2024-02-03_9313b99a9ccca3ca7c43473743384c39_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-03_9313b99a9ccca3ca7c43473743384c39_icedid
Size

1.3MB
MD5

9313b99a9ccca3ca7c43473743384c39
SHA1

2609593e3b8520abbc37fd757b27c2a4afd253e6
SHA256

fa2ae105accc36bf96938e3001044eea40c6b8a3859f3c5357ee340e13cffe47
SHA512

26e89c28576028214fabe7e8fbcccd133f547c7e89fc08acbbd29716054c67c3bb00f5cb62448cba4ab9594dc3ca525ec415942c8c32f265ab35a4a292883abb
SSDEEP

12288:IV5Hqj1CWBOD6MEkdpO7wQa5Jctksqe4sMrBmwIPZ1DSvZpsGxyUrzQptGwDDlvQ:I/hWBOD6Dk/O74+4sfipsGYUQpfRv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-03_9313b99a9ccca3ca7c43473743384c39_icedid

Files

2024-02-03_9313b99a9ccca3ca7c43473743384c39_icedid
.exe windows:4 windows x86 arch:x86

421fbf0f34b794db630b75a3d7b61586

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

closesocket
accept
__WSAFDIsSet
select
listen
send
recv
socket
shutdown
ioctlsocket
recvfrom
sendto
ntohl
gethostbyname
connect
htons
htonl
WSASetLastError
WSAStartup
bind
WSAGetLastError
setsockopt

ddraw

DirectDrawCreate

dinput

DirectInputCreateA

advapi32

GetFileSecurityA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
SetFileSecurityA

kernel32

GetDiskFreeSpaceA
GetCurrentThread
lstrcmpA
GetProcessVersion
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetCPInfo
GetOEMCP
FileTimeToSystemTime
FileTimeToLocalFileTime
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetFileTime
GetVolumeInformationA
LocalFileTimeToFileTime
SystemTimeToFileTime
GetCurrentDirectoryA
SetErrorMode
RtlUnwind
HeapFree
IsBadReadPtr
HeapReAlloc
GetTimeZoneInformation
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
SetConsoleCtrlHandler
RaiseException
ExitThread
TerminateProcess
HeapSize
GetACP
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetFileType
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
GetThreadLocale
SuspendThread
SetThreadPriority
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
FormatMessageA
LocalFree
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalFree
GetStdHandle
FlushConsoleInputBuffer
QueryPerformanceCounter
GlobalMemoryStatus
GetCurrentProcessId
FindFirstFileA
FindClose
SetFilePointer
ResetEvent
GetExitCodeThread
SetLastError
LoadLibraryA
GetProcAddress
IsDBCSLeadByte
lstrcpynA
LoadLibraryExA
FreeLibrary
lstrcpyA
lstrcatA
InterlockedIncrement
HeapDestroy
HeapCreate
GetSystemInfo
HeapAlloc
lstrcmpiA
GetModuleFileNameA
GetShortPathNameA
lstrlenA
CreateThread
GetVersionExA
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
CreateEventA
MultiByteToWideChar
InterlockedDecrement
lstrlenW
WideCharToMultiByte
WaitForMultipleObjects
ResumeThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
CreateFileA
FindResourceA
SizeofResource
LoadResource
LockResource
WriteFile
GetFileSize
ReadFile
GetLastError
SetEvent
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
GetSystemTime
GetTickCount
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateMutexA
InterlockedExchange
GetDriveTypeA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
DeleteFileA

user32

wvsprintfA
ValidateRect
TranslateMessage
GetMessageA
WindowFromPoint
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
DestroyMenu
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetWindowDC
TabbedTextOutA
DrawTextA
GrayStringA
SetParent
GetSystemMenu
DefFrameProcA
TranslateMDISysAccel
DefMDIChildProcA
SetWindowContextHelpId
LoadStringA
IsZoomed
ShowOwnedPopups
RegisterClipboardFormatA
GetClassNameA
LockWindowUpdate
InvertRect
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
CharUpperA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
CheckRadioButton
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
DeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
WinHelpA
GetClassInfoA
RegisterClassA
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
SetPropA
GetPropA
GetMenuCheckMarkDimensions
GetMessageTime
GetMessagePos
GetWindow
RegisterWindowMessageA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
UnhookWindowsHookEx
MapDialogRect
GetCapture
GetAsyncKeyState
GetDlgItem
IsWindowEnabled
FrameRect
CreatePopupMenu
InsertMenuA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
IsMenu
GetMenuStringA
ModifyMenuA
LoadBitmapA
GetFocus
IsChild
SetFocus
SetWindowRgn
UnionRect
ShowWindow
BeginPaint
EndPaint
GetLastActivePopup
IsIconic
CharNextA
PostThreadMessageA
EqualRect
GetSystemMetrics
LoadIconA
ShowScrollBar
GetDC
GetMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
DeleteMenu
AppendMenuA
DrawMenuBar
ScreenToClient
UpdateWindow
SetCursor
GetKeyboardLayout
InvalidateRect
SetRectEmpty
IntersectRect
SetRect
SetActiveWindow
GetClassInfoExA
RegisterClassExA
CallWindowProcA
GetWindowLongA
SetWindowLongA
DestroyWindow
CreateWindowExA
SetWindowPos
SetForegroundWindow
DefWindowProcA
IsWindow
AdjustWindowRectEx
LoadMenuA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
RemovePropA
SetWindowTextA
KillTimer
IsWindowVisible
SetTimer
GetActiveWindow
MessageBoxA
PeekMessageA
PostQuitMessage
wsprintfA
GetCursorPos
GetKeyState
GetDCEx
ReleaseCapture
SetCapture
RedrawWindow
PtInRect
GetWindowRect
OffsetRect
GetClassLongA
FillRect
GetSysColor
ReleaseDC
CopyRect
InflateRect
ClientToScreen
GetParent
BeginDeferWindowPos
EndDeferWindowPos
IsRectEmpty
GetClientRect
SystemParametersInfoA
GetSysColorBrush
LoadCursorA
PostMessageA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SendMessageA
EnableWindow
UnregisterClassA
FindWindowA

gdi32

GetTextExtentPoint32A
SetDIBitsToDevice
CreateCompatibleDC
MoveToEx
LineTo
SetTextAlign
CreateCompatibleBitmap
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
Escape
GetBkColor
GetTextMetricsA
StretchDIBits
GetCharWidthA
SetBkMode
DPtoLP
CreateFontIndirectA
ExtTextOutA
CreateRectRgn
CombineRgn
BitBlt
StretchBlt
CreateFontA
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetStretchBltMode
TextOutA
GetStockObject
GetTextColor
GetDeviceCaps
PatBlt
SetRectRgn
CreatePatternBrush
GetMapMode
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
DeleteObject
CreateSolidBrush
SelectObject
GetObjectA
CreateDCA
LPtoDP
SetMapMode
SetViewportOrgEx
DeleteDC
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

shell32

DragQueryFileA
DragFinish

comctl32

PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

CoTaskMemRealloc
CoTaskMemFree
CreateDataAdviseHolder
CoTaskMemAlloc
OleRegGetMiscStatus
CLSIDFromProgID
OleRegGetUserType
OleRegEnumVerbs
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoCreateInstance
CLSIDFromString
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
OleLoadFromStream
OleSaveToStream
WriteClassStm
CoUninitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateOleAdviseHolder
CreateILockBytesOnHGlobal

olepro32

ord250
ord253

oleaut32

SysStringLen
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopy
VariantTimeToSystemTime
LoadRegTypeLi
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
VariantClear
SysAllocStringLen
SysAllocString
SysFreeString
GetErrorInfo

Sections

.text
Size: 836KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

421fbf0f34b794db630b75a3d7b61586

Headers

File Characteristics

Imports

ws2_32

ddraw

dinput

advapi32

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 836KB - Virtual size: 832KB

.rdata Size: 220KB - Virtual size: 219KB

.data Size: 112KB - Virtual size: 137KB

.rsrc Size: 156KB - Virtual size: 155KB

.text
Size: 836KB - Virtual size: 832KB

.rdata
Size: 220KB - Virtual size: 219KB

.data
Size: 112KB - Virtual size: 137KB

.rsrc
Size: 156KB - Virtual size: 155KB