2024-07-08_e70efa48896d5710bf7ff4679938c274_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-07-08_e70efa48896d5710bf7ff4679938c274_icedid
Size

1.5MB
MD5

e70efa48896d5710bf7ff4679938c274
SHA1

f490ae10b1dbff1105edf3608c09d0c4678e78fc
SHA256

f152bf42c6449d4c41411e8cb499cf77a7c3056a8f7ef05c91aa871aad27c154
SHA512

2973b6a56389bfdfffdd6934f625a271e37929dd02d1624ea44a037e33b89ee7a76a1e036561e029dcb6d0ecf757ebf5270dfce612b465100b364e4417114328
SSDEEP

24576:Hv9P6LFCJLGmjS9q2Y4afYoidSJQlARh9Ml68Ybhvhy:Hv9yMI99YlHsIQ76Rhv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-08_e70efa48896d5710bf7ff4679938c274_icedid

Files

2024-07-08_e70efa48896d5710bf7ff4679938c274_icedid
.exe windows:5 windows x86 arch:x86

0bf781e3c284fa4de0e721b6bfd3b714

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

audiocdgrabber

GetAspiLibAspiError
GetAspiLibError
GetCDList
GetCDHandle
ModifyCDParms
ReadTOC
CloseCDHandle
ReadCDAudioLBA

kernel32

FileTimeToLocalFileTime
GetFileAttributesW
GetFileSizeEx
GetFileTime
GlobalFlags
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
SetErrorMode
FindResourceExW
GetSystemDirectoryW
GetStartupInfoW
RtlUnwind
GetSystemTimeAsFileTime
RaiseException
HeapAlloc
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
HeapReAlloc
WriteConsoleW
GetFileType
GetStdHandle
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
GetProcessHeap
ExitThread
VirtualAlloc
VirtualQuery
SetStdHandle
HeapSize
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
GetCPInfo
GetOEMCP
FileTimeToSystemTime
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetFileAttributesA
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetLastError
CreateSemaphoreW
SizeofResource
LockResource
LoadResource
FindResourceW
CreateDirectoryW
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryW
CreateFileW
WaitForMultipleObjects
GlobalAlloc
ResumeThread
InitializeCriticalSection
GetModuleHandleW
SetLastError
Sleep
WaitForSingleObject
WritePrivateProfileStringW
GetPrivateProfileIntW
TerminateProcess
GetCurrentProcess
GlobalFree
GetPrivateProfileStringW
GetDriveTypeW
GetTickCount
GetModuleFileNameW
GetSystemDefaultLCID
GetVersion
lstrcpyW
lstrlenW
IsValidCodePage
VirtualProtect
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
WideCharToMultiByte
WinExec
lstrcatW
GetWindowsDirectoryW
FlushFileBuffers
SetFilePointer
LocalFree
FormatMessageW
WriteFile
GetThreadLocale
GetModuleHandleA
InterlockedDecrement
lstrlenA
GlobalFindAtomW
CompareStringW
LoadLibraryA
FreeResource
GetCurrentProcessId
GlobalAddAtomW
CreateEventW
SuspendThread
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
LoadLibraryExW
CompareStringA
InterlockedExchange
lstrcmpW
SetEvent
CreateThread
SetThreadPriority
GetVersionExA
GetEnvironmentVariableA
ResetEvent
CreateEventA
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
MulDiv
LocalAlloc
LocalLock
LocalUnlock
GlobalLock
GlobalUnlock
GetVersionExW
GetACP
GetLocaleInfoW
GetSystemInfo
SetPriorityClass
TerminateThread
GetFileSize
ReadFile

user32

CharUpperW
WindowFromPoint
CharNextW
CopyAcceleratorTableW
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
UnregisterClassW
RegisterClipboardFormatW
PostThreadMessageW
GetMessageTime
TrackPopupMenu
SetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
DefWindowProcW
IntersectRect
SystemParametersInfoA
SetWindowContextHelpId
MapDialogRect
SetActiveWindow
GetNextDlgTabItem
EndDialog
SetRectEmpty
GetWindowThreadProcessId
IsWindowEnabled
SetWindowsHookExW
CallNextHookEx
GetMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
CheckMenuItem
GetActiveWindow
MessageBoxW
SystemParametersInfoW
CreateDialogIndirectParamW
PeekMessageW
IsDialogMessageW
DestroyMenu
DispatchMessageW
WaitMessage
PostQuitMessage
DestroyWindow
CheckDlgButton
SetFocus
SetWindowTextW
WinHelpW
GetDialogBaseUnits
GetAsyncKeyState
GetWindowTextW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
LoadStringW
BeginPaint
EndPaint
GetWindowPlacement
SetWindowPlacement
ReleaseCapture
SetClassLongW
GetFocus
SetCapture
GetCapture
LoadImageW
MoveWindow
SetRect
UnionRect
GetKeyState
DestroyIcon
IsZoomed
EqualRect
CopyRect
IsMenu
AdjustWindowRectEx
GetDlgItem
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetClassNameW
GetClassLongW
GetWindowRgn
GetWindowLongW
GetScrollInfo
MapWindowPoints
IsWindowVisible
SetWindowRgn
OffsetRect
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetIconInfo
FillRect
LoadCursorW
CopyIcon
GetSysColor
GetParent
ReleaseDC
GetDC
GetWindowRect
InflateRect
PtInRect
SetCursor
SetWindowLongW
CallWindowProcW
MessageBeep
GetSysColorBrush
RegisterWindowMessageW
GetWindowDC
ClientToScreen
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
GetWindowTextLengthW
GetForegroundWindow
GetTopWindow
TranslateMessage
UnhookWindowsHookEx
GetDlgCtrlID
SetWindowPos
TranslateAcceleratorW
GetMessagePos
RemovePropW
SetPropW
GetMenu
GetSystemMetrics
LoadAcceleratorsW
LoadIconW
EnableWindow
KillTimer
SetTimer
InvalidateRect
UpdateWindow
ScreenToClient
GetClientRect
GetSystemMenu
PostMessageW
SendMessageW
CheckMenuRadioItem
LoadMenuW
GetSubMenu
GetMenuItemID
GetMenuItemCount
SetMenuDefaultItem
EnableMenuItem
AppendMenuW
DeleteMenu
DrawIcon
GetDesktopWindow
GetWindow
IsWindow
GetPropW
IsIconic
ShowWindow
SetForegroundWindow
GetLastActivePopup
RedrawWindow

gdi32

PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CreateBitmap
CreatePolygonRgn
CreateRectRgn
CreateRectRgnIndirect
SetRectRgn
CombineRgn
OffsetRgn
FillRgn
CreateSolidBrush
CreateFontW
PatBlt
SelectObject
SetTextColor
SetBkColor
DeleteDC
CreateDCW
GetCharWidthW
StretchDIBits
GetTextMetricsW
GetClipBox
SaveDC
RestoreDC
SetBkMode
DPtoLP
SetMapMode
ExcludeClipRect
IntersectClipRect
BitBlt
SelectClipRgn
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
GetTextColor
GetRgnBox
EnumFontFamiliesExW
LPtoDP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
GetPixel
GetTextExtentPoint32W
GetObjectW
CreateFontIndirectW
GetStockObject
GetDeviceCaps
CreateICW

msimg32

GradientFill

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegQueryValueW
RegOpenKeyExW
GetUserNameW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyW
RegDeleteValueW
RegOpenKeyW
RegCloseKey

shell32

SHGetFolderPathW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
ShellExecuteW

shlwapi

PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFileExistsW

oledlg

OleUIBusyW

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysAllocStringLen
VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysFreeString

ws2_32

htons
inet_addr
WSASetLastError
WSACleanup
WSAStartup
gethostbyname
gethostname
closesocket
WSAGetLastError
connect
recv
send
socket
select

winmm

waveInMessage
waveOutMessage
waveInGetNumDevs
waveOutGetNumDevs
waveInPrepareHeader
waveOutPrepareHeader
waveOutReset
waveInReset
waveOutPause
waveInStart
waveOutRestart
waveOutGetPosition
waveOutWrite
waveInAddBuffer
waveInUnprepareHeader
waveOutUnprepareHeader
waveInClose
waveOutClose
waveOutGetDevCapsA
waveInGetDevCapsA
waveOutOpen
waveOutGetErrorTextA
waveInOpen
waveInGetErrorTextA
timeGetTime
mciGetErrorStringW
mciSendCommandW

Sections

.text
Size: 946KB - Virtual size: 946KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0bf781e3c284fa4de0e721b6bfd3b714

Headers

DLL Characteristics

File Characteristics

Imports

audiocdgrabber

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

ws2_32

winmm

Sections

.text Size: 946KB - Virtual size: 946KB

.rdata Size: 281KB - Virtual size: 281KB

.data Size: 25KB - Virtual size: 119KB

.rsrc Size: 234KB - Virtual size: 233KB

.text
Size: 946KB - Virtual size: 946KB

.rdata
Size: 281KB - Virtual size: 281KB

.data
Size: 25KB - Virtual size: 119KB

.rsrc
Size: 234KB - Virtual size: 233KB