2024-06-27_1b1b64de5cfc8e719faf6d98af7e6792_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-27_1b1b64de5cfc8e719faf6d98af7e6792_icedid
Size

12.3MB
MD5

1b1b64de5cfc8e719faf6d98af7e6792
SHA1

fb3ae10b0dcecd883fb5cf0e34b8cd88b7347d83
SHA256

7557aeb233bb9454c0878e7addc35a9aa396b362dbc0024834e03a9d80bdc2de
SHA512

97ebdd6e50f70f6dfb6eaecd2626c0f1b5f254b946a7edf1948d7f0f57d7cc6f7d0d9465a79343393821c53219cd450e703eba988d0850787067416643086517
SSDEEP

196608:OE6S4nzdRgfWBp23VdmRimjXorxuniOGnS2cBbnuffZKywn0prHqiZ5G7KVQwRZs:2dRg+xRimLoVnS2cBbuUUK5GVQAZkdf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-27_1b1b64de5cfc8e719faf6d98af7e6792_icedid

Files

2024-06-27_1b1b64de5cfc8e719faf6d98af7e6792_icedid
.exe windows:4 windows x86 arch:x86

7f74731f3e3ddf3abcd8c57477f4d117

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\VikaClient Project\Bin\Reader\Reader.pdb

Imports

kernel32

ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
TerminateProcess
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
HeapDestroy
HeapCreate
IsBadWritePtr
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetTimeZoneInformation
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
LoadLibraryA
LocalFree
FormatMessageA
GetModuleFileNameA
CloseHandle
OpenMutexA
Sleep
DeleteFileA
FindClose
FindFirstFileA
GetTempPathA
GetPrivateProfileStringA
GetLastError
GetVersion
lstrcmpiA
lstrlenW
lstrlenA
CompareStringA
CompareStringW
CopyFileA
CreateDirectoryA
GetFileAttributesA
LocalAlloc
InterlockedDecrement
GetCurrentProcessId
GetCurrentDirectoryA
WritePrivateProfileStringA
SetErrorMode
GetFileTime
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetProfileIntA
SetLastError
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
GlobalFree
GlobalReAlloc
VirtualProtect
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
lstrcpyW
lstrcpyA
GetTickCount
OutputDebugStringA
GetCurrentThreadId
IsDBCSLeadByte
lstrcpynA
LoadLibraryExA
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
VirtualAlloc
VirtualFree
MulDiv
GetCurrentProcess
FlushInstructionCache
CreateFileA
GetModuleHandleA
GetProcAddress
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
GetProcessHeap
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalAlloc
GlobalLock
GlobalUnlock

user32

SetWindowContextHelpId
MapDialogRect
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetActiveWindow
CreatePopupMenu
SetRectEmpty
SetMenu
DrawIcon
GetDesktopWindow
CopyAcceleratorTableA
IsRectEmpty
InflateRect
GetWindowDC
GrayStringA
DrawTextExA
TabbedTextOutA
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
IsWindowEnabled
ShowWindow
IsDialogMessageA
WinHelpA
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
MessageBoxA
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
RegisterClipboardFormatA
EqualRect
GetScrollInfo
SetScrollInfo
RegisterClassA
GetDlgCtrlID
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetRect
GetWindowTextLengthA
GetWindowTextA
OffsetRect
ClientToScreen
UnionRect
IntersectRect
CopyRect
DrawTextA
GetMenu
SetCursor
TrackMouseEvent
GetCursorPos
GetCapture
ScreenToClient
SetWindowRgn
GetSubMenu
GetMenuItemID
GetClientRect
IsWindowVisible
EnableWindow
LoadCursorA
DefWindowProcA
GetClassInfoA
GetSysColor
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SendMessageA
GetWindowRect
AdjustWindowRectEx
IsWindow
GetMenuItemCount
PtInRect
LockWindowUpdate
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
LoadMenuIndirectA
SetWindowPos
GetDlgItem
GetFocus
IsChild
GetWindow
BeginPaint
EndPaint
GetUpdateRect
GetClassInfoExA
wsprintfA
RegisterClassExA
GetMenuItemInfoA
WindowFromPoint
GetSysColorBrush
PostThreadMessageA
CharNextA
DestroyAcceleratorTable
CreateAcceleratorTableA
InvalidateRgn
InvalidateRect
FillRect
SetCapture
ReleaseCapture
CallWindowProcA
GetWindowLongA
GetParent
GetDC
GetNextDlgGroupItem
MessageBeep
ShowScrollBar
TranslateAcceleratorA
PostMessageA
IsZoomed
UpdateWindow
GetSystemMetrics
LoadIconA
LoadAcceleratorsA
SetTimer
KillTimer
MoveWindow
SetFocus
CreateWindowExA
DestroyWindow
FindWindowA
CharUpperA
BringWindowToTop
SetActiveWindow
SetForegroundWindow
SetWindowTextA
UnregisterClassA
RegisterWindowMessageA
SetWindowLongA
RedrawWindow
ReleaseDC
InsertMenuItemA

gdi32

ExtCreateRegion
GetObjectA
OffsetRgn
GetRgnBox
CreateFontIndirectA
CreateDIBitmap
GetDIBits
SetDIBitsToDevice
SetStretchBltMode
CreateRectRgnIndirect
GetClipBox
StretchBlt
CreateBitmap
StretchDIBits
GetStockObject
SetWinMetaFileBits
DeleteEnhMetaFile
GetEnhMetaFileHeader
SetEnhMetaFileBits
PlayEnhMetaFile
RealizePalette
SelectPalette
CreatePalette
GetEnhMetaFilePaletteEntries
SaveDC
RestoreDC
SetMapMode
GetViewportExtEx
CombineRgn
GetPixel
PtVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetMapMode
CreateEllipticRgn
LPtoDP
GetBkColor
GetTextColor
CreateCompatibleBitmap
CreateRectRgn
ExtSelectClipRgn
RectVisible
GetTextMetricsA
GetTextExtentPoint32A
SetTextColor
SetBkMode
Ellipse
CreatePatternBrush
SetBkColor
ExtTextOutA
Rectangle
LineTo
MoveToEx
GetNearestColor
CreatePen
CreateSolidBrush
CreateDCA
CreateDIBSection
BitBlt
DeleteDC
SelectObject
DeleteObject
GetWindowExtEx
GetDeviceCaps
CreateCompatibleDC

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
RegEnumKeyA

shell32

DragQueryFileA
ShellExecuteA
DragFinish
SHGetFolderPathA

comctl32

ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy

shlwapi

PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathFileExistsA

oledlg

ord8

ole32

OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
OleLockRunning
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoInitialize
CoGetMalloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoDisconnectObject
CLSIDFromString
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CLSIDFromProgID
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject

oleaut32

SysFreeString
SysAllocStringByteLen
VariantInit
VariantClear
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
VariantChangeType
SysStringLen
VarUI4FromStr
SafeArrayDestroy
OleCreateFontIndirect
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
LoadTypeLi
SysAllocStringLen

urlmon

RegisterBindStatusCallback
CreateURLMoniker

ws2_32

WSAStartup
WSACleanup

wininet

InternetGetConnectedState

winmm

waveOutWrite

Sections

.text
Size: 800KB - Virtual size: 797KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f74731f3e3ddf3abcd8c57477f4d117

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

ws2_32

wininet

winmm

Sections

.text Size: 800KB - Virtual size: 797KB

.rdata Size: 156KB - Virtual size: 154KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 264KB - Virtual size: 260KB

.text
Size: 800KB - Virtual size: 797KB

.rdata
Size: 156KB - Virtual size: 154KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 264KB - Virtual size: 260KB