2024-08-10_0df75dfe3fb8abeb486ee033923f8a6b_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-10_0df75dfe3fb8abeb486ee033923f8a6b_icedid
Size

1.1MB
MD5

0df75dfe3fb8abeb486ee033923f8a6b
SHA1

5b678f3267b22a599131eaa7985582bbe5be576a
SHA256

0b6845eb6aadb73bd63ebd778e9f5e7ed3db3d5b44f4e3175f8c632d0e91bb66
SHA512

3e635fa29c5cb52d1ba158993b1a63a631c20b7fa1b2251c8d7ca12f925be0266b4be773cc011a9c57f423d13814918292e31a9d799d68efae9e6c2b178e8c67
SSDEEP

24576:sscwmcfyGOVdNFiRAMqGci/foweIKzDyBFSp:2SLOVdNF2AMqGNoweI+6FSp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-10_0df75dfe3fb8abeb486ee033923f8a6b_icedid

Files

2024-08-10_0df75dfe3fb8abeb486ee033923f8a6b_icedid
.exe windows:4 windows x86 arch:x86

8d90558117bf1471986772a8f2455969

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\pax-svn\Software\PCtools\PCLoader\PCLoader2.0\bin\pcloader\PCLoader.pdb

Imports

crashrpt1402

ord27
ord16
ord9
ord8
ord11
ord12
ord24

kernel32

GetShortPathNameA
SetErrorMode
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileAttributesA
GetFileTime
GetTickCount
RtlUnwind
HeapAlloc
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
SetStdHandle
GetFileType
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetFullPathNameA
GetProcessHeap
ExitProcess
ExitThread
CreateThread
HeapSize
GetACP
FatalAppExitA
VirtualFree
HeapDestroy
HeapCreate
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetConsoleCtrlHandler
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
SetEnvironmentVariableA
InterlockedCompareExchange
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
DeleteFileA
MoveFileA
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
GetAtomNameA
GlobalFlags
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
GlobalSize
GlobalAlloc
MulDiv
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetLastError
lstrcmpW
GetModuleHandleA
GetProcAddress
GetVersionExA
GlobalLock
GlobalUnlock
GlobalFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ResetEvent
SetEvent
CreateEventA
lstrcpynA
FreeResource
GetCurrentThreadId
CreateFileA
GetStdHandle
Sleep
CreatePipe
SetHandleInformation
GetStartupInfoA
CreateProcessA
FormatMessageA
LocalFree
CloseHandle
ReadFile
WaitForSingleObject
GetExitCodeProcess
GetLastError
lstrlenA
lstrcmpiA
lstrcmpiW
GetStringTypeExA
GetStringTypeExW
lstrlenW
CompareStringA
CompareStringW
GetEnvironmentVariableA
MultiByteToWideChar
GetEnvironmentVariableW
GetVersion
InterlockedExchange
GetCommandLineA
FreeLibrary
GetCurrentDirectoryA
LoadLibraryA
GetModuleFileNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
SetCurrentDirectoryA
WritePrivateProfileSectionA
WritePrivateProfileStringA
CopyFileA
LoadResource
LockResource
SizeofResource
FindResourceA
WideCharToMultiByte
CreateFileW
GetTimeZoneInformation

user32

TranslateAcceleratorA
SetMenu
BringWindowToTop
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
ReuseDDElParam
UnpackDDElParam
GetDCEx
LockWindowUpdate
UnregisterClassA
DeleteMenu
WaitMessage
DestroyIcon
CharNextA
CopyAcceleratorTableA
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
SetParent
UnionRect
RegisterClipboardFormatA
PostThreadMessageA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenu
GetMenuItemID
MessageBoxA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetCursorPos
GetKeyNameTextA
LoadCursorA
GetFocus
GetSubMenu
GetDesktopWindow
IntersectRect
SetWindowsHookExA
TrackPopupMenuEx
UnhookWindowsHookEx
CallNextHookEx
GetMenuItemCount
GetMenuStringA
GrayStringA
DrawTextExA
TabbedTextOutA
SetCursor
GetWindowLongA
FrameRect
InflateRect
FillRect
GetSysColor
OffsetRect
DrawStateA
DrawFocusRect
GetActiveWindow
GetCapture
SetCapture
PtInRect
ReleaseCapture
LoadImageA
RedrawWindow
DestroyCursor
GetCaretPos
GetKeyState
TranslateMessage
DispatchMessageA
UpdateWindow
GetParent
ClientToScreen
ScreenToClient
MoveWindow
PostQuitMessage
IsWindowVisible
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
SetWindowTextA
SetTimer
SendMessageA
EnableWindow
DrawTextA
CopyRect
PostMessageA
EndPaint
GetWindowRect
MessageBoxExA
MapWindowPoints
PeekMessageA
InvalidateRect
CharUpperA
CharUpperW
CharLowerA
CharLowerW
LoadStringA
LoadIconA
GetClientRect
LoadMenuA
SetWindowPos
GetSysColorBrush
GetDialogBaseUnits
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
GetMessageA
ValidateRect
GetWindowThreadProcessId
DestroyMenu
GetMenuItemInfoA
CreateWindowExA
MapVirtualKeyA
BeginPaint
GetWindowDC
ReleaseDC
GetDC
WindowFromPoint
SetRect
SetRectEmpty
IsZoomed
InsertMenuA
RemoveMenu
ScrollWindowEx
ShowWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
KillTimer
GetWindowTextA
GetLastActivePopup

gdi32

CreateBitmap
GetDeviceCaps
CopyMetaFileA
CreateDCA
GetTextMetricsA
GetBkColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetObjectA
GetPixel
StartDocA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
GetStockObject
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetCharWidthA
StretchDIBits
GetTextColor
GetRgnBox
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
Rectangle
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
GetTextExtentPoint32A
CreateFontA
CreateFontIndirectA
GetWindowExtEx
SelectObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCreateKeyA
RegCloseKey
RegOpenKeyExA
RegSetValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegEnumValueA
RegDeleteValueA

shell32

DragFinish
ExtractIconA
SHGetFileInfoA
DragQueryFileA

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsDirectoryA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoRegisterClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleRun
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
StringFromGUID2
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoUninitialize
CoInitializeEx
OleIsCurrentClipboard
OleSetClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
OleDuplicateData

oleaut32

SysFreeString
SysAllocStringByteLen
SysStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
LoadTypeLi
SysStringLen

conexe

SetStartInfo
StartConTask
StopConTask

Sections

.text
Size: 852KB - Virtual size: 848KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 176KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 463KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8d90558117bf1471986772a8f2455969

Headers

File Characteristics

PDB Paths

Imports

crashrpt1402

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

conexe

Sections

.text Size: 852KB - Virtual size: 848KB

.rdata Size: 176KB - Virtual size: 173KB

.data Size: 24KB - Virtual size: 463KB

.rsrc Size: 116KB - Virtual size: 116KB

.text
Size: 852KB - Virtual size: 848KB

.rdata
Size: 176KB - Virtual size: 173KB

.data
Size: 24KB - Virtual size: 463KB

.rsrc
Size: 116KB - Virtual size: 116KB