2024-06-10_31c34c9dcca18b3d49cb32e6fd128cf8_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-10_31c34c9dcca18b3d49cb32e6fd128cf8_icedid
Size

778KB
MD5

31c34c9dcca18b3d49cb32e6fd128cf8
SHA1

ac6d9cc9d9fa0438349e541934b5fdb941d2e25f
SHA256

af3ed1caec0d75a8cd2f0605f2e1b2f0c32e0fc7f31628f386e1667dcdffcb1f
SHA512

b397909258dc2c7ae5dcf105fab36de5f468eb06c35971743d0358e8728446441d20292bdb15258c653754e4a177f0dd9192f7c9329388996c9f921f40c480a8
SSDEEP

12288:5QWio0QWZ+cZPFI7GGKOnIWTfUhFkTJhkf2r1q1GwPPvJriTqYtg0c+7:aWiEWZ+iFOnI+d9024PPvtLQ7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-10_31c34c9dcca18b3d49cb32e6fd128cf8_icedid

Files

2024-06-10_31c34c9dcca18b3d49cb32e6fd128cf8_icedid
.exe windows:5 windows x86 arch:x86

f30d7a2322e99b571e1cc15bf6e3652a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\ci\E7-SETUP\CIBUILDS\core_build\core\vcclient\SmartInstaller\src\UnicodeRelease\SmartInstaller.pdb

Imports

zlib

ord81
ord82
ord83
ord80
ord84
ord61
ord62
ord67
ord68
ord72
ord65
ord66
ord64
ord63

kernel32

GetFileTime
DosDateTimeToFileTime
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
ConvertDefaultLocale
CompareStringA
InterlockedExchange
GetFileSizeEx
GetFileAttributesExW
GetStartupInfoW
LocalAlloc
LocalFileTimeToFileTime
SetFileTime
lstrcpynW
WaitForSingleObject
FindNextFileW
GetFileSize
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDiskFreeSpaceExW
OutputDebugStringW
GetSystemInfo
GetTempPathW
GetTimeZoneInformation
GetCurrentProcessId
GlobalMemoryStatus
FindFirstFileW
FindClose
GetCurrentThread
GetVersion
EnumResourceLanguagesW
OpenProcess
GetProcessHeap
HeapAlloc
HeapFree
GetACP
GetLocaleInfoW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
GlobalAlloc
GlobalLock
GlobalUnlock
ExitThread
GetVersionExW
LoadLibraryW
Sleep
ExitProcess
CreateFileW
SetFilePointer
ReadFile
CloseHandle
IsBadWritePtr
WriteFile
VirtualQuery
GetModuleFileNameW
GetModuleHandleW
FormatMessageW
SetUnhandledExceptionFilter
LoadLibraryA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetVersionExA
GetModuleHandleA
lstrlenA
lstrcmpA
GetVolumeInformationW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GetProcAddress
VirtualProtect
GetCurrentProcess
FlushInstructionCache
FreeLibrary
SuspendThread
FreeResource
MulDiv
CreateThread
SetCurrentDirectoryW
GetExitCodeThread
TerminateThread
GetFileAttributesW
RemoveDirectoryW
MoveFileW
ResumeThread
GetPrivateProfileSectionW
InterlockedDecrement
LocalFree
InterlockedIncrement
lstrlenW
GetTickCount
WideCharToMultiByte
lstrcmpiW
DeleteFileW
GetLastError
CopyFileW
GetPrivateProfileStringW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GlobalFlags
WritePrivateProfileStringW
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetLocaleInfoA
GlobalFree
SetLastError
LeaveCriticalSection
EnterCriticalSection
GetStringTypeW
GetStringTypeA
LCMapStringA
GetConsoleMode
GetConsoleCP
GetCurrentDirectoryA
GetDateFormatA
GetTimeFormatA
InitializeCriticalSectionAndSpinCount
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
VirtualAlloc
HeapSize
GetFileType
SetStdHandle
HeapReAlloc
GetDriveTypeA
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
IsDebuggerPresent
UnhandledExceptionFilter
DeleteCriticalSection
TerminateProcess
InitializeCriticalSection

gdi32

SaveDC
RestoreDC
SetBkColor
SetBkMode
SetTextColor
SetMapMode
GetClipBox
DeleteObject
SelectClipRgn
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
CreateRectRgnIndirect
GetRgnBox
LPtoDP
DPtoLP
GetWindowExtEx
GetStockObject
GetDeviceCaps
GetTextExtentPointW
GetTextMetricsW
SelectObject
CreateFontW
CreateFontIndirectW
GetTextExtentPoint32W
GetTextColor
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetBkColor
GetObjectW
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CreateRectRgn
GetMapMode
GetViewportExtEx

user32

PostThreadMessageW
RegisterWindowMessageW
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
SetRect
GetWindow
GetDlgCtrlID
GetDC
ReleaseDC
IsRectEmpty
UnregisterClassW
SetTimer
IsWindowVisible
InvalidateRect
MessageBoxW
PostQuitMessage
UpdateWindow
GetClientRect
EnableWindow
GetParent
SendMessageW
PostMessageW
RegisterClipboardFormatW
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
FindWindowW
GetWindowThreadProcessId
GetClassLongW
WindowFromDC
GetSysColor
GetCursorPos
GrayStringW
TabbedTextOutW
GetFocus
EqualRect
DrawTextW
FillRect
IsWindow
wvsprintfW
DrawTextExW
LoadCursorW
KillTimer
OffsetRect
GetKeyState
SetCursor
ReleaseCapture
SetCapture
RedrawWindow
PtInRect
GetWindowLongW
SetWindowLongW
FindWindowExW
GetWindowRect
ShowWindow
GetDlgItem
GetClassNameW
GetWindowTextW
SetWindowTextW
ScreenToClient
CopyRect
BeginPaint
EndPaint
ClientToScreen
AdjustWindowRectEx
MoveWindow
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSystemMetrics
CharUpperW
GetWindowDC
GetWindowPlacement
IsIconic
DestroyMenu
IntersectRect
SetWindowPos
GetMenu
CallWindowProcW
DefWindowProcW
SetWindowPlacement
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
SetForegroundWindow
SetMenu
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextLengthW
SetFocus
RemovePropW
GetPropW
SetPropW
CallNextHookEx
SetWindowsHookExW
GetCapture
IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
LoadIconW
IsWindowEnabled
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
GetActiveWindow
GetDesktopWindow
CheckMenuItem
EnableMenuItem
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CharNextW
ValidateRect
GetMessageW
MapDialogRect
SetWindowContextHelpId
GetSysColorBrush
SystemParametersInfoA

ole32

OleFlushClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleIsCurrentClipboard
CoTaskMemAlloc
CoTaskMemFree
CoRevokeClassObject
OleInitialize
CoUninitialize
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal

oleaut32

OleCreateFontIndirect
OleLoadPicture
VariantCopy
VariantClear
VariantInit
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocString
GetErrorInfo
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantChangeType
SysAllocStringLen
SysStringLen

oledlg

ord3
OleUIBusyW
ord1

shell32

SHGetFolderPathW
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SHChangeNotify
SHFileOperationW
SHGetMalloc
SHGetSpecialFolderLocation
ord680
SHCreateDirectoryExW

comctl32

ord17

advapi32

MapGenericMask
RegDeleteKeyW
GetSidSubAuthority
RegCloseKey
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
GetFileSecurityW
ImpersonateSelf
OpenThreadToken
GetSidSubAuthorityCount
AccessCheck
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
DuplicateTokenEx
OpenProcessToken
GetTokenInformation
IsValidSid
RegDeleteValueW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

shlwapi

PathAppendW
PathIsUNCW
UrlUnescapeW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW

wsock32

inet_addr
WSACleanup
gethostname
WSAStartup
gethostbyname

wininet

InternetSetOptionW
InternetCloseHandle
InternetSetStatusCallbackW
InternetCrackUrlW
HttpQueryInfoW
InternetOpenUrlW
InternetOpenW
InternetReadFileExA
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetReadFile
InternetGetConnectedStateExW
InternetCanonicalizeUrlW
InternetQueryDataAvailable
HttpAddRequestHeadersW
InternetGetLastResponseInfoW
InternetSetFilePointer
InternetWriteFile

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

Sections

.text
Size: 511KB - Virtual size: 511KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f30d7a2322e99b571e1cc15bf6e3652a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

zlib

kernel32

gdi32

user32

ole32

oleaut32

oledlg

shell32

comctl32

advapi32

version

shlwapi

wsock32

wininet

comdlg32

winspool.drv

Sections

.text Size: 511KB - Virtual size: 511KB

.rdata Size: 142KB - Virtual size: 141KB

.data Size: 13KB - Virtual size: 53KB

.rsrc Size: 110KB - Virtual size: 110KB

.text
Size: 511KB - Virtual size: 511KB

.rdata
Size: 142KB - Virtual size: 141KB

.data
Size: 13KB - Virtual size: 53KB

.rsrc
Size: 110KB - Virtual size: 110KB