2024-06-08_5e802ff72b62b2f19728c420621eb9f3_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-08_5e802ff72b62b2f19728c420621eb9f3_icedid
Size

5.9MB
MD5

5e802ff72b62b2f19728c420621eb9f3
SHA1

a81a80128b30792a663fb2c4a03ad988c5e8d954
SHA256

834bc3d65c3b4d98e1375a6ebe44db8d64c51f05a43c0ea004a45789cca12b0b
SHA512

98890063d5b3b82a429d6e459111a3bae955732ca1b8a96df3f7d4a95d6dd291ff127569b948126e1d9ac02e78e2f3c229df4b188e3e661f1fee5fce37dbcd4b
SSDEEP

49152:llpL9a9AvE41AqaSHxD/txU1fRBiKg3RqWeHgLNiXicJFFRGNzj3:fpk9A8EHaoxDg1fLg3RX+g7wRGpj3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-08_5e802ff72b62b2f19728c420621eb9f3_icedid

Files

2024-06-08_5e802ff72b62b2f19728c420621eb9f3_icedid
.exe windows:4 windows x86 arch:x86

dbf5c442713c3002ab50ab57d561c4d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Chunyung\Documents\Visual Studio 2005\Projects\RtkNGui\release\RtkNGUI.pdb

Imports

winmm

mmioSeek
mmioRead
mciSendStringW
mmioCreateChunk
mmioAscend
mmioAdvance
mmioSetInfo
mmioWrite
mmioDescend
mmioOpenW
mmioGetInfo
timeGetTime
mmioClose

imm32

ImmDisableIME

setupapi

SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

dsound

ord6
ord1
ord3

kernel32

lstrcmpW
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetModuleHandleA
CompareStringA
GetLocaleInfoW
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
SuspendThread
WritePrivateProfileStringW
GetCurrentProcessId
GetThreadLocale
ReadFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationW
GetFullPathNameW
InterlockedDecrement
FileTimeToSystemTime
FileTimeToLocalFileTime
InterlockedIncrement
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
RaiseException
TlsFree
GlobalFlags
SetErrorMode
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
HeapReAlloc
VirtualProtect
VirtualAlloc
VirtualQuery
GetSystemTimeAsFileTime
ExitThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
ExitProcess
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryA
GetDriveTypeA
SetStdHandle
GetVersionExA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
LoadLibraryA
GetTimeFormatW
GetDateFormatW
GetLocalTime
SetThreadPriority
SetFilePointer
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetSystemInfo
IsBadReadPtr
OpenMutexW
CreateDirectoryW
ReleaseMutex
GetSystemPowerStatus
GetTempPathW
DeleteFileW
ResetEvent
GetSystemDirectoryA
GetSystemDirectoryW
ResumeThread
DuplicateHandle
GetPrivateProfileIntW
GetFileSize
GetPrivateProfileStringW
Sleep
CompareFileTime
SystemTimeToFileTime
GetWindowsDirectoryW
SetThreadExecutionState
GetFileAttributesW
DeviceIoControl
GetSystemTime
GetTimeZoneInformation
WriteFile
CreateFileW
WaitForMultipleObjects
GetExitCodeThread
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameW
SearchPathW
FindResourceExW
GetUserDefaultUILanguage
MulDiv
FreeLibrary
CreateEventW
TerminateThread
CreateThread
GetVersionExW
GetVersion
FreeResource
GetCPInfo
lstrlenA
lstrcmpiW
GetTickCount
FormatMessageW
SetEvent
GetModuleHandleW
SetLastError
lstrcpyW
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
CreateProcessW
GetCurrentProcess
IsWow64Process
WaitForSingleObject
SetThreadUILanguage
GetCurrentThreadId
InterlockedExchange
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
FindClose
FindNextFileW
FindFirstFileW
GetProcAddress
LoadLibraryW
LocalFree
LocalAlloc
CloseHandle
GetLastError
CreateMutexW
WriteConsoleA
lstrcmpA
LocalReAlloc

user32

IsDialogMessageW
MoveWindow
IsWindowEnabled
GetMenuStringW
GetActiveWindow
GetMessageW
CharUpperW
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
WindowFromPoint
DestroyMenu
UnregisterClassW
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
GetScrollRange
GetScrollPos
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
SetScrollInfo
DefWindowProcW
SystemParametersInfoA
UnregisterClassA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
GetShellWindow
FindWindowW
UnregisterDeviceNotification
RegisterDeviceNotificationW
RegisterWindowMessageW
SetMenuDefaultItem
SetWindowPos
SetWindowTextW
LoadIconW
IsWindow
GetMenuItemInfoW
ModifyMenuW
InsertMenuW
GetSubMenu
GrayStringW
GetMenuItemCount
DeleteMenu
DrawTextExW
DrawEdge
CreatePopupMenu
DrawTextW
DestroyIcon
CreateMenu
DrawIconEx
GetMenuItemID
LoadBitmapW
GetLastActivePopup
UpdateLayeredWindow
DestroyCursor
LoadImageW
GetClassLongW
TranslateAcceleratorW
GetSysColorBrush
GetScrollInfo
CallWindowProcW
GetCursorPos
SetTimer
KillTimer
SetWindowLongW
ValidateRect
GetDlgCtrlID
GetClassNameW
ScreenToClient
FillRect
AppendMenuW
SystemParametersInfoW
IntersectRect
GetComboBoxInfo
SetCursor
LoadCursorW
ReleaseCapture
SetCapture
SetRect
PtInRect
InflateRect
GetMessagePos
IsRectEmpty
ReleaseDC
GetDC
FrameRect
SetRectEmpty
DispatchMessageW
TranslateMessage
PostQuitMessage
PeekMessageW
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
ShowWindow
GetWindowLongW
LockWindowUpdate
SetParent
SetWindowRgn
GetWindowRgn
GetAncestor
GetForegroundWindow
IsWindowVisible
SetClassLongW
CallNextHookEx
UnhookWindowsHookEx
SetDlgItemTextW
GetDlgItem
MessageBoxW
GetDesktopWindow
SetWindowsHookExW
UnionRect
ChildWindowFromPointEx
ShowScrollBar
SetScrollPos
SetScrollRange
OffsetRect
WindowFromDC
SetActiveWindow
CopyRect
GetSystemMetrics
GetParent
GetWindowRect
EndPaint
BeginPaint
ClientToScreen
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetWindow
RedrawWindow
FindWindowExW
SetProcessDPIAware
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
TabbedTextOutW
GetWindowTextW
PostMessageW
GetFocus
EnableWindow
SendMessageW
GetClientRect
GetSysColor
UpdateWindow
InvalidateRect
GetTopWindow
DestroyWindow
GetMessageTime
MapWindowPoints
GetMenuState
EqualRect
IsIconic

gdi32

PtVisible
SaveDC
RestoreDC
SetBkMode
SetMapMode
LineTo
MoveToEx
SetTextAlign
SetPixel
SetViewportOrgEx
GetBkMode
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SetBkColor
SetTextColor
GetPixel
GetClipBox
CreateBitmap
CreateFontW
GetDeviceCaps
CreatePen
GetCurrentObject
ExtTextOutW
CreateFontIndirectW
CreateSolidBrush
SetDIBColorTable
DPtoLP
GetMapMode
CreateCompatibleBitmap
CombineRgn
ExtCreateRegion
CreateDIBSection
GetObjectW
DeleteObject
CreateRectRgn
CreateCompatibleDC
SelectObject
DeleteDC
BitBlt
GetStockObject
OffsetViewportOrgEx
GetTextExtentPoint32W
Ellipse
Escape
PatBlt
TextOutW
RectVisible

msimg32

AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegOpenKeyW
RegQueryValueW
RegCloseKey
RegEnumKeyW
RegDeleteKeyW
StartServiceW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegOpenKeyExW
RegEnumKeyExW
RegNotifyChangeKeyValue
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW

shell32

Shell_NotifyIconW
ShellExecuteExW
SHGetFolderPathW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
SHStrDupW
PathIsUNCW

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize
CreateStreamOnHGlobal
PropVariantClear
CLSIDFromString
CoTaskMemFree
StringFromGUID2
CoInitialize
CoFreeUnusedLibrariesEx
FreePropVariantArray
PropVariantCopy
CoTaskMemAlloc

oleaut32

VariantInit
VariantChangeType
SafeArrayCreate
VariantClear

gdiplus

GdipGetFontSize
GdipGetFontStyle
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreateStringFormat
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipSetTextRenderingHint
GdipDrawString
GdipDrawImage
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipGetLogFontW
GdiplusStartup
GdiplusShutdown
GdipGetImageWidth
GdipGetImageHeight
GdipCreateHBITMAPFromBitmap
GdipAlloc
GdipGetImageGraphicsContext
GdipFree
GdipDrawImageRectI
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipDisposeImage
GdipCloneImage
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipImageRotateFlip
GdipDrawImageRectRectI
GdipDrawImageRectRect
GdipCreateBitmapFromHICON
GdipDrawImageRect
GdipSetSmoothingMode
GdipCreatePen1
GdipDeletePen
GdipDrawLineI
GdipCreateFontFromDC
GdipCreateFontFromLogfontW
GdipDeleteFont
GdipMeasureString
GdipDeleteFontFamily
GdipGetFamily
GdipCreateFont
GdipGetFontUnit

dwmapi

DwmExtendFrameIntoClientArea

Sections

.text
Size: 820KB - Virtual size: 818KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dbf5c442713c3002ab50ab57d561c4d1

Headers

File Characteristics

PDB Paths

Imports

winmm

imm32

setupapi

version

dsound

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

dwmapi

Sections

.text Size: 820KB - Virtual size: 818KB

.rdata Size: 184KB - Virtual size: 183KB

.data Size: 40KB - Virtual size: 55KB

.rsrc Size: 4.9MB - Virtual size: 4.9MB

.text
Size: 820KB - Virtual size: 818KB

.rdata
Size: 184KB - Virtual size: 183KB

.data
Size: 40KB - Virtual size: 55KB

.rsrc
Size: 4.9MB - Virtual size: 4.9MB