2024-06-09_fe1c6fb6962112aaa64cd6de8a8b37f7_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-06-09_fe1c6fb6962112aaa64cd6de8a8b37f7_icedid
Size

2.0MB
MD5

fe1c6fb6962112aaa64cd6de8a8b37f7
SHA1

3ced564063c302f42f1ac9182662aa3cd0cbadc9
SHA256

6c00211f7c834e90934a8ca02b565447c0fa25de1c9b036cb37329a0a5aee6d5
SHA512

1f6fd6a3ec2718dc39806b4725eb9588e49a6c7a27614de5492fa9bd5278e00a154f9eee675948c6666ec84a0c58997c202a65b7774bacaee69ef705b64eb777
SSDEEP

24576:/5qwGdpycrGFYKnmQ8QlVowi4LsuX8hkFLx0N:/5OpNrGmimxUVC4TXvx0N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-09_fe1c6fb6962112aaa64cd6de8a8b37f7_icedid

Files

2024-06-09_fe1c6fb6962112aaa64cd6de8a8b37f7_icedid
.exe windows:5 windows x86 arch:x86

615cc190ae6a5a6706ba3fa6c3b43d45

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Jenkins\workspace\workspace\Hermes_Lexus_PCViewer_WinOS\hermes_win\Release\LEXUSDashcam.pdb

Imports

winmm

waveOutGetVolume
waveOutGetNumDevs

quartz

AMGetErrorTextW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
RtlUnwind
RaiseException
ExitThread
CreateThread
HeapReAlloc
ExitProcess
HeapSize
SetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
HeapAlloc
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
LCMapStringA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CreateFileA
SetEnvironmentVariableA
GetStartupInfoW
SetErrorMode
GlobalGetAtomNameW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalReAlloc
TlsGetValue
GlobalFlags
GetCurrentThread
ConvertDefaultLocale
lstrcmpA
GetLocaleInfoW
CompareStringA
GetFileSizeEx
GetFileAttributesExW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrlenA
GetFullPathNameW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
InitializeCriticalSection
InterlockedDecrement
GetModuleHandleA
MulDiv
SuspendThread
SetThreadPriority
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
SetLastError
GetVersionExA
SetFileTime
GetFileTime
SetFileAttributesW
Sleep
GetVolumeInformationW
GetDriveTypeW
LoadLibraryW
FreeLibrary
CreateDirectoryW
EnumResourceLanguagesW
GetVersion
GetProcAddress
LocalSize
LocalAlloc
GetDiskFreeSpaceExW
GetModuleFileNameW
GetTimeFormatW
GetDateFormatW
GetTickCount
GetCurrentProcessId
InterlockedExchange
FileTimeToSystemTime
FileTimeToLocalFileTime
CompareFileTime
lstrcmpW
WideCharToMultiByte
SetFilePointer
MultiByteToWideChar
FindClose
FindNextFileW
FindFirstFileW
lstrcmpiW
GetPrivateProfileStringW
ResumeThread
DeleteFileW
GetFileAttributesW
GetLocalTime
SizeofResource
lstrlenW
lstrcatW
GlobalAlloc
GlobalLock
LocalFree
GetModuleHandleW
FormatMessageW
CreateFileW
DeleteCriticalSection
CloseHandle
WaitForSingleObject
GetFileSize
CreateEventW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
WriteFile
ReadFile
GetLastError
GlobalFree
GlobalHandle
GlobalUnlock
OutputDebugStringW
SetEvent
lstrcpyW
FreeResource
LockResource
LoadResource
FindResourceW
VirtualFree

user32

SetWindowContextHelpId
MapDialogRect
PostQuitMessage
DestroyMenu
GetMenuItemInfoW
CharUpperW
GetWindowThreadProcessId
SetWindowRgn
SystemParametersInfoW
WindowFromPoint
LoadMenuW
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
GetMessageW
GetCursorPos
ValidateRect
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ShowOwnedPopups
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
LoadAcceleratorsW
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
DefWindowProcW
CallWindowProcW
GetMenu
SystemParametersInfoA
GetWindowPlacement
GetWindow
CreateDialogIndirectParamW
DestroyWindow
GetNextDlgTabItem
EndDialog
GetMonitorInfoW
MonitorFromRect
RegisterDeviceNotificationW
GetSystemMenu
BringWindowToTop
CopyRect
DispatchMessageW
TranslateMessage
PeekMessageW
GetDlgItem
LoadStringW
SetCursor
ChangeDisplaySettingsExW
UnionRect
SetCursorPos
SetFocus
SetForegroundWindow
ShowWindow
FindWindowW
FrameRect
AppendMenuW
CreatePopupMenu
DrawFocusRect
GetSysColor
IsRectEmpty
IntersectRect
GetFocus
InflateRect
RedrawWindow
ReleaseDC
GetDC
FillRect
GetSysColorBrush
CopyAcceleratorTableW
InvalidateRgn
TranslateAcceleratorW
SetRectEmpty
PostThreadMessageW
RegisterClipboardFormatW
GetNextDlgGroupItem
KillTimer
SetTimer
MessageBeep
UnregisterClassW
CharNextW
UnpackDDElParam
ReuseDDElParam
ScrollWindow
DrawIcon
IsIconic
LoadIconW
GetDlgCtrlID
UpdateWindow
SetRect
LoadBitmapW
AdjustWindowRectEx
LoadCursorW
OffsetRect
InvalidateRect
GetParent
IsWindowVisible
SendMessageW
DrawTextW
GetClientRect
ReleaseCapture
ClientToScreen
SetCapture
PtInRect
SetWindowPos
GetSystemMetrics
GetWindowRect
SetWindowLongW
GetWindowLongW
IsWindow
wsprintfW
PostMessageW
SetActiveWindow
GetActiveWindow
EnableWindow
IsWindowEnabled
GetDesktopWindow
ScreenToClient
InsertMenuItemW
GetKeyState

gdi32

Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
ExcludeClipRect
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetStockObject
ExtTextOutW
RectVisible
CreateEllipticRgn
LPtoDP
Ellipse
GetMapMode
GetRgnBox
GetBkColor
GetTextColor
SetMapMode
TextOutW
PtVisible
GetWindowExtEx
GetViewportExtEx
MoveToEx
LineTo
SetLayout
SetBkMode
SetTextColor
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetObjectW
CreatePen
DeleteObject
RestoreDC
SaveDC
CreateBitmap
GetClipBox
AbortDoc
EndDoc
EndPage
Polyline
SetDIBitsToDevice
SelectPalette
StartPage
StartDocW
GetDeviceCaps
CreateDCW
CreateFontIndirectW
GetDIBits
StretchDIBits
CreateDIBitmap
SetBkColor
GetPixel
CreateSolidBrush
SelectClipRgn
CreateRectRgnIndirect
CreatePatternBrush
GetTextExtentPoint32W
StretchBlt
SetStretchBltMode
GetObjectA

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
RegFlushKey
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

DragFinish
SHGetSpecialFolderPathW
ShellExecuteExW
ord4
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
DragQueryFileW
ShellExecuteW
ord2
SHGetDesktopFolder

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

UrlUnescapeW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

OleFlushClipboard
GetRunningObjectTable
CreateItemMoniker
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
OleIsCurrentClipboard
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoRegisterMessageFilter

oleaut32

VariantClear
SafeArrayDestroy
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysFreeString
SysStringLen
VariantInit
VariantChangeType
SysAllocStringLen
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
GetErrorInfo

gdiplus

GdipCreateFromHDC
GdipDeleteGraphics
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDrawImageRectI
GdipGetImageHeight
GdipGetImageWidth
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipDrawString
GdipCreatePen1
GdipImageRotateFlip
GdipDrawLineI
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromScan0
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSaveImageToFile
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipDrawImageRectRect
GdipCloneImage
GdipAlloc
GdipDeletePen
GdipDisposeImage
GdipFree

wininet

InternetSetFilePointer
InternetGetLastResponseInfoW
HttpQueryInfoW
HttpAddRequestHeadersW
InternetQueryDataAvailable
InternetSetOptionExW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetAttemptConnect
InternetGetConnectedState
HttpOpenRequestW
InternetConnectW
InternetCloseHandle
InternetReadFile
HttpEndRequestW
HttpSendRequestExW
HttpSendRequestW
InternetSetStatusCallbackW
InternetOpenW
InternetWriteFile

Sections

.text
Size: 648KB - Virtual size: 647KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

615cc190ae6a5a6706ba3fa6c3b43d45

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winmm

quartz

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

wininet

Sections

.text Size: 648KB - Virtual size: 647KB

.rdata Size: 190KB - Virtual size: 189KB

.data Size: 14KB - Virtual size: 32KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 648KB - Virtual size: 647KB

.rdata
Size: 190KB - Virtual size: 189KB

.data
Size: 14KB - Virtual size: 32KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB