2024-06-25_c365b4edd16cff21643a0b2c5dee79a4_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-25_c365b4edd16cff21643a0b2c5dee79a4_icedid
Size

948KB
MD5

c365b4edd16cff21643a0b2c5dee79a4
SHA1

d1ee2cfe6fd0f0b5b33744add1c1881119f7a853
SHA256

13697f3477645f2eeaa85c19ecb4fb1e877d9f892a82be0f96eae465a471d23c
SHA512

2b4f70e957a3674affb5e10fe9cc2d0b81022987c9a83c1e842affdee44ac7e1dffa577b2b17cdad3c52f9b693c41ccd300ffdd759a6db0e786e20a0b15fc1cc
SSDEEP

12288:zzhr0QmqKy4hg3uqH8N4xGLnRRuipt2S8J4Ibl6mhrf1O:BGqKySgeI8N48/t2S8J7b0ms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-25_c365b4edd16cff21643a0b2c5dee79a4_icedid

Files

2024-06-25_c365b4edd16cff21643a0b2c5dee79a4_icedid
.exe windows:4 windows x86 arch:x86

db05022238e17f3131dfdc5e540b7afe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\My Projects\Macro Expert\Output\MacroPlayer.pdb

Imports

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

winmm

PlaySoundA
timeGetTime
mixerGetLineControlsA
timeEndPeriod
mixerGetLineInfoA
mixerSetControlDetails
mixerGetControlDetailsA
mixerGetNumDevs
timeBeginPeriod
mciSendCommandA
mixerClose

wininet

FindCloseUrlCache
DeleteUrlCacheEntry
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA

document office

?Read_Cell@CDocument_Excel@@QAEHPBD0AAVCOleVariant@@H@Z
?ShowAppWnd@CDocument_Excel@@QAEHH@Z
?IsValidColName@CDocument_Excel@@QAEHPBD@Z
?Find_Cell@CDocument_Excel@@QAEHPBD00AAJHHH@Z
?Write_Cell@CDocument_Excel@@QAEHPBD0AAVCOleVariant@@H@Z
?IsValidCellName@CDocument_Excel@@QAEHPBD@Z
?Close_Document@CDocument_Excel@@QAEHPBDH@Z
??1CDocument_Excel@@QAE@XZ
?Open_Document@CDocument_Excel@@QAEHPBD00HHI@Z
??0CDocument_Excel@@QAE@XZ

playerassistant

ord1
ord2
ord3

mk_dial

ord1
ord2

kernel32

GetModuleHandleA
GetModuleFileNameW
FreeResource
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
InterlockedIncrement
SetThreadPriority
SuspendThread
lstrcmpA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
ExitProcess
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
ExitThread
CreateThread
SetStdHandle
GetFileType
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetHandleCount
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
LocalFree
MulDiv
GetPrivateProfileIntA
WritePrivateProfileStringA
lstrcpynA
RemoveDirectoryA
GetModuleFileNameA
GetDateFormatA
GetTimeFormatA
GetVersionExA
lstrcpyA
SearchPathA
OpenEventA
SetSystemPowerState
TerminateThread
IsDBCSLeadByte
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetExitCodeThread
ResumeThread
MoveFileA
InterlockedDecrement
SetEvent
PeekNamedPipe
DisconnectNamedPipe
ConnectNamedPipe
ResetEvent
GetCurrentProcessId
ReleaseMutex
CancelIo
WaitNamedPipeA
CreateEventA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateNamedPipeA
CreateMutexA
WaitForSingleObject
GetTickCount
FormatMessageA
SetCurrentDirectoryA
GetCurrentDirectoryA
FindResourceA
LoadResource
LockResource
SizeofResource
GetLocalTime
DeviceIoControl
CreateProcessA
GetCurrentProcess
Sleep
GetPrivateProfileStringA
GetSystemDirectoryA
GetCurrentThreadId
GetProcAddress
LoadLibraryA
FreeLibrary
SetLastError
GetWindowsDirectoryA
FindClose
FindNextFileA
FindFirstFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
DeleteFileA
CopyFileA
CompareFileTime
GetFileTime
OutputDebugStringA
GetFileAttributesA
CreateDirectoryA
CloseHandle
WriteFile
GetACP
CreateFileA
ReadFile
SetFilePointer
GetFileSize
GetVersion
CompareStringA
lstrcmpiA
GetLastError
InterlockedExchange
lstrlenW
CompareStringW
lstrlenA
WideCharToMultiByte
MultiByteToWideChar

user32

SetWindowContextHelpId
ValidateRect
PostQuitMessage
ShowOwnedPopups
TranslateAcceleratorA
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
DestroyMenu
ReuseDDElParam
UnpackDDElParam
GetSysColorBrush
UnregisterClassA
PostThreadMessageA
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRgn
MessageBeep
GetMessageTime
GetMessagePos
TrackPopupMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
CallWindowProcA
IntersectRect
GetDlgItem
GetNextDlgTabItem
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetSubMenu
DestroyCursor
SetCursor
ShowCursor
WindowFromPoint
DrawIconEx
GetSystemMenu
SetMenuItemInfoA
DefWindowProcA
SetWindowRgn
IsDialogMessageA
GetMenuItemCount
GetMenuItemInfoA
GetMenuStringA
LoadMenuA
SetScrollInfo
SetScrollPos
GetScrollPos
GetScrollInfo
SetMenu
GetMenu
GetCapture
ScreenToClient
GrayStringA
DrawTextExA
TabbedTextOutA
PtInRect
DrawFocusRect
GetDlgCtrlID
MapDialogRect
SetClassLongA
GetNextDlgGroupItem
GetDoubleClickTime
SetCapture
IsWindowEnabled
GetActiveWindow
GetLastActivePopup
CreateDialogIndirectParamA
MapWindowPoints
EndDialog
ToAscii
SetFocus
DrawAnimatedRects
BringWindowToTop
SetWindowLongA
FillRect
DrawTextA
WaitForInputIdle
SetCursorPos
mouse_event
VkKeyScanA
GetMessageA
GetClipboardData
IsClipboardFormatAvailable
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
MoveWindow
ShowWindow
GetWindowPlacement
GetCursorPos
ExitWindowsEx
GetAsyncKeyState
OffsetRect
DestroyWindow
EnumThreadWindows
GetWindowDC
LoadCursorA
LoadIconA
LockWindowUpdate
RegisterWindowMessageA
SendMessageTimeoutA
DestroyIcon
MapVirtualKeyA
LoadStringA
DispatchMessageA
TranslateMessage
PeekMessageA
IsZoomed
IsIconic
GetWindow
GetWindowLongA
GetParent
MessageBoxA
GetFocus
GetKeyState
RegisterHotKey
UnregisterHotKey
GetWindowTextA
GetWindowTextLengthA
GetClassNameA
EnumWindows
SetForegroundWindow
UpdateWindow
LoadBitmapA
IsWindowVisible
SetTimer
KillTimer
SetWindowPos
InvalidateRect
SendMessageA
ReleaseCapture
GetClientRect
EnableWindow
keybd_event
PostMessageA
GetWindowThreadProcessId
AttachThreadInput
GetForegroundWindow
SystemParametersInfoA
RegisterClipboardFormatA
InflateRect
EndPaint
BeginPaint
SetWindowTextA
SetDlgItemTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
SetPropA
GetPropA
GetClassLongA
RemovePropA
GetSystemMetrics
ReleaseDC
GetDC
GetWindowRect
IsWindow
LoadImageA
GetSysColor
CopyRect
GetDesktopWindow
CharUpperA
BeginDeferWindowPos
EndDeferWindowPos
SetActiveWindow
GetTopWindow
ClientToScreen

gdi32

SelectPalette
SetStretchBltMode
SetMapMode
SetTextCharacterExtra
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
RoundRect
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
MoveToEx
CreatePatternBrush
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
OffsetRgn
TextOutW
GetCharABCWidthsA
GetCharWidthA
IntersectClipRect
SaveDC
LineTo
GetDeviceCaps
CreateFontIndirectA
CreateRectRgn
GetDIBits
CombineRgn
CreateBitmap
GetStockObject
Rectangle
CreateSolidBrush
SetBkColor
SetTextColor
GetTextMetricsA
StretchBlt
GetObjectA
CreateDIBSection
GdiFlush
GetPixel
GetSystemPaletteEntries
DPtoLP
ExtSelectClipRgn
BitBlt
SelectObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
CreatePen
SetViewportExtEx
DeleteObject
ExcludeClipRect
RestoreDC
RealizePalette
GetDIBColorTable
SetDIBColorTable
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextExtentPoint32A
Ellipse
SetBkMode
GetClipBox

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
RegEnumKeyA
RegOpenKeyA
ControlService
StartServiceA
DeleteService
OpenServiceA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
GetUserNameA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

SHFileOperationA
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExA
Shell_NotifyIconA
DragFinish
DragQueryFileA
SHGetSpecialFolderPathA

shlwapi

SHDeleteKeyA
PathFileExistsA
StrStrIA
UrlCompareA
StrStrA
PathCompactPathA
PathFindExtensionA
SHDeleteEmptyKeyA
ChrCmpIA
PathFindFileNameA
PathStripToRootA
PathIsRootA
PathIsUNCA

oledlg

ord8

ole32

CoInitialize
OleRun
CoFreeUnusedLibraries
CoUninitialize
CoCreateInstance
OleUninitialize
CoDisconnectObject
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoSetProxyBlanket
OleInitialize
CoTaskMemFree

oleaut32

SysAllocString
VariantCopy
SysAllocStringByteLen
SysStringLen
VarUdateFromDate
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VarDateFromStr
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SafeArrayDestroy
LoadTypeLi
OleCreateFontIndirect
SysFreeString
GetErrorInfo

ddraw

DirectDrawCreate

mpr

WNetCancelConnection2A
WNetConnectionDialog1A
WNetAddConnection3A

Sections

.text
Size: 668KB - Virtual size: 667KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db05022238e17f3131dfdc5e540b7afe

Headers

File Characteristics

PDB Paths

Imports

version

winmm

wininet

document office

playerassistant

mk_dial

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

ddraw

mpr

Sections

.text Size: 668KB - Virtual size: 667KB

.rdata Size: 136KB - Virtual size: 132KB

.data Size: 20KB - Virtual size: 150KB

.rsrc Size: 120KB - Virtual size: 118KB

.text
Size: 668KB - Virtual size: 667KB

.rdata
Size: 136KB - Virtual size: 132KB

.data
Size: 20KB - Virtual size: 150KB

.rsrc
Size: 120KB - Virtual size: 118KB