2024-06-14_1a22b3ad58f005aeafb6e0c0f2453287_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-14_1a22b3ad58f005aeafb6e0c0f2453287_icedid
Size

1.2MB
MD5

1a22b3ad58f005aeafb6e0c0f2453287
SHA1

976facf5eaa491c2f0b2fb3ebb3b7ba5f4421bb2
SHA256

93a1305c27101c867249fdf08058ed9256fc8c39975fe946aefdee9b1f23e6eb
SHA512

278503644926e3f0248dec8e1618984b176cc1e3dd15a8e6992ab90d43b9c1bbcaabc33a500d5958a1c84a93ff36d0af9fd6915bb57c2ae2685b546ec4ec9f0b
SSDEEP

12288:lJLZ2tJMlIPIlwOSTi8uKziO9iVNGjrXd+9tSdf3ES84hfDq0wFkrzBnfE1:lqfiIXgYiOkMXd+7SrdfD1A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-14_1a22b3ad58f005aeafb6e0c0f2453287_icedid

Files

2024-06-14_1a22b3ad58f005aeafb6e0c0f2453287_icedid
.exe windows:4 windows x86 arch:x86

d3cc2166ad2190370b31b3c74244b553

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Destroy
ImageList_DrawEx
ord17
ImageList_DragShowNolock
ImageList_DragMove
ImageList_EndDrag
ImageList_DragLeave
ImageList_DragEnter
ImageList_BeginDrag
ImageList_AddMasked
_TrackMouseEvent
ImageList_Create

msimg32

TransparentBlt

imm32

ImmSetCompositionFontW
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
ImmSetOpenStatus

mpr

WNetOpenEnumW
WNetAddConnection2W
WNetDisconnectDialog
WNetConnectionDialog
WNetCloseEnum
WNetCancelConnection2W
WNetEnumResourceW

shlwapi

PathIsNetworkPathW
PathIsURLW
PathFileExistsA
PathIsNetworkPathA
PathIsURLA
ord8
PathFindExtensionA
StrCmpIW
StrCmpLogicalW
StrRetToBufW
SHDeleteKeyW
ord9
PathUnquoteSpacesW
PathRemoveBlanksW
PathGetArgsW
PathRemoveArgsW
PathStripToRootW
PathRelativePathToW
PathCombineW
ord7
PathFindFileNameW
PathIsDirectoryW
PathRemoveFileSpecW
PathIsRelativeW
ord10
PathRemoveExtensionW
PathIsRootW
PathRemoveExtensionA
PathFileExistsW
PathParseIconLocationW
PathIsUNCW
PathFindExtensionW

winmm

timeKillEvent
timeSetEvent

kernel32

SetCurrentDirectoryW
GetCurrentDirectoryW
GetTimeZoneInformation
GetPrivateProfileStringW
SetFileAttributesW
WritePrivateProfileStringW
GetFileAttributesW
GetWindowsDirectoryW
GetModuleFileNameW
GetCurrentThreadId
ResetEvent
SetEvent
lstrlenW
CopyFileW
GetModuleHandleA
GetVersionExA
GetModuleHandleW
lstrcmpW
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FreeResource
GetThreadLocale
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
SetThreadPriority
ResumeThread
SuspendThread
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
GlobalGetAtomNameW
GetVersion
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
GetProfileIntW
FindNextFileW
DeviceIoControl
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
lstrlenA
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapReAlloc
ExitThread
CreateThread
SetStdHandle
GetFileType
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
FileTimeToLocalFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentDirectoryA
GetDriveTypeA
CreateFileA
SetEnvironmentVariableA
RemoveDirectoryW
GetEnvironmentVariableW
SetSystemPowerState
CreateEventW
DuplicateHandle
WaitForSingleObject
InterlockedDecrement
InterlockedIncrement
GetCommandLineW
OpenMutexW
CreateMutexW
CreateProcessW
GetSystemTime
DeleteFileW
ReleaseMutex
MulDiv
SetVolumeLabelW
FileTimeToSystemTime
GetFullPathNameW
LoadLibraryExW
EnumResourceNamesW
GlobalSize
CreateHardLinkW
SetLastError
GetLocalTime
GlobalAlloc
GetTempPathW
GlobalFree
CompareStringW
lstrcpyW
CreateDirectoryW
GetTickCount
GetDiskFreeSpaceExW
FindFirstFileW
FindClose
GetDriveTypeW
SearchPathW
GlobalLock
GlobalUnlock
WideCharToMultiByte
GetSystemDirectoryW
ExpandEnvironmentStringsW
MultiByteToWideChar
GetVolumeInformationW
GetCurrentProcess
GetLastError
GetLogicalDrives
GetCurrentProcessId
GetProcAddress
Sleep
InitializeCriticalSection
CreateFileW
GetFileTime
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetModuleFileNameA
FormatMessageW
FindResourceW
LoadResource
LockResource
SizeofResource
LocalFree
LoadLibraryW
FreeLibrary
GetVersionExW
LocalAlloc

user32

IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
ScrollWindowEx
InflateRect
ModifyMenuW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CharUpperW
ValidateRect
TranslateMessage
GetMessageW
TranslateAcceleratorW
BringWindowToTop
SetRectEmpty
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
UnregisterClassW
IsRectEmpty
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
TabbedTextOutW
GetMenuStringW
GetSysColorBrush
DrawIcon
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
SetDlgItemTextW
AttachThreadInput
WINNLSEnableIME
WaitForInputIdle
CreatePopupMenu
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
LockWorkStation
ExitWindowsEx
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromWindow
MonitorFromPoint
CopyImage
DrawEdge
PostThreadMessageW
PostQuitMessage
EnumChildWindows
TrackMouseEvent
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetLayeredWindowAttributes
SetScrollPos
GetScrollPos
GetForegroundWindow
IsWindowVisible
InvalidateRect
UpdateWindow
SetWindowRgn
OffsetRect
DrawStateW
GetDC
EnumThreadWindows
LoadImageW
GetWindowThreadProcessId
SetWindowLongW
SetWindowPos
SetMenu
RegisterHotKey
UnregisterHotKey
SetCursorPos
PeekMessageW
GetCapture
SetForegroundWindow
SetActiveWindow
GetActiveWindow
KillTimer
IsWindow
RegisterWindowMessageW
AnimateWindow
GetDoubleClickTime
CopyRect
SetRect
GetWindowLongW
ClientToScreen
GetDlgItem
GetWindow
RegisterClipboardFormatW
IsClipboardFormatAvailable
CreateMenu
DestroyMenu
GetMenuItemInfoW
InsertMenuItemW
InsertMenuW
GetMenuDefaultItem
EnableMenuItem
CheckMenuItem
GetSysColor
DrawIconEx
CopyIcon
GetFocus
FillRect
GetSystemMetrics
GetKeyState
TrackPopupMenuEx
LoadMenuW
RemoveMenu
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
SetMenuDefaultItem
DeleteMenu
DestroyIcon
GetDesktopWindow
WindowFromPoint
GetWindowTextW
GetClassNameW
LoadCursorW
SetCursor
SetCapture
GetWindowRect
PtInRect
GetParent
ReleaseCapture
FindWindowW
PostMessageW
GetCursorPos
ScreenToClient
LoadIconW
MessageBeep
SystemParametersInfoW
EnableWindow
LoadBitmapW
GetClassLongW
SetClassLongW
GetClientRect
SendMessageW
CreateDialogIndirectParamW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
GetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
EndPaint
BeginPaint
ReleaseDC
GrayStringW
DrawTextExW
GetWindowDC
DrawTextW
SetTimer
UnregisterClassA

gdi32

SaveDC
RestoreDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
LineTo
MoveToEx
BitBlt
DeleteObject
DeleteDC
GetDeviceCaps
GetTextExtentPoint32W
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
CreatePen
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateBitmap
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
TextOutW
CopyMetaFileW
GetObjectW
SetBkMode
EnumFontFamiliesExW
CreateRectRgn
Polygon
Rectangle
GetGlyphOutlineW
CreateDIBSection
GetTextMetricsW
CreateRectRgnIndirect
CreateSolidBrush
GetStockObject
CreateCompatibleBitmap
PatBlt
CreateCompatibleDC
ExtTextOutW
SelectObject
CreateFontIndirectW

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueW
RegOpenKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
LookupPrivilegeValueW
OpenProcessToken
AdjustTokenPrivileges
GetUserNameW
RegEnumKeyW

shell32

DragAcceptFiles
ShellExecuteExW
ExtractIconExW
ExtractIconW
SHGetDesktopFolder
SHGetFileInfoW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
SHFileOperationW
SHAppBarMessage
Shell_NotifyIconW
DragQueryFileW
DuplicateIcon
SHGetSpecialFolderPathW
DragFinish
SHGetSpecialFolderLocation

oledlg

OleUIBusyW

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoRevokeClassObject
CoGetClassObject
ReleaseStgMedium
CreateStreamOnHGlobal
CoCreateInstance
OleInitialize
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
OleGetClipboard
CoInitialize
CoUninitialize
DoDragDrop
CreateILockBytesOnHGlobal
OleFlushClipboard
CoRegisterMessageFilter
OleIsCurrentClipboard
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes

oleaut32

VariantCopy
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
VariantTimeToSystemTime
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString
OleLoadPicture
OleCreateFontIndirect

Sections

.text
Size: 829KB - Virtual size: 828KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3cc2166ad2190370b31b3c74244b553

Headers

File Characteristics

Imports

comctl32

msimg32

imm32

mpr

shlwapi

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

oledlg

ole32

oleaut32

Sections

.text Size: 829KB - Virtual size: 828KB

.rdata Size: 208KB - Virtual size: 207KB

.data Size: 19KB - Virtual size: 49KB

.rsrc Size: 149KB - Virtual size: 148KB

.text
Size: 829KB - Virtual size: 828KB

.rdata
Size: 208KB - Virtual size: 207KB

.data
Size: 19KB - Virtual size: 49KB

.rsrc
Size: 149KB - Virtual size: 148KB