2024-06-08_eda184c30ee1843affa70017faf4c81d_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-08_eda184c30ee1843affa70017faf4c81d_icedid
Size

2.1MB
MD5

eda184c30ee1843affa70017faf4c81d
SHA1

86488f71dc0aefbd3d48be1bf7ac594dfbe3f10d
SHA256

a74df8c356b6e3ef4da13569c6f9378a974254e268dafb94d8ffab8d5c5b1552
SHA512

2c97e6fa407a2a7374e960782cec02015fb0e58941fe4eca96fc57f4a2209476d435f843ceaa113e89dc88e66fbb45084af1bb8c501c5887393364284ee64a78
SSDEEP

49152:j61ZXdk7ifSTq+ZAcoAqzV0E22tinShvn:j61Ztk7iKTq5coAqPin8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-08_eda184c30ee1843affa70017faf4c81d_icedid

Files

2024-06-08_eda184c30ee1843affa70017faf4c81d_icedid
.exe windows:4 windows x86 arch:x86

ff2a3fed7cc12cc65eb0f39720c1ea50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shfolder

SHGetFolderPathA

setupapi

CM_Disconnect_Machine
SetupDiDestroyClassImageList
CM_Get_DevNode_Registry_PropertyA
CM_Get_DevNode_Registry_Property_ExA
CM_Get_Child_Ex
SetupDiGetClassDescriptionA
CM_Connect_MachineA
SetupDiGetClassImageList
CM_Locate_DevNode_ExA
CM_Get_Sibling_Ex
SetupDiGetClassImageIndex

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

winmm

waveOutGetDevCapsA
waveOutGetNumDevs

msvfw32

ICInfo
ICGetInfo
ICClose
ICOpen

msacm32

acmDriverEnum
acmDriverDetailsA

rpcrt4

UuidFromStringA

kernel32

VirtualProtect
GetFileSize
GetFileTime
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetOEMCP
GetCurrentDirectoryA
SetErrorMode
GetTickCount
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
ExitProcess
HeapReAlloc
ExitThread
CreateThread
SetStdHandle
GetFileType
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadCodePtr
GetLocaleInfoW
SetEnvironmentVariableA
WritePrivateProfileStringA
SuspendThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
ReleaseMutex
CreateMutexA
lstrcmpA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
SetLastError
MulDiv
LocalAlloc
FreeResource
GetSystemDefaultLangID
IsBadReadPtr
ResumeThread
SetEvent
lstrcpyA
FormatMessageA
GlobalAlloc
GlobalFree
lstrcatA
WinExec
GetFileAttributesA
GetUserDefaultLangID
SetThreadLocale
lstrcpynA
GlobalMemoryStatus
GetEnvironmentVariableA
CompareStringW
CompareStringA
lstrlenA
lstrlenW
MultiByteToWideChar
GetTempPathA
QueryPerformanceFrequency
LeaveCriticalSection
EnterCriticalSection
GlobalLock
GlobalUnlock
GetCommandLineA
QueryPerformanceCounter
GetCurrentProcess
DuplicateHandle
ReadFile
FindFirstFileA
FindClose
CreateDirectoryA
SetFileAttributesA
GetModuleFileNameA
Sleep
GetWindowsDirectoryA
GetVersion
GetCurrentProcessId
InterlockedDecrement
InterlockedIncrement
GetComputerNameA
lstrcmpiA
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
QueryDosDeviceA
CreateEventA
ResetEvent
WaitForSingleObject
CloseHandle
WideCharToMultiByte
GetLastError
FreeLibrary
GetLogicalDrives
CreateFileA
GetDriveTypeA
DeviceIoControl
LocalFree
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCPInfo

user32

GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
WindowFromPoint
GetAsyncKeyState
DestroyMenu
SetWindowContextHelpId
ValidateRect
PostQuitMessage
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
MoveWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
SetScrollPos
SetForegroundWindow
AdjustWindowRectEx
EqualRect
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
IntersectRect
GetWindowPlacement
GetLastActivePopup
UnhookWindowsHookEx
GetMenuState
GetMenuStringA
SetWindowTextA
GetDlgCtrlID
GetWindowTextA
IsWindowEnabled
IsDialogMessageA
MapDialogRect
GetCursorPos
IsChild
MessageBoxA
MessageBeep
CopyIcon
DrawFocusRect
DestroyCursor
SetRectEmpty
PtInRect
ModifyMenuA
GetSubMenu
GetMenuItemID
GetMenuItemCount
SystemParametersInfoA
DestroyWindow
OffsetRect
SetRect
GetKeyState
SetWindowPos
PostMessageA
IsRectEmpty
GetSysColorBrush
LoadBitmapA
CopyRect
IsMenu
GetWindowLongA
GetClassNameA
GetMenu
GetWindow
GetMessageA
ReleaseCapture
SetWindowLongA
SetCapture
GetCapture
LoadCursorA
RegisterWindowMessageA
GetFocus
ReleaseDC
ScreenToClient
FillRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
InflateRect
CharUpperA
TranslateMessage
DispatchMessageA
GetParent
IsWindowVisible
RemoveMenu
SetCursor
KillTimer
SetTimer
RedrawWindow
PostThreadMessageA
RegisterClipboardFormatA
UpdateWindow
LoadIconA
InvalidateRect
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
IsWindow
GetDC
GetSysColor
GetDesktopWindow
ShowWindow
DestroyIcon
EnableWindow
GetClientRect
GetWindowRect
wsprintfA
GetSystemMetrics
UnregisterClassA
SendMessageA
WinHelpA

gdi32

CreatePen
GetMapMode
DPtoLP
GetTextColor
GetRgnBox
EnumFontFamiliesExA
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
ExtSelectClipRgn
SetBkColor
SetTextColor
DeleteDC
Escape
ExtTextOutA
RectVisible
PtVisible
BitBlt
GetBkColor
SetStretchBltMode
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
SetMapMode
StartDocA
SetTextAlign
EndPage
StartPage
MoveToEx
LineTo
TextOutA
EndDoc
SelectObject
CreateFontA
GetObjectA
CreateFontIndirectA
GetStockObject
DeleteObject
CreateSolidBrush
GetTextExtentPoint32A
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetClipBox
CreateRectRgnIndirect
GetTextExtentPointA
SetTextJustification
CreateDIBSection
SetDIBitsToDevice
SelectPalette
CreateDIBitmap
CreatePalette
StretchBlt
RealizePalette
ScaleWindowExtEx

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegCloseKey
RegOpenKeyA
CloseServiceHandle
OpenServiceA
EnumServicesStatusA
OpenSCManagerA
RegEnumKeyExA
RegEnumKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegQueryValueA
RegQueryValueExA

shell32

ShellExecuteA
SHGetFileInfoA

comctl32

ImageList_ReplaceIcon
ord17
ImageList_AddMasked
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA

shlwapi

PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathFileExistsA
PathIsDirectoryA
PathIsUNCA

oledlg

ord8

ole32

CoGetClassObject
CoInitializeEx
CoInitializeSecurity
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoSetProxyBlanket
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID

oleaut32

OleCreateFontIndirect
VariantCopy
SysAllocStringByteLen
SysStringLen
GetErrorInfo
SysAllocStringLen
SysFreeString
VarBstrFromDate
SystemTimeToVariantTime
VariantChangeType
VariantClear
VariantInit
SafeArrayDestroy
SysAllocString

Sections

.text
Size: 480KB - Virtual size: 479KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 96KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ff2a3fed7cc12cc65eb0f39720c1ea50

Headers

File Characteristics

Imports

shfolder

setupapi

version

winmm

msvfw32

msacm32

rpcrt4

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 480KB - Virtual size: 479KB

.rdata Size: 120KB - Virtual size: 119KB

.data Size: 96KB - Virtual size: 112KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 480KB - Virtual size: 479KB

.rdata
Size: 120KB - Virtual size: 119KB

.data
Size: 96KB - Virtual size: 112KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB