2024-06-25_67e9618f0457d3a4e3c39acff5eb2398_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-25_67e9618f0457d3a4e3c39acff5eb2398_icedid
Size

740KB
MD5

67e9618f0457d3a4e3c39acff5eb2398
SHA1

648ea0812b476615ec2c6b5b5ec2a0709eb495b4
SHA256

cd1f8f0b490c01970749880d001ce3288749b07cd5f792b326ccafa2b1e81dab
SHA512

9fdc30ad9902fc3909161f3e02c4a075f459ba95d89e263de9f1433b1defec8c764fb3f7ba4eda39f6103314121edfc0c5afb1338359a8916a036066b98dd78e
SSDEEP

12288:2GD/Q+TYzmmmkGkDlwGQJgw+gLb5JoVQIQsZS0K1ToCGAzKyaIhktynU0:2GE+TYzhVQJGqbToVQKS0ROWIhBn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-25_67e9618f0457d3a4e3c39acff5eb2398_icedid

Files

2024-06-25_67e9618f0457d3a4e3c39acff5eb2398_icedid
.exe windows:4 windows x86 arch:x86

0f21c3c1fc59086f6b8e8f39e71cecbf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

avicap32

capCreateCaptureWindowA

kernel32

HeapReAlloc
ExitThread
CreateThread
SetStdHandle
GetFileType
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetCurrentProcessId
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetEnvironmentVariableA
InterlockedExchange
GetACP
GetCommandLineA
GetLocaleInfoA
GetThreadLocale
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
GetVersion
MultiByteToWideChar
lstrlenA
GetCPInfo
GlobalFree
GetPrivateProfileIntA
CloseHandle
CreateEventA
PurgeComm
EscapeCommFunction
SetCommMask
TerminateThread
WriteFile
ClearCommError
WaitCommEvent
ReadFile
SetCommState
GetCommState
SetCommTimeouts
SetupComm
CreateFileA
ReleaseMutex
GetLastError
CreateMutexA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
TerminateProcess
ExitProcess
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
RtlUnwind
FindResourceExA
GetCurrentDirectoryA
LocalFileTimeToFileTime
SetErrorMode
SystemTimeToFileTime
GetOEMCP
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
VirtualProtect
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DeleteFileA
MoveFileA
GetModuleFileNameA
lstrcmpA
InterlockedDecrement
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
SetLastError
MulDiv
GlobalAlloc
FormatMessageA
LocalFree
GlobalLock
GlobalUnlock
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
lstrcpynA
GetModuleHandleA
GetProcAddress
GetStringTypeExA
CompareStringW
CompareStringA
lstrcmpiA
lstrcpyA
Sleep
OutputDebugStringA
CreateDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
WaitForSingleObject
GetTickCount

user32

SetParent
GetSystemMenu
IsZoomed
GetAsyncKeyState
SetCapture
SetWindowRgn
DrawIcon
IsRectEmpty
FindWindowA
DestroyCursor
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
LoadMenuA
DestroyMenu
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
SetMenu
wsprintfA
GetMessageA
TranslateMessage
ValidateRect
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
IsWindowEnabled
ShowWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
GetDlgItemInt
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
PeekMessageA
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
DefWindowProcA
IntersectRect
IsIconic
GetWindowPlacement
GetWindow
GetNextDlgGroupItem
InflateRect
ClientToScreen
WindowFromPoint
EnableWindow
SendMessageA
GetSysColor
SetRect
CopyRect
FillRect
GetSysColorBrush
LoadBitmapA
DrawEdge
CreateMenu
CreatePopupMenu
DeleteMenu
AppendMenuA
GetMenuItemCount
GetMenuItemID
LoadImageA
GetIconInfo
GetWindowLongA
OffsetRect
SetRectEmpty
GetCapture
ReleaseCapture
DrawStateA
MoveWindow
PostMessageA
CharUpperA
MessageBeep
LockWindowUpdate
CharNextA
CopyAcceleratorTableA
InvalidateRgn
PostThreadMessageA
GetTabbedTextExtentA
GetDCEx
IsWindowVisible
GetDlgItem
CheckDlgButton
IsDlgButtonChecked
EnumChildWindows
GetDlgCtrlID
GetClassNameA
GetMenu
IsMenu
GetMenuStringA
UnregisterClassA
GetActiveWindow
GetKeyState
GetCursorPos
SetCursor
LoadCursorA
KillTimer
ScreenToClient
PtInRect
UpdateWindow
GetParent
RegisterClipboardFormatA
MapWindowPoints
GetMenuState
GetSubMenu
InsertMenuA
ModifyMenuA
RemoveMenu
GetDC
ReleaseDC
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
DestroyIcon
SystemParametersInfoA
GetSystemMetrics
GetMenuItemInfoA
CallWindowProcA
IsWindow
MessageBoxA
SetWindowLongA
DestroyWindow
SetWindowPos
GetWindowRect
GetClientRect
InvalidateRect
SetTimer
TranslateAcceleratorA

gdi32

CreateDCA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
CreateBitmap
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetCharWidthA
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetViewportOrgEx
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CreateEllipticRgn
LPtoDP
GetTextColor
GetRgnBox
GetNearestColor
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetWindowOrgEx
EnumFontFamiliesExA
SetBkColor
SetTextColor
GetClipBox
GetStockObject
StretchDIBits
SetStretchBltMode
SetDIBitsToDevice
GetObjectA
GetTextMetricsA
CreateFontA
GetBkColor
RealizePalette
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextExtentPoint32A
PatBlt
Rectangle
Ellipse
GetBkMode
GetDeviceCaps
CreateCompatibleBitmap
CreateFontIndirectA
CreatePen
CreateCompatibleDC
SelectObject
BitBlt
CreateSolidBrush
DeleteObject
DeleteDC

comdlg32

PrintDlgA
ChooseColorA
CommDlgExtendedError
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
SHFileOperationA
ShellExecuteA
DragFinish
ExtractIconA
SHGetFileInfoA
DragQueryFileA
SHGetPathFromIDListA

comctl32

ImageList_SetBkColor
_TrackMouseEvent
ord17
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Create
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Draw

shlwapi

PathFindExtensionA
PathFindFileNameA
PathIsUNCA
PathStripToRootA

oledlg

ord8

ole32

CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator

oleaut32

OleLoadPicturePath
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
SysAllocString
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect

Sections

.text
Size: 536KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f21c3c1fc59086f6b8e8f39e71cecbf

Headers

File Characteristics

Imports

avicap32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 536KB - Virtual size: 533KB

.rdata Size: 128KB - Virtual size: 125KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 60KB - Virtual size: 58KB

.text
Size: 536KB - Virtual size: 533KB

.rdata
Size: 128KB - Virtual size: 125KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 60KB - Virtual size: 58KB