2024-07-03_dc13898a75e48eb19d2bb13c05cbdc63_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-07-03_dc13898a75e48eb19d2bb13c05cbdc63_icedid
Size

1.7MB
MD5

dc13898a75e48eb19d2bb13c05cbdc63
SHA1

e1d63b425387550cccc7126d9d531f4b8260275b
SHA256

9ed4366cd65d653f47c6786fb2df4102e2378d316d65a62940ace2a80860b177
SHA512

0614b83190a3934c788c069cd8f1ecaa37aced20b304578ae74352e1231e6212e1153af44a5477fb06f957c4fc5a5c27358496a0f98ca3186574887beb433a09
SSDEEP

49152:9kuXM5QWwJS1NPHdWXZ5tGFPid7ur9TuVn+uoTH:k5twJS1NHy5tGFPRr9gn+uoTH

Score

1^/10

Malware Config

Signatures

Files

2024-07-03_dc13898a75e48eb19d2bb13c05cbdc63_icedid
.exe windows:5 windows x86 arch:x86

da17e352ed460175b133b61f1de2da91

Code Sign

57:1c:5f:05:7e:b9:03:c6:51:87:11:e1:56:c4:e7:5f
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

03-04-2020 00:00

Not After

03-05-2023 23:59

Subject

CN=MAGIX Software GmbH,O=MAGIX Software GmbH,L=Berlin,ST=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

31:d9:3a:21:ae:92:0b:c1:4a:16:24:a4:f5:9f:18:a1:62:9b:a2:8e:b8:80:f4:e9:7b:af:14:51:48:88:61:0a
Signer

Actual PE Digest

31:d9:3a:21:ae:92:0b:c1:4a:16:24:a4:f5:9f:18:a1:62:9b:a2:8e:b8:80:f4:e9:7b:af:14:51:48:88:61:0a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA
mmioWrite
mmioClose
mmioOpenA
mmioSeek

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

ExitThread
HeapQueryInformation
SetStdHandle
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
IsValidCodePage
GetStdHandle
GetStringTypeW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
LCMapStringW
OutputDebugStringW
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
DecodePointer
FreeLibrary
GetProcAddress
AreFileApisANSI
VirtualQuery
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LoadLibraryA
LockResource
LoadResource
SizeofResource
FindResourceW
WideCharToMultiByte
GetFileTime
SetFileTime
CloseHandle
GetDiskFreeSpaceA
CreateFileA
GetVolumeInformationA
OpenProcess
GetExitCodeProcess
CreateThread
SetEvent
WaitForSingleObject
Sleep
CreateEventA
GetModuleFileNameA
GlobalGetAtomNameA
DeleteFileA
CopyFileA
GetVersionExA
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
VirtualAlloc
GetSystemInfo
HeapAlloc
GetCommandLineA
GetModuleHandleExW
ExitProcess
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetTickCount
GetTempFileNameA
VerifyVersionInfoA
VerSetConditionMask
lstrcpyA
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
GetWindowsDirectoryA
GetCPInfo
GetOEMCP
lstrcmpiA
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
FormatMessageA
LocalFree
GetTempPathA
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryA
GetACP
GlobalFlags
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalFindAtomA
lstrcmpW
GetSystemDirectoryW
EncodePointer
GetCurrentProcessId
GlobalAddAtomA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CompareStringA
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
GetCurrentThread
ResumeThread
SetThreadPriority
GetCurrentThreadId
FindResourceA
LoadLibraryW
GetModuleHandleW
GetModuleFileNameW
FreeResource
OutputDebugStringA
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetModuleHandleA

user32

SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
FrameRect
CharUpperBuffA
RegisterClipboardFormatA
ModifyMenuA
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
SetClassLongA
SetCursorPos
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
LockWindowUpdate
SetRect
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
PostThreadMessageA
IsZoomed
GetComboBoxInfo
LoadMenuW
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
SetWindowRgn
DrawFrameControl
DrawEdge
LoadImageW
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
SetParent
UnionRect
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
MessageBeep
GetIconInfo
DrawIconEx
IsRectEmpty
DrawFocusRect
GetNextDlgGroupItem
ReuseDDElParam
UnpackDDElParam
LoadImageA
OffsetRect
SetRectEmpty
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
GetMenuDefaultItem
CreatePopupMenu
IntersectRect
LoadCursorW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
CharUpperA
DestroyIcon
InvalidateRect
KillTimer
SetTimer
DeleteMenu
CopyImage
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
MapVirtualKeyA
GetKeyNameTextA
SetWindowTextA
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
GetTopWindow
GetClassNameA
GetClassLongA
PtInRect
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
SendDlgItemMessageA
GetWindow
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
SetFocus
SystemParametersInfoA
InflateRect
CopyRect
GetMenuItemInfoA
DestroyMenu
FillRect
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
UnhookWindowsHookEx
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxA
SetCursor
ShowOwnedPopups
PostQuitMessage
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
IsWindowVisible
GetMessageA
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
IsWindow
LoadBitmapW
GetParent
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
RemoveMenu
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
LoadStringA
LoadIconW
GetClientRect
DrawIcon
AppendMenuA
GetSystemMenu
GetSystemMetrics
EnableWindow
IsIconic
PostMessageA
SendMessageTimeoutA
SendMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
RegisterWindowMessageA
SetWindowLongA
GetWindowLongA
UnregisterClassA
IsDialogMessageA

gdi32

SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
GetObjectA
MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
GetTextExtentPoint32A
CreateRectRgnIndirect
PatBlt
GetTextMetricsA
CombineRgn
SetRectRgn
DPtoLP
CreateCompatibleBitmap
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
SelectClipRgn
SetMapMode
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExA
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceA
SaveDC
RestoreDC
RectVisible
PtVisible
SetBkMode
SetBkColor
SelectPalette
SelectObject
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
CreateBitmap
GetDeviceCaps
CreateDCA
CopyMetaFileA
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
ExtSelectClipRgn

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey

shell32

SHAppBarMessage
SHBrowseForFolderA
DragFinish
ShellExecuteA
ShellExecuteExA
SHGetSpecialFolderPathA
SHGetFileInfoA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA

uxtheme

OpenThemeData
GetWindowTheme
GetThemeSysColor
IsAppThemed
GetThemePartSize
GetCurrentThemeName
DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
GetThemeColor
DrawThemeParentBackground
CloseThemeData

ole32

CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
CoCreateInstance
CoCreateGuid
OleDuplicateData
CoTaskMemFree
CoUninitialize
CoInitialize
DoDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
CoTaskMemAlloc
RevokeDragDrop
ReleaseStgMedium
RegisterDragDrop

oleaut32

SysAllocString
VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
VariantChangeType
VariantClear
SysAllocStringLen
SysAllocStringByteLen
VariantInit
SysFreeString

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

shlwapi

PathIsUNCServerA
PathIsUNCServerShareA
PathIsURLA
PathCanonicalizeA
PathIsUNCA
PathSkipRootA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

da17e352ed460175b133b61f1de2da91

Code Sign

57:1c:5f:05:7e:b9:03:c6:51:87:11:e1:56:c4:e7:5fCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

31:d9:3a:21:ae:92:0b:c1:4a:16:24:a4:f5:9f:18:a1:62:9b:a2:8e:b8:80:f4:e9:7b:af:14:51:48:88:61:0aSigner

Headers

DLL Characteristics

File Characteristics

Imports

winmm

version

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

uxtheme

ole32

oleaut32

oleacc

gdiplus

imm32

shlwapi

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 312KB - Virtual size: 311KB

.data Size: 25KB - Virtual size: 54KB

.rsrc Size: 21KB - Virtual size: 21KB

57:1c:5f:05:7e:b9:03:c6:51:87:11:e1:56:c4:e7:5f
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

31:d9:3a:21:ae:92:0b:c1:4a:16:24:a4:f5:9f:18:a1:62:9b:a2:8e:b8:80:f4:e9:7b:af:14:51:48:88:61:0a
Signer

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 312KB - Virtual size: 311KB

.data
Size: 25KB - Virtual size: 54KB

.rsrc
Size: 21KB - Virtual size: 21KB