2024-08-24_99ce6f56036ff319658807e2e2af8142_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-24_99ce6f56036ff319658807e2e2af8142_icedid
Size

506KB
MD5

99ce6f56036ff319658807e2e2af8142
SHA1

53ff58aca55ddfa64a1e2883be710af6d5169efe
SHA256

6ef79a721971ed34edceba77e01fba6a1cdd836bac5a9126579e9c070319f2b4
SHA512

36b7b70634c2c7151b57c897dec9244f71e72c316783663577ed0500ca1f246bbcd7f779b50286324c42c4b391b197b139c777673d880ad7ab7705141d97f25c
SSDEEP

12288:PHcNYchf4Kh+YrW8OD178nbs0blM+m0YKbeSQ:kmo+YW8nbs0m1yDQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-08-24_99ce6f56036ff319658807e2e2af8142_icedid

Files

2024-08-24_99ce6f56036ff319658807e2e2af8142_icedid
.exe windows:5 windows x86 arch:x86

d8e0f41426ee8640eac5b12c8d63ffd1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\SVN\biggod.dev\Release\AutoMacro\ScheduledTasks.pdb

Imports

kernel32

GetFileAttributesW
GetFileSizeEx
GetStartupInfoW
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
RtlUnwind
HeapReAlloc
RaiseException
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetStdHandle
LCMapStringW
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CreateFileA
SetEnvironmentVariableA
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetThreadLocale
GlobalFlags
lstrlenA
InterlockedDecrement
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
FormatMessageW
LocalFree
MulDiv
FreeResource
GetVersion
WideCharToMultiByte
FreeLibrary
GetWindowsDirectoryW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
WritePrivateProfileStringW
DeleteFileW
TerminateThread
CreateThread
GetExitCodeProcess
WaitForSingleObject
GetTickCount
GetProcAddress
GetModuleHandleW
LoadLibraryW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetPrivateProfileStringW
GetVersionExW
GetLastError
CreateMutexW
SetLastError
GetModuleFileNameW
CloseHandle
GetFileTime
GetFileSize
CreateFileW
Sleep
lstrlenW
CreateDirectoryW
MultiByteToWideChar
GetModuleFileNameA
FindResourceW
LoadResource
LockResource
TerminateProcess
SizeofResource

user32

CharNextW
CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
CharUpperW
RegisterClipboardFormatW
PostThreadMessageW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
UnregisterClassW
SetMenu
UpdateWindow
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetMenuStringW
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
GetNextDlgTabItem
EndDialog
SetActiveWindow
DrawAnimatedRects
SetParent
SystemParametersInfoW
EnumChildWindows
GetClassNameW
TrackPopupMenu
GetCursorPos
RegisterWindowMessageW
DrawStateW
FillRect
CopyRect
ModifyMenuW
InsertMenuW
GetMenuState
CreateMenu
CreatePopupMenu
LoadMenuW
CopyIcon
LoadCursorW
InflateRect
ReleaseDC
GetDC
SetWindowLongW
SetCursor
SetCapture
GetSysColorBrush
WindowFromPoint
DestroyMenu
ValidateRect
PtInRect
MessageBeep
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GetKeyState
ClientToScreen
RedrawWindow
ReleaseCapture
GetParent
GetSysColor
OffsetRect
IsWindowEnabled
GetForegroundWindow
MessageBoxW
GetMenuItemID
GetSubMenu
GetMenuItemCount
IsWindowVisible
GetLastInputInfo
DrawIcon
IsIconic
GetSystemMetrics
PostMessageW
DeleteMenu
LoadBitmapW
AppendMenuW
GetSystemMenu
LoadIconW
GetMessageW
SetForegroundWindow
FindWindowW
DispatchMessageW
TranslateMessage
PeekMessageW
ScreenToClient
GetWindowRect
LoadImageA
IsWindow
KillTimer
SetTimer
GetClientRect
InvalidateRect
SendMessageW
EnableWindow
GetClassInfoW

gdi32

Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
TextOutW
PtVisible
CreatePen
CreateSolidBrush
GetBkColor
GetTextColor
GetRgnBox
DeleteDC
RectVisible
ExcludeClipRect
GetWindowExtEx
GetViewportExtEx
CreateCompatibleDC
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteObject
GetMapMode
CreateRectRgnIndirect
ExtTextOutW
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
Rectangle
GetTextExtentPoint32W
CreateFontIndirectW
GetObjectW
GetStockObject
GetTextMetricsW
CreateFontW
BitBlt
SelectObject
CreateCompatibleBitmap

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW

shell32

SHGetSpecialFolderPathW
ShellExecuteExW
Shell_NotifyIconW
SHAppBarMessage
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathRemoveFileSpecW
PathFindFileNameW
PathStripToRootW
PathFileExistsW
PathIsUNCW

oledlg

OleUIBusyW

ole32

OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
CoUninitialize
OleFlushClipboard
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitialize
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard

oleaut32

SysAllocString
OleCreateFontIndirect
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 316KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

iizujdm
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d8e0f41426ee8640eac5b12c8d63ffd1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

version

Sections

.text Size: 316KB - Virtual size: 315KB

.rdata Size: 80KB - Virtual size: 80KB

.data Size: 36KB - Virtual size: 52KB

.rsrc Size: 73KB - Virtual size: 74KB

iizujdm Size: - Virtual size: 4KB

.text
Size: 316KB - Virtual size: 315KB

.rdata
Size: 80KB - Virtual size: 80KB

.data
Size: 36KB - Virtual size: 52KB

.rsrc
Size: 73KB - Virtual size: 74KB

iizujdm
Size: - Virtual size: 4KB