2024-02-13_69bbe132acdddcd7c06c3cded8d13d6b_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-13_69bbe132acdddcd7c06c3cded8d13d6b_icedid
Size

8.6MB
MD5

69bbe132acdddcd7c06c3cded8d13d6b
SHA1

6f2b2dc9ba3485b1287ea2842382200f523ea2a2
SHA256

e7a0e86ec5cb5d30d2ee9f35f5db799ac7c575e50a8b4e5c9ceb81922ed3b3e8
SHA512

1ee1a85344d1bb926bc31ce99f351120080274134e525bdeadd7db7800e24a08f6a3f521bf0540426a706e8e25b61f7c0214551eabaac82d1db4d2054f870624
SSDEEP

98304:+wBjuQgulGx7KCU9KnO9zUlFtU/7lTxJXwi+kToy2YtPuJFEnxTsgjpicEg/6:+wpDMnO2tU/7lTxvxPUjEnxTsKpmg/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-02-13_69bbe132acdddcd7c06c3cded8d13d6b_icedid

Files

2024-02-13_69bbe132acdddcd7c06c3cded8d13d6b_icedid
.exe windows:5 windows x86 arch:x86

931caa00ebb4164a9dbf00ccae7a3314

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\_WORKS\OpWin2\Working\OpWin src 2.0.5 - 07.10.2014\Release\OpWin.pdb

Imports

d3d9

Direct3DCreate9

winmm

PlaySoundW
timeGetTime

kernel32

HeapReAlloc
VirtualQuery
HeapSize
CreateThread
ExitThread
HeapQueryInformation
SetStdHandle
GetFileType
GetStdHandle
GetStartupInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetConsoleCP
GetConsoleMode
ReadConsoleW
MoveFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetTimeZoneInformation
SetFilePointerEx
WriteConsoleW
IsValidLocale
EnumSystemLocalesW
LCMapStringW
GetDriveTypeW
SetEnvironmentVariableA
lstrlenA
LockResource
LoadResource
SizeofResource
GetSystemTime
RaiseException
FindResourceW
MultiByteToWideChar
GetLastError
FileTimeToDosDateTime
CreateDirectoryW
DeleteFileW
WideCharToMultiByte
WaitForSingleObject
GetTempPathA
CreateEventW
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
Sleep
WriteFile
ReadFile
SetFilePointer
GetCommState
GetCommTimeouts
PurgeComm
SetCommState
SetCommTimeouts
CreateFileMappingA
CreateFileA
SetupComm
CreateFileW
InitializeCriticalSectionAndSpinCount
FreeResource
MulDiv
lstrcpynW
lstrcpyW
lstrcatW
lstrlenW
GetModuleFileNameW
OutputDebugStringW
GetFullPathNameW
GetFileAttributesW
QueryPerformanceCounter
GetSystemTimeAsFileTime
AreFileApisANSI
IsDebuggerPresent
RtlUnwind
GetCommandLineW
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
GetTempPathW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
GetCurrentDirectoryW
SetErrorMode
QueryPerformanceFrequency
GetModuleHandleExW
ExitProcess
CloseHandle
GetSystemInfo
IsProcessorFeaturePresent
LoadLibraryA
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalFlags
GetTickCount
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetCurrentThread
ResumeThread
SetThreadPriority
FileTimeToSystemTime
FindNextFileW
FileTimeToLocalFileTime
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
FlushFileBuffers
FindFirstFileW
FindClose
GetCurrentProcessId
GetThreadLocale
InterlockedIncrement
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
GetCurrentThreadId
DecodePointer
EncodePointer
InterlockedDecrement
CopyFileW
GetModuleHandleA
FormatMessageW
LocalFree
GlobalSize
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
GetModuleHandleW
GetVersion
SetLastError
VirtualAlloc
HeapFree
GetProcessHeap
HeapAlloc
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
EnterCriticalSection
UnmapViewOfFile
GetVersionExA
GetFileSize
MapViewOfFile
OutputDebugStringA

user32

SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
IsZoomed
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
DrawFrameControl
DrawEdge
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
DrawIconEx
LoadImageW
SetRectEmpty
DrawFocusRect
GetMenuDefaultItem
CreatePopupMenu
MessageBeep
GetNextDlgGroupItem
PostThreadMessageW
WindowFromPoint
WaitMessage
DeleteMenu
DestroyIcon
IsRectEmpty
InvalidateRgn
CopyAcceleratorTableW
CopyImage
UnregisterClassW
GetSysColorBrush
RealChildWindowFromPoint
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
ShowOwnedPopups
GetMessageW
IntersectRect
MapVirtualKeyW
GetKeyNameTextW
CharUpperW
GetWindowThreadProcessId
LoadMenuW
IsDialogMessageW
SetWindowTextW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
SetDlgItemTextW
SetDlgItemInt
CharNextW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
LockWindowUpdate
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
GetClassInfoExW
GetClassInfoW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
SendDlgItemMessageA
GetWindow
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
SetFocus
ClientToScreen
GetWindowDC
UnhookWindowsHookEx
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetDesktopWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
CopyRect
GetSysColor
GetParent
SetWindowLongW
GetWindowLongW
CallWindowProcW
wsprintfW
MessageBoxW
UpdateWindow
CreateWindowExW
RegisterClassW
SetClassLongW
DestroyCursor
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
PeekMessageW
DispatchMessageW
TranslateMessage
GetIconInfo
FrameRect
CharUpperBuffW
ModifyMenuW
SetMenuDefaultItem
CopyIcon
GetScrollInfo
GetDoubleClickTime
ScreenToClient
GetCursorPos
ReleaseDC
LoadCursorW
SetParent
OffsetRect
InflateRect
MapWindowPoints
SetCursor
InvalidateRect
WindowFromDC
SetActiveWindow
DrawIcon
GetSystemMenu
IsIconic
MoveWindow
SetRect
IsWindowVisible
GetWindowRect
TabbedTextOutW
GrayStringW
DrawTextExW
PostQuitMessage
LoadIconW
SetTimer
PtInRect
RedrawWindow
GetWindowRgn
KillTimer
ReleaseCapture
SetCapture
PostMessageW
LoadBitmapW
FillRect
GetClientRect
SetWindowRgn
EndPaint
BeginPaint
GetDC
DrawTextW
GetSystemMetrics
EnableWindow
GetDlgItem
ShowWindow
SendMessageW

gdi32

SetTextAlign
CreateDIBSection
GetDIBits
GetObjectW
FillRgn
GetCurrentObject
AddFontMemResourceEx
RemoveFontMemResourceEx
CreatePen
Polyline
CombineRgn
CreateBitmap
CopyMetaFileW
CreateDCW
CreateHatchBrush
CreatePatternBrush
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetLayout
GetLayout
SetPolyFillMode
SetROP2
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetMapMode
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
PatBlt
GetMapMode
SetRectRgn
DPtoLP
GetTextMetricsW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Rectangle
EnumFontFamiliesExW
OffsetRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceW
SetBkColor
GetTextExtentPoint32W
GetDeviceCaps
DeleteDC
CreateFontW
ExtTextOutW
RectVisible
PtVisible
GetStockObject
Escape
CreateCompatibleBitmap
TextOutW
GetRgnBox
CreateRectRgn
SetTextColor
SetBkMode
SelectObject
DeleteObject
CreateSolidBrush
CreateRoundRectRgn
CreateFontIndirectW
SetWindowExtEx
BitBlt
CreateCompatibleDC

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegDeleteKeyW
RegEnumValueA
RegOpenKeyExA
RegEnumValueW
RegEnumKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegSetValueW
RegOpenKeyA
RegQueryValueExA
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
SHGetFileInfoW
ExtractIconW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderW
SHFileOperationW
DragFinish
DragQueryFileW
SHGetDesktopFolder

comctl32

ImageList_SetBkColor
ImageList_ReplaceIcon
InitCommonControlsEx

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
StrFormatKBSizeW
PathIsUNCW
PathRemoveFileSpecW

uxtheme

GetThemeColor
GetWindowTheme
GetThemeSysColor
GetThemePartSize
IsAppThemed
IsThemeBackgroundPartiallyTransparent
DrawThemeText
DrawThemeParentBackground
OpenThemeData
DrawThemeBackground
CloseThemeData
GetCurrentThemeName

ole32

StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateGuid
CoUninitialize
StringFromGUID2
OleRun
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoRegisterClassObject
ReleaseStgMedium
OleDuplicateData
StgOpenStorageOnILockBytes
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CreateILockBytesOnHGlobal
OleFlushClipboard
DoDragDrop
CreateStreamOnHGlobal
CoInitializeEx
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard

oleaut32

SysAllocString
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VarBstrFromDate
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayDestroy
SafeArrayCreate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
OleCreateFontIndirect
SysAllocStringLen
SysStringByteLen
SafeArrayGetDim
VariantChangeType
VariantCopy
VariantInit
VariantClear
SysFreeString

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipDrawImageRectI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 474KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.8MB - Virtual size: 5.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

931caa00ebb4164a9dbf00ccae7a3314

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d9

winmm

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 474KB - Virtual size: 474KB

.data Size: 79KB - Virtual size: 120KB

.rsrc Size: 5.8MB - Virtual size: 5.8MB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 474KB - Virtual size: 474KB

.data
Size: 79KB - Virtual size: 120KB

.rsrc
Size: 5.8MB - Virtual size: 5.8MB