2024-06-13_5c9fc84d42a6e08284780d6eb951f613_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-13_5c9fc84d42a6e08284780d6eb951f613_icedid
Size

1.9MB
MD5

5c9fc84d42a6e08284780d6eb951f613
SHA1

5a48f56c0a92b95554b82c6a31922def0fbe78e3
SHA256

176bff9b58e45adf3dbed980d873e6130c7aae5ff13f1abb4400a60a70bd3c53
SHA512

9baaeb81d622273c9c42245699fd97bbc53c93d76802ee0adaa2cfb5f6873b37d00827e32cf5faa28dc6546fddc3c8f679444e6f072b4dc194aed46a60c81616
SSDEEP

24576:QKirriN4DWzMLai6XxCILKjptrAu9wCZ9kmpi+3Pynop/:mrJkNx5L8rADy9k25Kno

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-13_5c9fc84d42a6e08284780d6eb951f613_icedid

Files

2024-06-13_5c9fc84d42a6e08284780d6eb951f613_icedid
.exe windows:4 windows x86 arch:x86

3e6ba191f16a7a51a1585dc94d9811c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetOpenStatus
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext

wsock32

connect
WSAStartup
WSACleanup
socket
ioctlsocket
htons
bind
htonl
listen
inet_addr
getsockname
accept
select
closesocket
shutdown
send
recv
setsockopt
inet_ntoa
gethostbyname
gethostname

mpr

WNetGetConnectionA

ssce4332

SSCE_OptionsDlg
SSCE_OptionsDlgTmplt
SSCE_EditLexDlg
SSCE_EditLexDlgTmplt
SSCE_OpenBlock
SSCE_CheckBlockDlgTmplt
SSCE_CloseBlock
SSCE_GetRegTreeName
SSCE_SetRegTreeName
SSCE_GetMainLexPath
SSCE_SetMainLexPath
SSCE_GetHelpFile
SSCE_SetHelpFile
SSCE_CheckBlock
SSCE_CheckBlockDlg
SSCE_GetMainLexFiles
SSCE_SetMainLexFiles
SSCE_GetSid
SSCE_GetOption
SSCE_SetOption
SSCE_GetBlockInfo

kernel32

GetStringTypeExA
GetThreadLocale
GetFileTime
SetFileTime
GlobalFlags
GetCurrentThread
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTempPathA
SearchPathA
GetProcessVersion
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
FindResourceExA
GetFullPathNameA
InterlockedExchange
RtlUnwind
GetACP
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
GetTimeZoneInformation
SetEnvironmentVariableA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapSize
TerminateProcess
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
GetCurrentProcessId
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadCodePtr
CompareStringA
CompareStringW
SetStdHandle
GetLocaleInfoW
MoveFileA
UnlockFile
LockFile
GetCurrentProcess
DuplicateHandle
FormatMessageA
SetLastError
lstrcmpA
CreateEventA
SuspendThread
SetEvent
InterlockedDecrement
InterlockedIncrement
lstrcatA
lstrcmpiA
GlobalFindAtomA
VirtualAlloc
VirtualFree
IsBadReadPtr
CreateFileMappingA
MapViewOfFile
GetDiskFreeSpaceA
GlobalMemoryStatus
UnmapViewOfFile
WriteProfileStringA
IsBadWritePtr
FindResourceA
LoadResource
LockResource
CompareFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetDriveTypeA
GetVolumeInformationA
GetLogicalDrives
GetLocalTime
GetDateFormatA
GetTimeFormatA
LoadLibraryA
GetProcAddress
LocalAlloc
LocalFree
FlushFileBuffers
FreeLibrary
LocalUnlock
LocalLock
ExitThread
lstrcpyA
GetSystemTime
GlobalGetAtomNameA
GlobalDeleteAtom
SetEndOfFile
SetFilePointer
ReadFile
_lclose
GetFileAttributesA
OpenFile
CopyFileA
GetFileSize
LocalSize
GlobalSize
GetOEMCP
GetCPInfo
IsDBCSLeadByte
WideCharToMultiByte
MultiByteToWideChar
GetTempFileNameA
CreateFileA
WriteFile
CreateThread
ResumeThread
SetThreadPriority
Sleep
CreateProcessA
GetLastError
lstrcpynA
GetCurrentDirectoryA
GetProfileStringA
GetProfileIntA
GetShortPathNameA
SetCurrentDirectoryA
lstrlenW
FindFirstFileA
FindClose
FindNextFileA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GlobalAddAtomA
WinExec
GetVersionExA
GetModuleFileNameA
GetCurrentThreadId
GetVersion
SetFileAttributesA
GetTickCount
GetModuleHandleA
MulDiv
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrlenA
GlobalReAlloc
WritePrivateProfileStringA
GetWindowsDirectoryA
DeleteFileA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
SetErrorMode

user32

CharLowerBuffW
GetDlgItem
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
GetForegroundWindow
GetLastActivePopup
GetMessageTime
RemovePropA
GetPropA
SetPropA
GetWindowTextA
GetWindowTextLengthA
SetWindowPlacement
GetScrollRange
SetScrollInfo
GetScrollInfo
MapWindowPoints
SendDlgItemMessageA
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
wvsprintfA
GetWindowDC
GrayStringA
ReuseDDElParam
UnpackDDElParam
DefFrameProcA
DefMDIChildProcA
MapDialogRect
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
IsClipboardFormatAvailable
GetWindowThreadProcessId
DestroyCursor
SetCursorPos
GetSysColorBrush
InvertRect
GetNextDlgGroupItem
PostThreadMessageA
IsRectEmpty
BeginDeferWindowPos
EndDeferWindowPos
WaitMessage
GetMessagePos
IsMenu
SetMenu
PtInRect
LoadBitmapA
IsWindowEnabled
SetFocus
WindowFromDC
EnableScrollBar
ShowScrollBar
GetScrollPos
SystemParametersInfoA
GetDoubleClickTime
TabbedTextOutA
GetDesktopWindow
AdjustWindowRectEx
CopyRect
SetMenuDefaultItem
LoadIconA
GetMenu
DrawMenuBar
GetFocus
WinHelpA
GetMenuItemID
ModifyMenuA
RemoveMenu
LoadImageA
CreateIconIndirect
DestroyIcon
SetKeyboardState
GetAsyncKeyState
LoadMenuA
GetActiveWindow
ToAscii
IsWindow
CallWindowProcA
GetSubMenu
IsCharAlphaW
IsCharLowerW
CharUpperW
CharLowerBuffA
CharLowerW
CharUpperA
CharLowerA
IsCharAlphaA
IsCharLowerA
IsCharUpperA
GetClipboardData
SetClipboardData
OemToCharBuffA
DefWindowProcW
GetClassLongA
GetUpdateRect
BeginPaint
EndPaint
ScreenToClient
SetCapture
ClientToScreen
WindowFromPoint
GetClassNameA
CharToOemBuffA
GetTabbedTextExtentA
ValidateRect
ScrollWindow
HideCaret
DrawTextA
TabbedTextOutW
SetScrollPos
SetCaretPos
SetScrollRange
GetTabbedTextExtentW
CharNextA
SetClassLongA
SetWindowLongW
GetWindowLongW
DestroyCaret
CreateCaret
ShowCaret
SetCursor
ReleaseCapture
LoadCursorA
GetSysColor
GetCaretPos
GetMenuStringA
DeleteMenu
InsertMenuA
GetMenuItemCount
GetWindow
LockWindowUpdate
UnhookWindowsHookEx
UnregisterClassA
FindWindowA
SetForegroundWindow
SetWindowsHookExA
RegisterClassA
CreateWindowExA
UpdateWindow
GetMessageA
GetMessageW
TranslateMessage
DispatchMessageW
DispatchMessageA
PeekMessageA
CallNextHookEx
SetWindowLongA
GetWindowLongA
DefWindowProcA
RegisterWindowMessageA
SetParent
GetDlgCtrlID
GetWindowRect
OffsetRect
GetSystemMetrics
wsprintfA
GetClassInfoA
ChildWindowFromPointEx
LoadStringA
ShowWindow
MoveWindow
GetMenuDefaultItem
TrackPopupMenu
IntersectRect
SendMessageTimeoutA
GetMenuState
MessageBeep
SetWindowPos
BringWindowToTop
GetSystemMenu
TranslateAcceleratorA
SetRectEmpty
CreatePopupMenu
GetCursorPos
AppendMenuA
GetKeyState
GetParent
IsWindowVisible
MessageBoxA
PostMessageA
SetActiveWindow
IsIconic
OpenClipboard
EmptyClipboard
CloseClipboard
GetClientRect
SetRect
TranslateMDISysAccel
IsChild
DeferWindowPos
RegisterClipboardFormatA
GetDCEx
DestroyWindow
DrawIconEx
MenuItemFromPoint
InsertMenuItemA
SetMenuItemInfoA
GetTopWindow
DestroyMenu
DrawEdge
GetMenuItemInfoA
GetCapture
FillRect
InvalidateRect
LoadAcceleratorsA
GetKeyboardState
DestroyAcceleratorTable
CreateAcceleratorTableA
MapVirtualKeyA
CopyAcceleratorTableA
KillTimer
SetTimer
IsZoomed
GetDC
ReleaseDC
EnableWindow
SendMessageA
DrawFocusRect
FrameRect
DrawStateA
DrawFrameControl
RedrawWindow
EqualRect
InflateRect
IsCharUpperW
UnionRect

gdi32

RectVisible
CreatePatternBrush
CreateFontA
CreateDIBitmap
Ellipse
RealizePalette
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetNearestColor
FillRgn
CombineRgn
CreateRectRgnIndirect
PatBlt
Polygon
Rectangle
CreateBitmap
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
GetCurrentObject
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
SetTextAlign
GetCurrentPositionEx
GetViewportExtEx
GetWindowExtEx
PtVisible
Escape
CreateDCA
StretchDIBits
GetMapMode
SetRectRgn
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
EnumFontFamiliesExA
GetBkColor
LPtoDP
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
CopyMetaFileA
GetTextColor
DPtoLP
GetClipBox
SelectClipRgn
CreateRectRgn
MoveToEx
LineTo
TextOutA
SetBkColor
SetTextColor
ExtTextOutA
ExtTextOutW
GetTextExtentPoint32W
GetCharWidth32W
GetTextExtentPoint32A
GetTextExtentPointA
SelectObject
GetTextMetricsA
GetCharWidthA
CreatePen
CreateSolidBrush
DeleteObject
GetObjectA
GetDeviceCaps
CreateFontIndirectA
GetStockObject

comdlg32

ReplaceTextA
PrintDlgA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
ChooseFontA
GetFileTitleA
ChooseColorA
FindTextA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegCloseKey

shell32

ShellExecuteA
Shell_NotifyIconA
ShellExecuteExA
SHFileOperationA
SHChangeNotify
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetDesktopFolder
SHGetFileInfoA
SHGetMalloc
SHGetPathFromIDListA
ExtractIconA

comctl32

ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Draw
ImageList_Destroy
ImageList_LoadImageA
ImageList_Remove
ImageList_SetImageCount
ImageList_Add
ImageList_EndDrag
ImageList_Create
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Duplicate
ImageList_Write
ImageList_Read

oledlg

ord8

ole32

CreateStreamOnHGlobal
OleDuplicateData
CoRevokeClassObject
CoRegisterMessageFilter
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
ReleaseStgMedium
CoTaskMemFree
DoDragDrop
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleLockRunning
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID

olepro32

ord253

oleaut32

VariantTimeToSystemTime
VariantClear
SysAllocStringLen
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysStringLen
SysFreeString

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e6ba191f16a7a51a1585dc94d9811c7

Headers

File Characteristics

Imports

imm32

wsock32

mpr

ssce4332

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 216KB - Virtual size: 214KB

.data Size: 56KB - Virtual size: 206KB

.rsrc Size: 356KB - Virtual size: 352KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 216KB - Virtual size: 214KB

.data
Size: 56KB - Virtual size: 206KB

.rsrc
Size: 356KB - Virtual size: 352KB