2024-02-03_20855edff667d33e2718fffd9da8dba3_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-03_20855edff667d33e2718fffd9da8dba3_icedid
Size

4.1MB
MD5

20855edff667d33e2718fffd9da8dba3
SHA1

dbfdfa3cbd30ec96b9149d0fc8d277a6401d30ff
SHA256

99d4552fe6cc1e76c752c32d9541361afa25f8c2b33ebc175656772906ce9291
SHA512

2cdefd9463e2ea30da0777e2a924d02448d20e230bd0aad0fef7fce8597aa0fa0134fa1bc44ab7c8393b4376f38e751e3f91adb95992e4d4198f8d6e5e3e7497
SSDEEP

49152:s/S9I10iBk65d1qggKdlsGLAeVQTd/47eo9X0SbvhA9/IlPanICcGjtZ9x:6qo9VsGEvdQ7ec0RlIlPanIC5Z9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-03_20855edff667d33e2718fffd9da8dba3_icedid

Files

2024-02-03_20855edff667d33e2718fffd9da8dba3_icedid
.exe windows:4 windows x86 arch:x86

34a0abb062b8ff71c63d41853d4df076

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

GradientFill
TransparentBlt

rasapi32

RasGetEntryPropertiesW
RasGetConnectionStatistics
RasDialW
RasGetEntryDialParamsW
RasEnumConnectionsW
RasEnumEntriesW
RasSetCredentialsW
RasGetProjectionInfoW
RasHangUpW
RasGetConnectStatusW
RasSetEntryPropertiesW
RasSetEntryDialParamsW

winmm

PlaySoundW

wininet

InternetWriteFile
DeleteUrlCacheEntryW
InternetErrorDlg
InternetSetOptionW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle
InternetGoOnlineW
InternetAttemptConnect
InternetConnectW
InternetOpenW
HttpEndRequestW
InternetQueryOptionW
HttpSendRequestExW

ws2_32

recvfrom
sendto
setsockopt
closesocket
freeaddrinfo
send
WSAGetLastError
connect
socket
getaddrinfo
gethostname
bind
inet_ntoa
ntohs
WSAIoctl
inet_addr
WSAStartup
WSACleanup
recv
gethostbyname

iphlpapi

GetIpForwardTable
GetAdaptersInfo
GetPerAdapterInfo
GetIfEntry
GetIfTable
GetExtendedTcpTable

xmllite

CreateXmlReader

netapi32

NetApiBufferFree
NetWkstaUserEnum
NetWkstaUserGetInfo

gdiplus

GdipLoadImageFromFile
GdipAlloc
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipDeleteGraphics
GdipSetImageAttributesColorMatrix
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipDrawImageRectRectI
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCloneImage
GdipDrawImageI
GdipSetSmoothingMode
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipFree

wlanapi

WlanReasonCodeToString
WlanQueryInterface
WlanSetProfile
WlanOpenHandle
WlanGetAvailableNetworkList
WlanEnumInterfaces
WlanConnect
WlanGetNetworkBssList
WlanFreeMemory
WlanSetProfilePosition
WlanDeleteProfile
WlanDisconnect
WlanRegisterNotification
WlanCloseHandle
WlanGetProfile
WlanGetProfileList

wtsapi32

WTSRegisterSessionNotification

kernel32

DeviceIoControl
CreateFileW
Sleep
GetPrivateProfileStringW
WritePrivateProfileStringW
WideCharToMultiByte
GetLocalTime
GetSystemTime
GetCurrentThreadId
GetTimeZoneInformation
GetComputerNameW
CreateThread
CopyFileW
DeleteFileW
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
lstrlenW
SetEvent
DisconnectNamedPipe
LockResource
ReadFile
WaitForMultipleObjects
ConnectNamedPipe
ResetEvent
CreateNamedPipeW
CreateEventW
CallNamedPipeW
GetTempPathW
GetCommandLineW
MoveFileW
GetModuleFileNameW
CreateDirectoryW
lstrlenA
TerminateThread
GetExitCodeThread
GetModuleHandleW
MulDiv
GlobalFree
GlobalAlloc
CompareStringW
GetCurrentProcess
LocalFree
FormatMessageW
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
ReleaseMutex
CreateMutexW
LoadLibraryA
GetModuleFileNameA
ResumeThread
GlobalUnlock
GlobalLock
GetOverlappedResult
PurgeComm
SetCommTimeouts
SetCommState
GetCommState
EscapeCommFunction
ClearCommError
HeapFree
HeapAlloc
GetProcessHeap
GetVersionExW
GetNativeSystemInfo
OpenProcess
TerminateProcess
Process32NextW
CreateToolhelp32Snapshot
FileTimeToSystemTime
GetProcessTimes
GetExitCodeProcess
Process32FirstW
GetFileSize
GetVolumeInformationW
GlobalMemoryStatusEx
FindClose
FindFirstFileW
GetWindowsDirectoryW
SetLastError
LocalAlloc
RaiseException
FindNextFileW
FileTimeToLocalFileTime
VirtualProtect
GetModuleHandleA
GetVersionExA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FreeResource
TlsGetValue
CloseHandle
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GetCurrentThread
SetThreadPriority
SuspendThread
GetThreadLocale
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetFullPathNameW
GetFileAttributesW
GetFileTime
GlobalFlags
SetErrorMode
GetStartupInfoW
RtlUnwind
HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
ExitThread
SetStdHandle
GetFileType
ExitProcess
HeapSize
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
GetCurrentDirectoryA
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SizeofResource
GetCurrentProcessId
LoadLibraryW
GetProcAddress
GetLastError
GetTickCount
FreeLibrary
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
FindResourceW
GlobalReAlloc
LoadResource
WriteFile

user32

GetWindowTextW
GetWindowTextLengthW
GetWindowPlacement
SystemParametersInfoA
IntersectRect
CallWindowProcW
SetScrollInfo
EqualRect
AdjustWindowRectEx
GetClassInfoW
GetClassInfoExW
MessageBoxW
GetMenu
SetScrollPos
ScrollWindow
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
GetLastActivePopup
GetClassLongW
CallNextHookEx
SetWindowsHookExW
IsChild
WinHelpW
SendDlgItemMessageA
RegisterWindowMessageW
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
CheckMenuItem
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
DestroyMenu
WaitMessage
SetWindowContextHelpId
GetNextDlgGroupItem
MessageBeep
CopyAcceleratorTableW
InvalidateRgn
ValidateRect
GetMessageW
CharNextW
CharUpperW
GetSysColorBrush
RegisterClipboardFormatW
GrayStringW
GetWindow
GetClassNameW
GetKeyState
ScreenToClient
CopyImage
IsRectEmpty
ReleaseDC
SetLayeredWindowAttributes
AnimateWindow
PeekMessageW
GetMenuStringW
OpenInputDesktop
GetForegroundWindow
IsDialogMessageW
GetWindowThreadProcessId
AttachThreadInput
SetWindowLongW
ModifyMenuW
EnableMenuItem
GetSystemMetrics
SetForegroundWindow
IsIconic
GetSystemMenu
GetSubMenu
DrawIcon
GetDesktopWindow
FindWindowW
LoadImageW
DrawIconEx
DestroyIcon
TrackMouseEvent
SetFocus
SetCursor
ReleaseCapture
LoadCursorW
SetWindowPos
SetCapture
GetDC
GetWindowRect
InflateRect
PtInRect
GetCursorPos
TrackPopupMenuEx
AppendMenuW
CreatePopupMenu
EnableWindow
KillTimer
SetTimer
RedrawWindow
IsWindowVisible
CopyRect
PostMessageW
SendMessageW
IsWindow
IsWindowEnabled
GetWindowLongW
GetClientRect
InvalidateRect
GetFocus
GetParent
ClientToScreen
SetRect
DrawTextExW
TabbedTextOutW
UnregisterClassA
SetPropW
GetActiveWindow
MapDialogRect
GetPropW
RemovePropW
GetDlgItem
GetMenuState
GetMenuItemID
GetMenuItemCount
UpdateWindow
SetMenuDefaultItem
TrackPopupMenu
LoadMenuW
LoadIconW
EnumChildWindows
WindowFromPoint
GetMessageExtraInfo
SendInput
DrawFocusRect
SetRectEmpty
HideCaret
MoveWindow
DrawTextW
RegisterClassW
BeginPaint
EndPaint
NotifyWinEvent
GetDlgCtrlID
DefWindowProcW
GetCapture
SetWindowRgn
CreateWindowExW
SetWindowTextW
DestroyWindow
ShowWindow
SendDlgItemMessageW
SetActiveWindow
GetWindowDC
UnregisterClassW
OffsetRect
RegisterWindowMessageA
GetSysColor
FillRect
PostThreadMessageW
PostQuitMessage
TranslateMessage
DispatchMessageW

gdi32

RestoreDC
SaveDC
SetBkColor
CreateRectRgnIndirect
SetStretchBltMode
FillRgn
CreatePolygonRgn
GetBkColor
SetBkMode
SetTextColor
GetStockObject
BitBlt
CreateRectRgn
GetDeviceCaps
RemoveFontResourceW
AddFontResourceW
RemoveFontResourceExW
GetTextColor
GetTextExtentPoint32W
CreateDIBSection
ExtFloodFill
StretchBlt
Ellipse
GetObjectW
CreateFontW
ExtCreatePen
GetDIBColorTable
SetDIBColorTable
SelectObject
GetClipBox
LineTo
MoveToEx
DeleteDC
DeleteObject
RoundRect
Rectangle
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
CreatePen
GetRgnBox
GetMapMode
CreateBitmap
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
SetMapMode

comdlg32

GetFileTitleW
GetSaveFileNameW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptSetHashParam
CryptCreateHash
CryptImportKey
CryptAcquireContextW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyW
RegCreateKeyW
RegDeleteValueW
CryptDecrypt
CryptDeriveKey
CryptEncrypt
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW

shell32

Shell_NotifyIconW
ExtractAssociatedIconW
SHGetSpecialFolderPathW
ShellExecuteExW
SHGetFileInfoW
ShellExecuteW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

SHCreateStreamOnFileW
AssocQueryStringW
PathRemoveFileSpecA
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
ord12

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc

oleaut32

VariantChangeType
SysFreeString
OleLoadPicture
SysAllocStringLen
SysStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
VariantInit
OleCreateFontIndirect
VariantClear
SysAllocString

urlmon

URLDownloadToFileW

wsock32

htonl
WSASetLastError
htons
accept
select
WSAAsyncSelect

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 744KB - Virtual size: 740KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 688KB - Virtual size: 692KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

34a0abb062b8ff71c63d41853d4df076

Headers

File Characteristics

Imports

msimg32

rasapi32

winmm

wininet

ws2_32

iphlpapi

xmllite

netapi32

gdiplus

wlanapi

wtsapi32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

wsock32

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rdata Size: 744KB - Virtual size: 740KB

.data Size: 16KB - Virtual size: 38KB

.rsrc Size: 688KB - Virtual size: 692KB

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 744KB - Virtual size: 740KB

.data
Size: 16KB - Virtual size: 38KB

.rsrc
Size: 688KB - Virtual size: 692KB