginPaint
GetParent
EndPaint
DefWindowProcA
GetSystemMetrics
IsWindow
DrawFocusRect
DrawTextA
DrawIcon
InflateRect
FillRect
CopyRect
InvalidateRect
GetClientRect
SetRect
DrawMenuBar
GetSysColor
GetKeyState
TrackPopupMenuEx
SendMessageA
EnableWindow
SetTimer
ReleaseDC
GetDC
GetWindowRect
CreatePopupMenu
LoadBitmapA
OffsetRect
RegisterWindowMessageA
UnregisterClassA
CharUpperA
IsClipboardFormatAvailable
FindWindowA
CreateDialogIndirectParamA

gdi32

GetRgnBox
FillRgn
FrameRgn
GetPixel
CombineRgn
SetPixel
SetMapMode
CreateDIBSection
SaveDC
RestoreDC
SetBkColor
SetPolyFillMode
SetROP2
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
ResetDCA
MoveToEx
SelectClipRgn
GetViewportExtEx
GetRegionData
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreatePen
CreateRectRgnIndirect
SetRectRgn
CreateEllipticRgn
LPtoDP
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextFaceA
GetCharWidthA
GetWindowOrgEx
EnumFontFamiliesExA
ExtCreateRegion
CreateRoundRectRgn
CreatePolyPolygonRgn
CreatePolygonRgn
GetNearestColor
DeleteDC
CreateDCA
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocA
DPtoLP
GetViewportOrgEx
CreateSolidBrush
DeleteObject
Ellipse
GetDIBits
SetDIBits
GetBitmapBits
RoundRect
SetPixelV
GetTextExtentPoint32A
Polygon
CreateFontA
PlayEnhMetaFile
DeleteEnhMetaFile
GetMapMode
SetWinMetaFileBits
SelectObject
GetWindowExtEx
GetObjectA
GetCurrentPositionEx
RealizePalette
PtInRegion
OffsetRgn
UnrealizeObject
PatBlt
Arc
GetBkColor
CreateRectRgn
SetTextAlign
Rectangle
CreateCompatibleBitmap
GetStockObject
Escape
ExtTextOutA
RectVisible
PtVisible
GetCurrentObject
GetGlyphOutlineA
GetTextAlign
GetDeviceCaps
CreateFontIndirectA
StretchBlt
BitBlt
CreateCompatibleDC
CreatePalette
SelectPalette
SetStretchBltMode
StretchDIBits
TextOutA
GetTextMetricsA
SetBkMode
SetTextColor
GetTextColor
GetBkMode
CreateBitmap

comdlg32

PrintDlgA
ChooseFontA
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
CommDlgExtendedError

winspool.drv

ClosePrinter
OpenPrinterA
GetJobA
DocumentPropertiesA

advapi32

RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegSetValueA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegEnumKeyA
RegQueryValueA
RegCreateKeyA
RegOpenKeyExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
ExtractIconA
DragQueryFileA
DragFinish
SHGetFileInfoA
Shell_NotifyIconA
DragAcceptFiles
ShellExecuteA
SHGetMalloc

comctl32

ord17
CreatePropertySheetPageA
DestroyPropertySheetPage
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_Draw
ImageList_SetBkColor
ImageList_AddMasked
_TrackMouseEvent
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_Add
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
PropertySheetA
ImageList_GetImageInfo

shlwapi

PathRemoveExtensionA
PathFindExtensionA
PathIsUNCA
PathStripToRootA
PathFindFileNameA

oledlg

ord1
ord8

ole32

CoTaskMemFree
GetHGlobalFromStream
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
OleRun
CoLockObjectExternal
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoDisconnectObject
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
RevokeDragDrop
RegisterDragDrop

oleaut32

SysFreeString
LoadTypeLi
OleCreateFontIndirect
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringLen
VarUdateFromDate
SysAllocStringLen
SysAllocString
VarDateFromStr
OleCreatePictureIndirect
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
VariantCopy
VariantClear
VariantInit
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
GetErrorInfo
VariantChangeTypeEx

ws2_32

ntohs
inet_ntoa
WSAStartup
WSACleanup
closesocket
accept
socket
select
gethostbyname
htonl
htons
inet_addr
bind
WSASetLastError
connect
sendto
recvfrom
WSAAsyncSelect
send
recv
listen
WSAGetLastError
setsockopt

wininet

InternetSetOptionA
InternetQueryOptionA
HttpQueryInfoA

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 700KB - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 296KB - Virtual size: 513KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c962490ec540b4593d5ea54378b2411a

Headers

File Characteristics

PDB Paths

Imports

winmm

gdiplus

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

Sections

.text Size: 4.2MB - Virtual size: 4.2MB

.rdata Size: 700KB - Virtual size: 696KB

.data Size: 296KB - Virtual size: 513KB

.rsrc Size: 4.1MB - Virtual size: 4.1MB

.text
Size: 4.2MB - Virtual size: 4.2MB

.rdata
Size: 700KB - Virtual size: 696KB

.data
Size: 296KB - Virtual size: 513KB

.rsrc
Size: 4.1MB - Virtual size: 4.1MB