2024-08-08_f0c77e547f22806c7537f9d42faff670_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-08-08_f0c77e547f22806c7537f9d42faff670_icedid
Size

652KB
MD5

f0c77e547f22806c7537f9d42faff670
SHA1

08baa04e709f92cadc4b04c75870d959c35c1e26
SHA256

0210088a492a6c8a6bea856e21d0d2f75edcf71c5830403e4bb0febd2680399f
SHA512

76cc2b15aab32b79bfcab0e5c59cd97a296f32152bf3e79d5c50badf7bcb77ea54c31e76823bb265ebff000ae8142886ed48eb1954af95af870fd6a9cedcc52e
SSDEEP

12288:oAFlfh0felUnfBcINQN3CzKY064OE5f9XNVQ5GS2+Oy/w9HvhlB0:JJhYxfQ4OY064F5f9XNVCGSnPw9HvhlB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-08_f0c77e547f22806c7537f9d42faff670_icedid

Files

2024-08-08_f0c77e547f22806c7537f9d42faff670_icedid
.exe windows:4 windows x86 arch:x86

29c0452f2ff48af015fa56ae73abd376

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\NewShareware\Mp3Cutter\rbin\MP3Cut.pdb

Imports

kernel32

GetCPInfo
GetOEMCP
SetErrorMode
GetFileAttributesA
GetFileTime
RtlUnwind
ExitThread
CreateThread
HeapReAlloc
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetCommandLineA
GetProcessHeap
GetStartupInfoA
SetStdHandle
GetFileType
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
InterlockedIncrement
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
ResumeThread
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
FileTimeToLocalFileTime
FileTimeToSystemTime
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpA
GlobalAlloc
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
MulDiv
GetCurrentProcess
GetDiskFreeSpaceA
CompareStringW
GetComputerNameA
GlobalMemoryStatus
GetModuleHandleW
CompareStringA
GetVersion
InterlockedExchange
GetTickCount
CreateEventA
Sleep
ResetEvent
WaitForSingleObject
SetEvent
MultiByteToWideChar
CreateDirectoryA
MoveFileA
GetLocalTime
GetSystemTime
FormatMessageA
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
GetCommandLineW
LocalFree
GetModuleFileNameA
GetTempFileNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
SetLastError
GetModuleHandleA
lstrlenA
RaiseException
OpenFile
CreateFileMappingA
MapViewOfFile
GetFileSizeEx
UnmapViewOfFile
CreateFileA
DeviceIoControl
GetLastError
CloseHandle
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
LoadLibraryA
FreeLibrary
LCMapStringA
GetProcAddress

user32

SetParent
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
DestroyMenu
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
WindowFromPoint
SetRect
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
LockWindowUpdate
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
GetMenuItemID
MessageBoxA
GetClassInfoExA
GetClassInfoA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
CopyRect
GetDlgCtrlID
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
PtInRect
SetCursor
GetDCEx
UnregisterClassA
GetSysColorBrush
InflateRect
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
LoadMenuA
GetSubMenu
ShowOwnedPopups
ValidateRect
UnionRect
IsRectEmpty
IsZoomed
UnpackDDElParam
GetFocus
ReuseDDElParam
TranslateMessage
DispatchMessageA
GetMessageA
CharUpperA
FlashWindow
RegisterClassA
CreateWindowExA
ShowWindow
DefWindowProcA
UpdateWindow
wsprintfA
FrameRect
PostQuitMessage
DrawTextA
GetMenuStringA
GetDC
ReleaseDC
GetWindowLongA
LoadIconA
InvalidateRect
GetWindowRect
LoadBitmapA
GetMenuItemCount
GetMenuItemInfoA
LoadCursorA
PostMessageA
ReleaseCapture
GetCursorPos
SetCapture
KillTimer
SetTimer
GetClientRect
DrawFrameControl
FillRect
SendMessageA
EnableWindow

gdi32

SelectClipRgn
ExtSelectClipRgn
CreatePatternBrush
PatBlt
GetBkColor
GetTextMetricsA
CreateFontIndirectA
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetTextColor
GetRgnBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
CreateRectRgnIndirect
CreatePen
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
GetObjectA
GetClipBox
GetStockObject
CreateSolidBrush
MoveToEx
LineTo
SetBkColor
SetTextColor
CreateFontA
GetTextExtentPoint32A
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
GetUserNameA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA
CommandLineToArgvW
DragFinish
DragQueryFileA
DragAcceptFiles

comctl32

ord17

shlwapi

PathStripPathA
StrToIntExA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathRemoveFileSpecA
PathFindFileNameA

oledlg

ord8

ole32

CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
OleUninitialize
CoInitialize
CoTaskMemFree
CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit

ws2_32

htons
WSAStartup
WSACleanup
socket
connect
send
recv
closesocket
select
WSASetLastError
gethostbyname
inet_addr
gethostname

winmm

waveOutClose
waveOutUnprepareHeader
waveOutWrite
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutPause
waveOutOpen
mmioClose
mmioDescend
mmioStringToFOURCCA
mmioCreateChunk
mmioOpenA
mmioAscend
mmioWrite
mmioSeek
mmioRead
mciSendCommandA

cddll

xxxxx
xxxxx2
xxxxx1

id3lib

?ID3_GetAlbum@@YAPADPBVID3_Tag@@@Z
?ID3_GetArtist@@YAPADPBVID3_Tag@@@Z
?ID3_GetGenreNum@@YAIPBVID3_Tag@@@Z
?ID3_GetGenre@@YAPADPBVID3_Tag@@@Z
?ID3_GetTitle@@YAPADPBVID3_Tag@@@Z
?ID3_GetTrack@@YAPADPBVID3_Tag@@@Z
?ID3_GetYear@@YAPADPBVID3_Tag@@@Z
?ID3_AddAlbum@@YAPAVID3_Frame@@PAVID3_Tag@@PBD_N@Z
?ID3_AddArtist@@YAPAVID3_Frame@@PAVID3_Tag@@PBD_N@Z
?ID3_AddGenre@@YAPAVID3_Frame@@PAVID3_Tag@@PBD_N@Z
?ID3_AddTitle@@YAPAVID3_Frame@@PAVID3_Tag@@PBD_N@Z
?ID3_AddTrack@@YAPAVID3_Frame@@PAVID3_Tag@@EE_N@Z
?ID3_RemoveTracks@@YAIPAVID3_Tag@@@Z
?ID3_AddYear@@YAPAVID3_Frame@@PAVID3_Tag@@PBD_N@Z
?Link@ID3_Tag@@QAEIPBDG@Z
?Update@ID3_Tag@@QAEGG@Z
??0ID3_Tag@@QAE@PBD@Z
??1ID3_Tag@@UAE@XZ

lame_enc

ord6
ord4
ord3
ord1
ord2

vorbisfile

ov_info
ov_read
ov_clear
ov_comment
ov_open_callbacks
ov_pcm_total

vorbisenc

vorbis_encode_init

vorbis

vorbis_analysis_wrote
vorbis_analysis_buffer
vorbis_analysis_headerout
vorbis_block_init
vorbis_analysis_init
vorbis_comment_add_tag
vorbis_analysis_blockout
vorbis_info_init
vorbis_bitrate_flushpacket
vorbis_block_clear
vorbis_dsp_clear
vorbis_comment_clear
vorbis_analysis
vorbis_comment_init
vorbis_bitrate_addblock

ogg

ogg_stream_init
ogg_stream_flush
ogg_stream_packetin
ogg_stream_pageout
ogg_stream_clear
ogg_page_eos

wmvcore

WMCreateEditor
WMCreateProfileManager
WMCreateWriterFileSink
WMCreateReaderPriv
WMCreateWriterPriv

Sections

.text
Size: 452KB - Virtual size: 451KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29c0452f2ff48af015fa56ae73abd376

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

winmm

cddll

id3lib

lame_enc

vorbisfile

vorbisenc

vorbis

ogg

wmvcore

Sections

.text Size: 452KB - Virtual size: 451KB

.rdata Size: 132KB - Virtual size: 129KB

.data Size: 28KB - Virtual size: 43KB

.rsrc Size: 36KB - Virtual size: 33KB

.text
Size: 452KB - Virtual size: 451KB

.rdata
Size: 132KB - Virtual size: 129KB

.data
Size: 28KB - Virtual size: 43KB

.rsrc
Size: 36KB - Virtual size: 33KB