2024-10-03_98f16c16384f3c9b2bc7b0a41d23dcfa_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-03_98f16c16384f3c9b2bc7b0a41d23dcfa_icedid
Size

1.1MB
MD5

98f16c16384f3c9b2bc7b0a41d23dcfa
SHA1

052651ac164e8c0ef8f8ea9c5348323b530f5083
SHA256

80cada83c2a1ca41ffd7fded2ff7d8efb01f3b1239b6eca1d14221f41d3677b3
SHA512

42dd827ddb3505189c2134ac1e1b37059b0e8bcb8ef80a5961db6bdb9517cff75fa4fa79fc3e98918671241744493b0e2264d2896bebd3a027d4efe65c80af6a
SSDEEP

24576:CiMxWD5HYMvTWvjdXm2FD2jlCNm6Z4HyM:CStYMrWvRXBFicm60

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-03_98f16c16384f3c9b2bc7b0a41d23dcfa_icedid

Files

2024-10-03_98f16c16384f3c9b2bc7b0a41d23dcfa_icedid
.exe windows:4 windows x86 arch:x86

f9c2300591e7ed304313c4e6d14c1ec5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\build\libsrc_Pixie5\libsrc\Pixie5\bin\release\PixieTool.pdb

Imports

wininet

InternetOpenW
InternetGetConnectedState
InternetCloseHandle
InternetCheckConnectionW
InternetOpenUrlW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

ExitProcess
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualQuery
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
Sleep
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
RaiseException
SetErrorMode
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetShortPathNameW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
MoveFileW
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetDiskFreeSpaceW
GetFullPathNameW
GetFileTime
SetFileTime
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentProcessId
GlobalGetAtomNameW
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
MulDiv
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
SetLastError
lstrcmpW
CreateFileA
GetPrivateProfileStringA
LoadLibraryA
GetWindowsDirectoryA
GetCurrentDirectoryA
WritePrivateProfileStringA
GetSystemDirectoryA
GetTickCount
GetSystemTime
GetCurrentProcess
GetModuleHandleA
LocalAlloc
GetFileAttributesA
GetVersionExA
lstrlenA
lstrcmpiW
GetStringTypeExW
CompareStringA
CompareStringW
GetVersion
GetProcAddress
FreeLibrary
CreateProcessW
GetExitCodeProcess
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCommandLineW
CreateMutexW
OpenMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateFileW
ReadFile
WriteFile
FindClose
FindFirstFileW
FindNextFileW
LocalFree
GetFileAttributesW
Beep
GetModuleHandleW
GetVersionExW
GetLocaleInfoW
WideCharToMultiByte
GetLastError
InterlockedDecrement
OutputDebugStringW
GetTempPathW
GetTempFileNameW
lstrlenW
InterlockedExchange
GetModuleFileNameW
LoadLibraryW
DeleteFileW
CreateDirectoryW
MultiByteToWideChar
GetLocalTime
GetLogicalDriveStringsW
GetVolumeInformationW
LoadResource
LockResource
SizeofResource
FindResourceW
QueryPerformanceCounter

user32

GetSysColorBrush
SetCapture
SetWindowRgn
DrawIcon
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
SystemParametersInfoW
GetMenuItemInfoW
ShowOwnedPopups
GetMessageW
TranslateMessage
ValidateRect
PostQuitMessage
InflateRect
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
GetCursorPos
WindowFromPoint
ClientToScreen
SetRect
UnionRect
IsRectEmpty
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
GetWindowThreadProcessId
ReleaseCapture
LoadAcceleratorsW
InvalidateRect
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
ReleaseDC
GetDC
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
GetMenuStringW
IsWindowEnabled
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetMenuItemBitmaps
GetMenuState
EnableMenuItem
CheckMenuItem
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetClientRect
GetSubMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetParent
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
GetDlgCtrlID
DefWindowProcW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
CharUpperW
FindWindowW
LoadBitmapW
LoadImageW
SetParent
GetDCEx
LockWindowUpdate
UnregisterClassW
DestroyIcon
CharNextW
CopyAcceleratorTableW
SetPropW
GetWindowLongW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
GetMenuCheckMarkDimensions
SetForegroundWindow
SetActiveWindow
GetPropW
SetWindowLongW
RemovePropW
CallWindowProcW
PostMessageW
ShowWindow
MessageBoxW
LoadCursorW
UpdateWindow
GetMenu
ModifyMenuW
SetCursor
GetMenuItemID
GetMenuItemCount
IsZoomed
GetWindowRect
IsIconic
CopyRect
GetSystemMetrics
KillTimer
SetTimer
IsWindowVisible
IsWindow
SendMessageW
EnableWindow
UnregisterClassA
RegisterWindowMessageW

gdi32

DPtoLP
CreateEllipticRgn
LPtoDP
Ellipse
GetRgnBox
GetMapMode
IntersectClipRect
ExcludeClipRect
SetMapMode
CombineRgn
SetRectRgn
CreateSolidBrush
GetStockObject
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
StretchBlt
DeleteObject
GetTextExtentPoint32W
GetObjectW
DeleteDC
StartDocW
StartPage
EndPage
EndDoc
CreateFontIndirectW
SetBkMode
RestoreDC
SaveDC
GetBkColor
GetTextMetricsW
StretchDIBits
GetCharWidthW
CreateCompatibleBitmap
PatBlt
CreateRectRgnIndirect
CreateDCW
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateFontW
GetTextColor
GetBkMode
CreateCompatibleDC
SelectObject

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

InitializeSecurityDescriptor
RegCreateKeyW
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
RegSetValueW
RegLoadKeyA
RegRestoreKeyA
RegSaveKeyA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegFlushKey
RegCreateKeyExA
RegOpenKeyExA
EqualSid
DeleteAce
GetLengthSid
AddAccessAllowedAce
IsValidSid
GetFileSecurityA
CryptReleaseContext
GetSecurityDescriptorDacl
GetAclInformation
InitializeAcl
GetAce
AddAce
SetSecurityDescriptorDacl
SetFileSecurityA
CryptGetHashParam
GetNamedSecurityInfoW
AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoW
FreeSid
GetUserNameW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptDecrypt
CryptDestroyKey

shell32

SHGetFolderPathW
DragFinish
DragQueryFileW
ExtractIconW
SHGetFileInfoW
ShellExecuteW

comctl32

ord17

shlwapi

HashData
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
StgOpenStorageOnILockBytes
OleInitialize
CoTaskMemFree
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleRun
CoCreateInstance
CoGetClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject

oleaut32

SysFreeString
SafeArrayDestroy
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringByteLen
OleCreateFontIndirect
SysAllocStringByteLen

Sections

.text
Size: 636KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 40KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f9c2300591e7ed304313c4e6d14c1ec5

Headers

File Characteristics

PDB Paths

Imports

wininet

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 636KB - Virtual size: 634KB

.rdata Size: 236KB - Virtual size: 235KB

.data Size: 40KB - Virtual size: 58KB

.rsrc Size: 236KB - Virtual size: 236KB

.text
Size: 636KB - Virtual size: 634KB

.rdata
Size: 236KB - Virtual size: 235KB

.data
Size: 40KB - Virtual size: 58KB

.rsrc
Size: 236KB - Virtual size: 236KB