2024-06-25_5fc869c4a01e580656c6c7a9b11094a9_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-25_5fc869c4a01e580656c6c7a9b11094a9_icedid
Size

1.9MB
MD5

5fc869c4a01e580656c6c7a9b11094a9
SHA1

09b4dee54158e5482bfd3deb6d04a7d1281fdc95
SHA256

9e475d603e6f5984bccdcbf1019dc0808ce27db589f4f00074d598eae6c1355d
SHA512

de4527e96c3a9c195b88d69424947373960292fedfc427c3e7191354c4682ee8f50f20a7c3e5ec528fa9ae2aa81c8f3a0eaa04ea35379b5ff9a22625311a187c
SSDEEP

24576:Acx3IktVsVhncntZ8ue3lkI8wY37it/i7DjAVBhF1TrVLUoPeTVLzR/undOp:08tsOLL8aDgfPeTVFuns

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-25_5fc869c4a01e580656c6c7a9b11094a9_icedid

Files

2024-06-25_5fc869c4a01e580656c6c7a9b11094a9_icedid
.exe windows:4 windows x86 arch:x86

3741015a8a9ebcefe197295e0110162e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSACleanup
connect
socket
ioctlsocket
htons
bind
htonl
listen
inet_addr
getsockname
accept
select
closesocket
shutdown
send
recv
setsockopt
inet_ntoa
gethostbyname
gethostname
WSAStartup

imm32

ImmGetOpenStatus
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

mpr

WNetGetConnectionA

ssce4332

SSCE_OptionsDlgTmplt
SSCE_EditLexDlg
SSCE_EditLexDlgTmplt
SSCE_OpenBlock
SSCE_CheckBlock
SSCE_GetBlockInfo
SSCE_CheckBlockDlg
SSCE_CheckBlockDlgTmplt
SSCE_CloseBlock
SSCE_GetRegTreeName
SSCE_SetRegTreeName
SSCE_GetMainLexPath
SSCE_SetMainLexPath
SSCE_GetHelpFile
SSCE_SetHelpFile
SSCE_GetMainLexFiles
SSCE_GetSid
SSCE_SetMainLexFiles
SSCE_OptionsDlg
SSCE_SetOption
SSCE_GetOption

kernel32

GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetFileTime
SetFileTime
GetCurrentThread
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTempPathA
SearchPathA
GetProcessVersion
GlobalFlags
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
FindResourceExA
FormatMessageA
InterlockedExchange
RtlUnwind
GetACP
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
GetTimeZoneInformation
SetEnvironmentVariableA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapSize
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
MoveFileA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
GetCurrentProcessId
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadCodePtr
CompareStringA
CompareStringW
SetStdHandle
GetLocaleInfoW
SetLastError
lstrcmpA
CreateEventA
SuspendThread
SetEvent
InterlockedDecrement
InterlockedIncrement
lstrcatA
lstrcmpiA
GlobalFindAtomA
VirtualAlloc
VirtualFree
IsBadReadPtr
CreateFileMappingA
MapViewOfFile
GetDiskFreeSpaceA
GlobalMemoryStatus
UnmapViewOfFile
WriteProfileStringA
IsBadWritePtr
FindResourceA
LoadResource
LockResource
UnlockFile
LockFile
GetCurrentProcess
EnumSystemLocalesA
DuplicateHandle
GlobalUnlock
CompareFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
CreateDirectoryA
GetDriveTypeA
GetVolumeInformationA
GetLogicalDrives
GetLocalTime
GetDateFormatA
GetTimeFormatA
LoadLibraryA
GetProcAddress
LocalAlloc
LocalFree
FlushFileBuffers
FreeLibrary
MulDiv
LocalUnlock
LocalLock
ExitThread
lstrcpyA
GetSystemTime
GlobalGetAtomNameA
GlobalDeleteAtom
SetEndOfFile
SetFilePointer
ReadFile
_lclose
GetFileAttributesA
OpenFile
CopyFileA
GetFileSize
LocalSize
GlobalSize
GetOEMCP
GetCPInfo
IsDBCSLeadByte
WideCharToMultiByte
MultiByteToWideChar
GetTempFileNameA
CreateFileA
WriteFile
CreateThread
ResumeThread
SetThreadPriority
Sleep
CreateProcessA
GetLastError
GlobalReAlloc
lstrcpynA
GetCurrentDirectoryA
GetProfileStringA
GetProfileIntA
GetShortPathNameA
SetCurrentDirectoryA
lstrlenW
FindFirstFileA
FindClose
FindNextFileA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GlobalAddAtomA
WinExec
GetVersionExA
GetModuleFileNameA
GetCurrentThreadId
GetVersion
GlobalLock
SetFileAttributesA
GetTickCount
GetModuleHandleA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrlenA
WritePrivateProfileStringA
GetWindowsDirectoryA
DeleteFileA
GlobalFree
GlobalAlloc
SetErrorMode

user32

GetDlgItem
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
GetForegroundWindow
GetLastActivePopup
GetMessageTime
RemovePropA
GetPropA
SetPropA
GetWindowTextA
GetWindowTextLengthA
SetWindowPlacement
GetScrollRange
SetScrollInfo
GetScrollInfo
MapWindowPoints
SendDlgItemMessageA
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
wvsprintfA
GetWindowDC
GrayStringA
ReuseDDElParam
UnpackDDElParam
DefFrameProcA
DefMDIChildProcA
MapDialogRect
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
IsClipboardFormatAvailable
GetWindowThreadProcessId
DestroyCursor
SetCursorPos
GetSysColorBrush
InvertRect
GetNextDlgGroupItem
PostThreadMessageA
UnionRect
IsRectEmpty
BeginDeferWindowPos
OffsetRect
EndDeferWindowPos
WaitMessage
GetMessagePos
IsMenu
SetMenu
PtInRect
LoadBitmapA
IsWindowEnabled
SetFocus
WindowFromDC
GetSystemMetrics
EnableScrollBar
ShowScrollBar
GetScrollPos
SystemParametersInfoA
GetDoubleClickTime
TabbedTextOutA
GetDesktopWindow
GetWindowRect
AdjustWindowRectEx
CopyRect
SetMenuDefaultItem
LoadIconA
GetMenu
DrawMenuBar
WinHelpA
GetMenuItemID
ModifyMenuA
RemoveMenu
LoadImageA
GetIconInfo
CreateIconIndirect
DestroyIcon
SetKeyboardState
GetAsyncKeyState
LoadMenuA
GetDlgCtrlID
GetActiveWindow
ToAscii
SetRectEmpty
IsWindow
CharLowerBuffW
GetSubMenu
IsCharAlphaW
IsCharLowerW
CharUpperW
CharLowerW
CharUpperA
CharLowerA
IsCharAlphaA
IsCharLowerA
IsCharUpperA
GetClipboardData
SetClipboardData
OemToCharBuffA
DefWindowProcW
GetClassLongA
GetUpdateRect
BeginPaint
EndPaint
ScreenToClient
SetCapture
ClientToScreen
WindowFromPoint
GetClassNameA
CharToOemBuffA
GetTabbedTextExtentA
ValidateRect
ScrollWindow
HideCaret
DrawTextA
TabbedTextOutW
SetScrollPos
SetCaretPos
SetScrollRange
GetTabbedTextExtentW
CharNextA
SetClassLongA
SetWindowLongW
GetWindowLongW
DestroyCaret
CreateCaret
ShowCaret
SetCursor
ReleaseCapture
LoadCursorA
GetSysColor
GetCaretPos
GetFocus
OpenClipboard
EmptyClipboard
CloseClipboard
GetMenuStringA
DeleteMenu
InsertMenuA
GetMenuItemCount
GetWindow
LockWindowUpdate
UnhookWindowsHookEx
UnregisterClassA
wsprintfA
FindWindowA
SetForegroundWindow
SetWindowsHookExA
RegisterClassA
CreateWindowExA
UpdateWindow
GetMessageA
GetMessageW
TranslateMessage
DispatchMessageW
DispatchMessageA
PeekMessageA
CallNextHookEx
SetWindowLongA
GetWindowLongA
DefWindowProcA
RegisterWindowMessageA
CreatePopupMenu
GetCursorPos
CharLowerBuffA
GetClassInfoA
AppendMenuA
GetKeyState
GetParent
IsWindowVisible
MessageBoxA
PostMessageA
SetActiveWindow
IsIconic
GetClientRect
SetRect
FillRect
InvalidateRect
LoadAcceleratorsA
GetKeyboardState
DestroyAcceleratorTable
CreateAcceleratorTableA
MapVirtualKeyA
CopyAcceleratorTableA
KillTimer
SetTimer
IsZoomed
GetDC
ReleaseDC
ChildWindowFromPointEx
LoadStringA
ShowWindow
MoveWindow
GetMenuDefaultItem
TrackPopupMenu
IntersectRect
SendMessageTimeoutA
GetMenuState
MessageBeep
SetWindowPos
BringWindowToTop
GetSystemMenu
TranslateAcceleratorA
TranslateMDISysAccel
IsChild
SetParent
EnableWindow
SendMessageA
DeferWindowPos
RegisterClipboardFormatA
GetDCEx
DestroyWindow
DrawIconEx
MenuItemFromPoint
InsertMenuItemA
SetMenuItemInfoA
GetTopWindow
DestroyMenu
DrawEdge
GetMenuItemInfoA
GetCapture
DrawFocusRect
FrameRect
DrawStateA
DrawFrameControl
RedrawWindow
EqualRect
CallWindowProcA
InflateRect
IsCharUpperW

gdi32

CreatePatternBrush
CreateFontA
CreateDIBitmap
Ellipse
RealizePalette
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetNearestColor
GetCurrentObject
RectVisible
FillRgn
CombineRgn
CreateRectRgnIndirect
PatBlt
Polygon
Rectangle
CreateBitmap
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GetTextColor
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
SetTextAlign
GetCurrentPositionEx
GetViewportExtEx
GetWindowExtEx
PtVisible
Escape
CreateDCA
StretchDIBits
GetMapMode
SetRectRgn
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
EnumFontFamiliesExA
GetBkColor
LPtoDP
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
CopyMetaFileA
DPtoLP
GetClipBox
SelectClipRgn
CreateRectRgn
MoveToEx
LineTo
TextOutA
SetBkColor
SetTextColor
ExtTextOutA
ExtTextOutW
GetTextExtentPoint32W
GetCharWidth32W
GetTextExtentPoint32A
GetTextExtentPointA
SelectObject
GetTextMetricsA
GetCharWidthA
CreatePen
CreateSolidBrush
DeleteObject
GetObjectA
GetDeviceCaps
CreateFontIndirectA
SetWindowOrgEx
GetStockObject

comdlg32

ReplaceTextA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
ChooseFontA
GetFileTitleA
ChooseColorA
PrintDlgA
FindTextA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyA
RegSetValueExA
RegSetValueA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA

shell32

SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
Shell_NotifyIconA
ShellExecuteExA
SHFileOperationA
SHChangeNotify
ExtractIconA
SHGetFileInfoA
SHGetDesktopFolder
DragAcceptFiles
DragFinish
DragQueryFileA
SHBrowseForFolderA

comctl32

ImageList_AddMasked
ImageList_Read
ImageList_Write
ImageList_Duplicate
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Draw
ImageList_Destroy
ImageList_LoadImageA
ImageList_Create
ImageList_Remove
ImageList_SetImageCount
CreatePropertySheetPageA
DestroyPropertySheetPage
PropertySheetA
ord17
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_BeginDrag
ImageList_EndDrag
ImageList_Add

oledlg

ord8

ole32

CoRevokeClassObject
CreateStreamOnHGlobal
OleDuplicateData
CoRegisterMessageFilter
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
ReleaseStgMedium
CoTaskMemFree
DoDragDrop
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleLockRunning
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID

olepro32

ord253

oleaut32

VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysStringLen

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3741015a8a9ebcefe197295e0110162e

Headers

File Characteristics

Imports

wsock32

imm32

mpr

ssce4332

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 216KB - Virtual size: 215KB

.data Size: 56KB - Virtual size: 207KB

.rsrc Size: 392KB - Virtual size: 389KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 216KB - Virtual size: 215KB

.data
Size: 56KB - Virtual size: 207KB

.rsrc
Size: 392KB - Virtual size: 389KB