2024-07-07_dbf18a52866a45633b2bac9c1e91bdd6_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-07_dbf18a52866a45633b2bac9c1e91bdd6_icedid
Size

1.2MB
MD5

dbf18a52866a45633b2bac9c1e91bdd6
SHA1

1530aa63f1b1587de6fa538ccd1be4d54f2ed9dd
SHA256

9fac9da82163a24d32a6b8d7c7a0a705e55d59e6ac189ea5347e4d05016e3074
SHA512

7026644ee131260b2e2cbf15c89bda94c624e4d0ef8be9acb4642d4f34eca4651cc038ee1f6880551544e009d7927cb471a55333ae267df0eff84b0096a667b0
SSDEEP

12288:lMwgKi0HZqi+FYKhF8kCnukvIe7pjOaC36tK76U3eCmU6LZWU/z:dLKhF89Ie7g6tWeCmPLYi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-07_dbf18a52866a45633b2bac9c1e91bdd6_icedid

Files

2024-07-07_dbf18a52866a45633b2bac9c1e91bdd6_icedid
.exe windows:4 windows x86 arch:x86

d85b8b3c478f00eea32a2145f1c3a25b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Apps\scm\output\release\cardmgr.pdb

Imports

advapi32

RegOpenKeyExW
RegSetValueExW
RegDeleteValueW
RegCloseKey
CryptGetProvParam
CryptReleaseContext
CryptGetUserKey
CryptAcquireContextW
CryptDestroyKey
CryptGetKeyParam
RegEnumValueW
RegQueryValueExW
RegOpenKeyW
RegSetValueW
RegCreateKeyW
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
CryptAcquireContextA
CryptGenRandom
RegCreateKeyExW

winscard

SCardReleaseContext
SCardGetCardTypeProviderNameW
SCardEstablishContext

kernel32

GetShortPathNameW
CreateFileW
FindResourceExW
LocalFileTimeToFileTime
SetErrorMode
HeapAlloc
GetStartupInfoW
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
RtlUnwind
RaiseException
ExitProcess
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
GetVolumeInformationW
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetStringTypeExW
MoveFileW
SystemTimeToFileTime
GetThreadLocale
InterlockedIncrement
GlobalFlags
TlsFree
SizeofResource
LockResource
LoadResource
FindResourceW
GetFileAttributesW
lstrlenW
WideCharToMultiByte
GetLastError
CreateProcessW
GetModuleFileNameW
WaitForSingleObject
CloseHandle
CreateThread
GetTempPathW
GetTempFileNameW
LoadLibraryW
GetProcAddress
DeleteFileW
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenA
MultiByteToWideChar
LocalAlloc
FormatMessageW
LocalFree
GetVersionExW
CreateEventW
Sleep
GetACP
OpenEventW
SetEvent
GetComputerNameW
InterlockedDecrement
HeapFree
GetProcessHeap
GetSystemInfo
GetModuleHandleW
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetSystemDirectoryW
GetModuleHandleA
GetDiskFreeSpaceW
GetFullPathNameW
GetFileTime
SetFileTime
GlobalGetAtomNameW
VirtualProtect
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
ConvertDefaultLocale
lstrcmpA
LoadLibraryExW
CompareStringA
MulDiv
GlobalFree
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetVersionExA
GetCurrentProcess
LoadLibraryA
ReleaseMutex
CreateMutexA
GetCurrentProcessId
GetCurrentThreadId
FreeResource
GetCPInfo
lstrcmpiW
GetVersion
GetSystemDefaultLangID
GetUserDefaultLangID
InterlockedExchange
SetThreadLocale
GetLocaleInfoW
EnumResourceLanguagesW
SetLastError

user32

CharUpperW
UnregisterClassW
SetParent
FindWindowW
GetDCEx
LockWindowUpdate
InsertMenuItemW
SetRectEmpty
TranslateAcceleratorW
MapDialogRect
GetAsyncKeyState
DestroyMenu
GetWindowThreadProcessId
ShowOwnedPopups
GetMessageW
TranslateMessage
ValidateRect
PostQuitMessage
GetMenuStringW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
GetActiveWindow
CreateDialogIndirectParamW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
DrawFocusRect
ReleaseCapture
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
SetScrollPos
GetScrollPos
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
OffsetRect
GetClientRect
GetCursorPos
UnregisterClassA
SendMessageW
EnableWindow
SetMenu
EndPaint
BeginPaint
GetWindowDC
WindowFromPoint
IsZoomed
DestroyCursor
SetCursorPos
SetCapture
RedrawWindow
PtInRect
GetWindowRect
InflateRect
GrayStringW
UnionRect
IsRectEmpty
UnpackDDElParam
ReuseDDElParam
RemovePropW
LoadMenuW
UpdateWindow
GetMenu
GetFocus
LoadAcceleratorsW
IsWindowVisible
InvalidateRect
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetMessagePos
ScreenToClient
ClientToScreen
IsMenu
SetTimer
KillTimer
PostMessageW
SetMenuDefaultItem
EnableMenuItem
GetParent
BringWindowToTop
SetForegroundWindow
GetMenuItemCount
FillRect
DrawTextExW
ReleaseDC
DrawTextW
GetDC
TabbedTextOutW
GetDesktopWindow
GetSubMenu
DestroyIcon
DrawIconEx
DrawEdge
CreateMenu
CopyRect
GetSysColor
GetMenuItemID
LoadBitmapW
GetMenuState
SystemParametersInfoW
GetMenuItemInfoW
ModifyMenuW
SetRect
AppendMenuW
CreatePopupMenu
LoadImageW
GetSysColorBrush
GetSystemMetrics
LoadCursorW
SetCursor
GetDlgItem

gdi32

CreateSolidBrush
MoveToEx
LineTo
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
CreateRectRgnIndirect
GetTextMetricsW
GetBkColor
GetCharWidthW
CreateFontW
StretchDIBits
SaveDC
RestoreDC
SetBkMode
SelectObject
SetMapMode
ExcludeClipRect
IntersectClipRect
SelectClipRgn
CreatePen
CreateRectRgn
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
CreatePatternBrush
GetStockObject
SetRectRgn
CombineRgn
EnumFontFamiliesExW
Ellipse
ExtTextOutW
TextOutW
CreateCompatibleBitmap
RectVisible
PtVisible
PatBlt
SetPixel
GetBkMode
GetPixel
Escape
DeleteObject
BitBlt
CreateDIBSection
GetDIBits
GetTextExtentPoint32W
CreateFontIndirectW
GetObjectW
DeleteDC
GetDeviceCaps
CreateCompatibleDC

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

shell32

ExtractIconW
ShellExecuteW
DragFinish
SHGetFileInfoW
DragQueryFileW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

ole32

CoInitialize
CoUninitialize
CLSIDFromProgID
CoCreateInstance
OleRun

oleaut32

SysAllocString
SysFreeString
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
GetErrorInfo

crypt32

CertCloseStore
CertFreeCertificateContext
CertOpenSystemStoreW
CertSetCertificateContextProperty
CertCreateCertificateContext
CertAddCertificateContextToStore

cryptui

CryptUIDlgCertMgr

scarddlg

ord5

ws2_32

inet_ntoa
gethostbyname
gethostname
WSAStartup
WSACleanup

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Exports

Exports

b64dec
b64enc

Sections

.text
Size: 744KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d85b8b3c478f00eea32a2145f1c3a25b

Headers

File Characteristics

PDB Paths

Imports

advapi32

winscard

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

comctl32

shlwapi

ole32

oleaut32

crypt32

cryptui

scarddlg

ws2_32

version

Exports

Exports

Sections

.text Size: 744KB - Virtual size: 740KB

.rdata Size: 208KB - Virtual size: 205KB

.data Size: 24KB - Virtual size: 39KB

.rsrc Size: 248KB - Virtual size: 247KB

.text
Size: 744KB - Virtual size: 740KB

.rdata
Size: 208KB - Virtual size: 205KB

.data
Size: 24KB - Virtual size: 39KB

.rsrc
Size: 248KB - Virtual size: 247KB