2024-06-17_027ede938cd365907f6c5ff56f30b71a_icedid_silence

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-17_027ede938cd365907f6c5ff56f30b71a_icedid_silence
Size

2.3MB
MD5

027ede938cd365907f6c5ff56f30b71a
SHA1

b1e4ab23bc365ac0bd9c0cbbb34d579ced378c6f
SHA256

10abeddfe9aa4e9f6b489806e7c0bd4a88213b49b73c4d0d65a151e2ff8784e0
SHA512

693382c87ffb602722728a7cbae50e337716221cf0f97d336775e9444c1cf15510977c63f45cec472eb7e8b39b67927c1baf873566fbf498c2232f1730433b62
SSDEEP

49152:tDst+itMltg45TVKDgM+KTT0SRj3sFd27Is41GRg0FOEcj+/8etJpvu:tDstNMltg4Z8JTT0O3sRsQeg0wBj+/82

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-17_027ede938cd365907f6c5ff56f30b71a_icedid_silence

Files

2024-06-17_027ede938cd365907f6c5ff56f30b71a_icedid_silence
.exe windows:6 windows x86 arch:x86

199dc45fc1d0988ccaf8af23ae71df5a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\TeamCity\BuildAgent\work\96c5973a40292cb7\Code\af\Release\AF20_32.pdb

Imports

kernel32

IsValidLocale
EnumSystemLocalesW
WriteConsoleW
SetEnvironmentVariableA
CreateFileW
InterlockedDecrement
GetModuleHandleA
GetProcAddress
LoadResource
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
GetFileAttributesExW
ReadConsoleW
TerminateProcess
LCMapStringW
UnhandledExceptionFilter
SetFilePointerEx
GetStartupInfoW
GetConsoleMode
GetConsoleCP
GetProcessHeap
GetStringTypeW
IsValidCodePage
GetStdHandle
GetFileType
SetStdHandle
HeapQueryInformation
HeapSize
ExitThread
CreateThread
LockResource
SizeofResource
GetTimeFormatW
GetDateFormatW
SetUnhandledExceptionFilter
OutputDebugStringW
LocalFree
FormatMessageA
FindResourceW
GetPrivateProfileStringA
WideCharToMultiByte
GetSystemTime
LocalAlloc
lstrlenA
FreeLibrary
LoadLibraryA
GetLastError
CreateFileA
GetFileSize
CloseHandle
GetSystemInfo
GetCommandLineA
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
OutputDebugStringA
GetCurrentProcess
GetPhysicallyInstalledSystemMemory
ReadFile
SetHandleInformation
CreatePipe
GetExitCodeProcess
CreateProcessA
GetModuleFileNameA
Sleep
SetLastError
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
MulDiv
CopyFileA
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
VirtualQuery
VirtualAlloc
HeapAlloc
HeapReAlloc
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
HeapFree
RtlUnwind
RaiseException
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathA
GetProfileIntA
GetTickCount
GetTempFileNameA
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
lstrcpyA
GetACP
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
GetVersionExA
InterlockedExchange
GlobalFindAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeResource
GetSystemDirectoryW
DecodePointer
EncodePointer
GlobalFlags
GetVolumeInformationA
lstrcmpiA
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
FindFirstFileA
FindClose
GlobalAddAtomA
ResumeThread
SetThreadPriority
GetCurrentThreadId
WaitForSingleObject
LoadLibraryW
GetVersion
GetFileAttributesW
FileTimeToSystemTime
GlobalGetAtomNameA
lstrcmpA
InterlockedIncrement
CompareStringA
GetModuleHandleW
GetModuleFileNameW
GetCurrentProcessId
LocalReAlloc
GlobalHandle
GlobalReAlloc
InitializeCriticalSectionEx

lookupengine

DefineLookup
ProcessTableFile
PerformLookup

director

FundingRate
CalcAverageLifeFunding
DurationFundingRate
CalculateFundingByCashFlows
FTPRateFromRowByIndex
CalculatePrepaymentPenalty
CalcOASPremium
NonCashFlowFundingRate
FirstMonthlyYieldCurvePoint
PresentValue
AverageLife
GetCashFlowsForPaymentRecord
GetCashFlows
CashFlowsForPeriodicRepricers
ContingentLiquidityPremium
NonMaturityDepositMaturity
ClearBDIWarnings
GetBDIDirectorWarnings
GetDirectorFatalErrorMessage
FundingTable
CloseDirector
FundingForPeriodicRepricersByIndex
FTPRateFromYieldCurve
DirectorWithProductDatabase

rpcrt4

UuidToStringA
RpcStringFreeA

user32

LockWindowUpdate
SetParent
SetRect
SetCursorPos
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
WaitMessage
PostThreadMessageA
GetSystemMenu
GetComboBoxInfo
LoadMenuW
TrackMouseEvent
GetKeyNameTextA
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
LoadImageW
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
MapVirtualKeyA
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
LoadCursorW
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
MessageBeep
GetIconInfo
DrawIconEx
LoadImageA
IsRectEmpty
OffsetRect
SetRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
IntersectRect
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
InvalidateRect
KillTimer
SetTimer
DeleteMenu
SetCursor
ShowOwnedPopups
CopyImage
SystemParametersInfoA
InflateRect
GetMenuItemInfoA
DestroyMenu
FillRect
EndPaint
BeginPaint
SetClassLongA
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
IsIconic
PostQuitMessage
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
GetTopWindow
GetClassLongA
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetClientRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
PostMessageA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
LoadBitmapW
SetMenuItemInfoA
GetDoubleClickTime
GetMenuStringA
GetMenuState
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
IsDialogMessageA
SetWindowLongA
SendDlgItemMessageA
CheckDlgButton
GetDlgItem
SetWindowPos
DrawIcon
GetWindowRgn
DestroyCursor
MapDialogRect
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
CopyIcon
TranslateMDISysAccel
DefMDIChildProcA
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
DefFrameProcA
DrawMenuBar
FrameRect
CharUpperBuffA
RegisterClipboardFormatA
ModifyMenuA
SetMenuDefaultItem
GetWindowDC
UnhookWindowsHookEx
SendMessageA
EnableWindow
IsWindowEnabled
MessageBoxA
GetWindowLongA
GetParent
GetWindowThreadProcessId
GetLastActivePopup
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
LoadCursorA
GetWindowTextA
GetWindowTextLengthA
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
IsWindowVisible
GetActiveWindow
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExA
CallNextHookEx
DestroyIcon
CharUpperA
GetDlgCtrlID
GetFocus
SetWindowTextA
GetWindowRect
ClientToScreen
PtInRect
GetDesktopWindow
GetClassNameA
GetWindow
RealChildWindowFromPoint
SetFocus
SetScrollPos
GetScrollPos
IsWindow
ShowWindow
MoveWindow
IsZoomed

gdi32

SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
GetTextExtentPoint32A
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
SetMapMode
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExA
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceA
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
CopyMetaFileA
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
DeleteObject
GetDeviceCaps
CreateDCA
GetTextCharsetInfo

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCloseKey
RegQueryValueExA
OpenProcessToken
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA

shell32

SHGetFolderPathA
SHFileOperationA
SHGetFileInfoA
ShellExecuteA
SHBrowseForFolderA
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHAppBarMessage

ole32

ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
OleRun
CoTaskMemAlloc
CoCreateGuid
CoInitialize
CoInitializeEx
CreateStreamOnHGlobal
DoDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoUninitialize
CoCreateInstance

oleaut32

SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
SafeArrayGetUBound
VariantClear
VariantCopy
VariantChangeType
VarBstrFromCy
VarBstrFromDate
VariantInit
SysAllocString
SafeArrayCreateVector
VarUdateFromDate
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
GetErrorInfo
SystemTimeToVariantTime
SysAllocStringByteLen
SysStringByteLen
SysFreeString

msimg32

TransparentBlt
AlphaBlend

shlwapi

StrFormatKBSizeA
PathRemoveFileSpecW
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFileExistsA

uxtheme

DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
GetThemePartSize
DrawThemeText

vcomp110

omp_destroy_lock
omp_init_lock
omp_set_lock
omp_get_thread_num
omp_set_num_threads
omp_unset_lock
omp_get_num_procs
omp_get_wtime
_vcomp_enter_critsect
_vcomp_leave_critsect
_vcomp_fork

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipDrawImageRectI

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundA

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 472KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

199dc45fc1d0988ccaf8af23ae71df5a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

lookupengine

director

rpcrt4

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

msimg32

shlwapi

uxtheme

vcomp110

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 472KB - Virtual size: 472KB

.data Size: 27KB - Virtual size: 119KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 472KB - Virtual size: 472KB

.data
Size: 27KB - Virtual size: 119KB

.rsrc
Size: 1KB - Virtual size: 1KB