2024-06-08_5cd09a445d60296c7e158c6a89f0e8fd_icedid_vidar

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-08_5cd09a445d60296c7e158c6a89f0e8fd_icedid_vidar
Size

11.5MB
MD5

5cd09a445d60296c7e158c6a89f0e8fd
SHA1

812d1183153b92db2b81aeb9f13c5fa31e7a132f
SHA256

9cc8f6052d3a27b125749545d2adc4d55b56f97524525bce39d8406db6837b4e
SHA512

bb15a25a02c8539ca985ff471ebdc5272ca0993a201fa6c60b193c42344d4fa650a42b573554e94686bc05669557751c5c64b43fc90f2864272ea91cba81e5bb
SSDEEP

98304:o4SBAdYJc0c7IFDBlSUdU7ewloozRwwbt32ZlmIIAII5IILIIIeIII4II5IIDII6:oadH0c7IFrSUdU7ewloozRwwbB2AQHyh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-08_5cd09a445d60296c7e158c6a89f0e8fd_icedid_vidar

Files

2024-06-08_5cd09a445d60296c7e158c6a89f0e8fd_icedid_vidar
.exe windows:5 windows x86 arch:x86

b0376bf82712f31aedae3ed631a8c1ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\BqJFT\trunk\Release\BC_POS_Client.pdb

Imports

wsock32

recv
send
WSAGetLastError
socket
setsockopt
connect
closesocket
WSACleanup
WSAStartup
gethostbyname
inet_addr
htons

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

netapi32

Netbios

iphlpapi

GetAdaptersInfo

winmm

timeGetTime

kernel32

LoadResource
FindResourceA
WideCharToMultiByte
CreateDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
CloseHandle
GetLastError
CreateMutexA
TerminateThread
Sleep
GetLocalTime
CreateThread
GetSystemTime
GetModuleHandleA
lstrcpynA
ReleaseMutex
WaitForSingleObject
GetCurrentProcessId
WriteFile
PurgeComm
LockResource
GetCommState
SetCommTimeouts
SetupComm
CreateFileA
FlushFileBuffers
MultiByteToWideChar
GetTickCount
lstrlenA
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
GetConsoleOutputCP
WriteConsoleA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetDriveTypeA
InitializeCriticalSectionAndSpinCount
VirtualFree
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
SizeofResource
SetCommState
GetCurrentThreadId
OpenEventA
FileTimeToLocalFileTime
OpenFileMappingA
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
SetHandleCount
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
GetACP
SetConsoleCtrlHandler
FatalAppExitA
GetTimeZoneInformation
SetStdHandle
ExitThread
GetFileType
WriteConsoleW
GetStdHandle
DebugBreak
ExitProcess
IsBadReadPtr
GetStartupInfoA
GetCommandLineA
VirtualQuery
VirtualAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
RaiseException
FindResourceExA
GetTempFileNameA
GetOEMCP
GetCPInfo
GetProfileIntA
VirtualProtect
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
TlsAlloc
GetModuleHandleW
SetErrorMode
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetAtomNameA
FileTimeToSystemTime
lstrcmpW
GlobalGetAtomNameA
GlobalFindAtomA
FreeResource
FindNextFileA
GlobalAddAtomA
CreateEventA
SetEvent
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetShortPathNameA
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
MoveFileA
GetCurrentProcess
DuplicateHandle
GetHandleInformation
CompareStringA
InterlockedExchange
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetModuleFileNameA
GetLocaleInfoA
ConvertDefaultLocale
EnumResourceLanguagesA
SuspendThread
ResumeThread
GetThreadPriority
SetThreadPriority
SetLastError
lstrlenW
CopyFileA
LocalAlloc
LocalLock
LocalUnlock
GlobalSize
GlobalReAlloc
GetTimeFormatA
GlobalHandle
GlobalFree
GlobalAlloc
DeviceIoControl
IsDBCSLeadByte
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
AreFileApisANSI
CreateFileW
CreateFileMappingA
CreateFileMappingW
CreateMutexW
DeleteFileA
DeleteFileW
FormatMessageA
FormatMessageW
FreeLibrary
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesW
GetFileAttributesExW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetProcAddress
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
SystemTimeToFileTime
UnlockFile
UnlockFileEx
UnmapViewOfFile
OutputDebugStringW
GetProcessHeap
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalLock
GlobalUnlock
OutputDebugStringA
GetTempPathA
GetFileAttributesA
MulDiv
GetDateFormatA

user32

GetAsyncKeyState
WaitMessage
ReleaseCapture
LoadAcceleratorsA
MapVirtualKeyA
GetKeyNameTextA
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
SendDlgItemMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
WinHelpA
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
DefWindowProcA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
IntersectRect
GetWindowPlacement
EndDialog
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetKeyState
CallNextHookEx
SetWindowsHookExA
GetMessageA
TranslateMessage
DispatchMessageA
GetMenuCheckMarkDimensions
CharUpperA
PeekMessageA
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectA
SetMenuItemBitmaps
ModifyMenuA
InsertMenuItemA
GetMenuItemInfoA
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
DeleteMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringA
GetTabbedTextExtentA
DrawTextExA
TabbedTextOutA
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
ExcludeUpdateRgn
WindowFromDC
LoadBitmapA
GetSysColorBrush
OpenIcon
SetRectEmpty
LoadIconA
PostThreadMessageA
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
MapDialogRect
EnableWindow
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
IsChild
GetLastActivePopup
GetWindow
GetTopWindow
FindWindowExA
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
GetDesktopWindow
GetFocus
SetCapture
GetCapture
SetActiveWindow
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
ValidateRect
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
GetWindowDC
EndPaint
BeginPaint
MapWindowPoints
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
IsIconic
HiliteMenuItem
GetSystemMenu
DrawMenuBar
DragDetect
RemoveMenu
IsMenu
GetMenuItemCount
GetMenuState
GetMenuStringA
AppendMenuA
InsertMenuA
GetMenuItemID
GetActiveWindow
MessageBoxA
ClientToScreen
IsRectEmpty
LoadCursorA
GetCursorPos
GetClipboardFormatNameA
UnpackDDElParam
TranslateAcceleratorA
ReuseDDElParam
GetMenuBarInfo
GetDialogBaseUnits
CharNextA
CopyAcceleratorTableA
DestroyMenu
LoadMenuA
DestroyCursor
GetIconInfo
MessageBeep
UnregisterClassA
IsClipboardFormatAvailable
RegisterClipboardFormatA
InSendMessage
CloseWindow
CreateIconIndirect
FillRect
GetSubMenu
TrackPopupMenuEx
PostMessageA
SetCursor
SystemParametersInfoA
DrawFocusRect
DrawTextA
GetDC
ReleaseDC
DestroyIcon
CallWindowProcA
GetSysColor
IsWindow
OpenClipboard
GetClipboardData
CloseClipboard
EnumChildWindows
GetClientRect
GetWindowRect
GetParent
ScreenToClient
GetDlgCtrlID
SetWindowPos
ShowWindow
GetWindowLongA
SetWindowLongA
UnregisterHotKey
GetWindowThreadProcessId
GetClassNameA
LoadImageA
OffsetRect
SendMessageA
GetKeyboardLayoutList
ActivateKeyboardLayout
PostQuitMessage
GetSystemMetrics
PtInRect
SetRect
InflateRect
UnionRect
SubtractRect
DispatchMessageW
GetMessageW
IsWindowUnicode
MsgWaitForMultipleObjects
SetMenuItemInfoA

gdi32

CreateFontIndirectA
SetBkMode
SetTextColor
GetDeviceCaps
CreateDCA
GetObjectA
CreatePen
SelectObject
DeleteObject
GetStockObject
SetMapMode
GetMapMode
DPtoLP
SetWorldTransform
SetGraphicsMode
SetPaletteEntries
ResizePalette
SetSystemPaletteUse
GetNearestPaletteIndex
CreateDIBitmap
GdiFlush
StretchDIBits
CopyMetaFileA
UnrealizeObject
GetObjectType
CreatePenIndirect
ExtCreatePen
CreateHatchBrush
CreateBrushIndirect
CreatePatternBrush
CreateDIBPatternBrushPt
CreateFontA
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateDiscardableBitmap
AnimatePalette
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateICA
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
GetNearestColor
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetGraphicsMode
GetWorldTransform
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
GetCurrentPositionEx
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
RoundRect
PatBlt
FloodFill
CreateCompatibleBitmap
ExtTextOutA
DeleteDC
GetTextAlign
GetTextFaceA
GetTextMetricsA
GetTextCharacterExtra
GetCharWidthA
GetFontLanguageInfo
SetBkColor
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCA
GetOutlineTextMetricsA
GetCharABCWidthsA
GetFontData
GetKerningPairsA
GetGlyphOutlineA
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatA
GetCharWidthFloatA
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
CreateMetaFileA
CloseMetaFile
CreateEnhMetaFileA
CloseEnhMetaFile
GetDCOrgEx
GetClipBox
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
ModifyWorldTransform
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
EnumFontFamiliesExA
DeleteMetaFile
GetTextExtentPoint32A
BitBlt
SetPixel
GetPixel
TextOutA
SetDIBits
GetDIBits
SetDIBColorTable
CreateDIBSection
CreatePalette
CreateHalftonePalette
GetPaletteEntries
GetDIBColorTable
SetStretchBltMode
RealizePalette
SelectPalette
Rectangle
CreateCompatibleDC
CreateBitmap
GetCharacterPlacementA
StretchBlt
ExtFloodFill
GetSystemPaletteEntries
CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
GetJobA
DocumentPropertiesA
EnumPrintersA
ClosePrinter

advapi32

SetThreadToken
GetFileSecurityA
SetFileSecurityA
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
OpenThreadToken
RevertToSelf
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA

shell32

DragQueryFileA
ShellExecuteExA
DragAcceptFiles
SHGetFileInfoA
ExtractIconA
DragFinish
ShellExecuteA

comctl32

_TrackMouseEvent
InitCommonControlsEx
ImageList_Draw

shlwapi

PathIsUNCA
PathStripToRootA
PathRemoveExtensionA
PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW

oledlg

ord3
ord7
ord6
ord5
ord9
ord4
ord8

ole32

GetClassFile
CreateFileMoniker
CreateGenericComposite
CreateItemMoniker
OleFlushClipboard
OleSetClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
StringFromGUID2
CoDisconnectObject
OleRegEnumVerbs
CoUninitialize
CoInitializeEx
CoCreateInstance
CLSIDFromString
CreateStreamOnHGlobal
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemFree
OleDuplicateData
DoDragDrop
OleSetMenuDescriptor
OleGetClipboard
OleQueryLinkFromData
OleQueryCreateFromData
OleIsRunning
CoUnmarshalInterface
CoMarshalInterface
OleSaveToStream
WriteClassStm
OleGetIconOfClass
CoGetMalloc
CoLockObjectExternal
GetRunningObjectTable
IsAccelerator
OleTranslateAccelerator
CreateDataAdviseHolder
CreateOleAdviseHolder
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CLSIDFromProgID
OleRegGetMiscStatus
GetHGlobalFromILockBytes
StgIsStorageILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleLockRunning
StgIsStorageFile
StgOpenStorage
OleRun
CoReleaseMarshalData
StgCreateDocfile

oleaut32

SafeArrayGetDim
SafeArrayGetElemsize
SysAllocString
VariantChangeType
SysAllocStringLen
RegisterTypeLi
OleCreateFontIndirect
VarDecFromStr
VarBstrFromDec
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
LoadRegTypeLi
LoadTypeLi
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
SafeArrayCreate
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SysStringByteLen
SysAllocStringByteLen
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayUnlock
VariantClear
SysStringLen
VariantCopy
VariantInit
VarBstrFromDate
SysFreeString
VarUdateFromDate
VarDateFromStr
GetErrorInfo
SetErrorInfo
CreateErrorInfo
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarDateFromUdate
SafeArrayLock
SystemTimeToVariantTime

avicap32

capCreateCaptureWindowA

msvfw32

DrawDibDraw
DrawDibOpen
DrawDibClose

jsprinterdll

ord1
ord4

cximage

?CreateFromHBITMAP@CxImage@@QAE_NPAUHBITMAP__@@PAUHPALETTE__@@@Z
?Resample@CxImage@@QAE_NJJHPAV1@@Z
?Crop@CxImage@@QAE_NJJJJPAV1@@Z
?Rotate@CxImage@@QAE_NMPAV1@@Z
??0CxImage@@QAE@ABV0@_N11@Z
?GetWidth@CxImage@@QBEKXZ
?GetHeight@CxImage@@QBEKXZ
?GetPixelColor@CxImage@@QAE?AUtagRGBQUAD@@JJ_N@Z
?DestroyFrames@CxImage@@QAE_NXZ
?Destroy@CxImage@@QAE_NXZ
??0CxImage@@QAE@K@Z

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 541KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.8MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0376bf82712f31aedae3ed631a8c1ea

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wsock32

version

netapi32

iphlpapi

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

avicap32

msvfw32

jsprinterdll

cximage

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 541KB - Virtual size: 541KB

.data Size: 40KB - Virtual size: 83KB

.rsrc Size: 7.8MB - Virtual size: 7.9MB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 541KB - Virtual size: 541KB

.data
Size: 40KB - Virtual size: 83KB

.rsrc
Size: 7.8MB - Virtual size: 7.9MB