2024-04-09_ff670257326c5c6631780977113bef1b_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-09_ff670257326c5c6631780977113bef1b_icedid
Size

2.9MB
MD5

ff670257326c5c6631780977113bef1b
SHA1

c1b6e43bd74d5aebe02b9e6ee7e95025311b2b4c
SHA256

3cff0a10bff78cb9d104f126f67e4d1a10c18b7f1797e7fc9a6fdb0823d28a7d
SHA512

48d71530ff3bb57fa298b5357583e5f0290a0f47cd6a60ffec80a2dea7a867f2c7a22525b7c3ae10d0d1ed1b0f27917c688a5f2d1c3839d80104f216ef058898
SSDEEP

24576:KILvETFVH8nrgPTQ+PQst/CdG1DrZJYxl4OPfP/jnCfni:KCET/H8rITRQJdM0xl4kfP/jnCfni

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-09_ff670257326c5c6631780977113bef1b_icedid

Files

2024-04-09_ff670257326c5c6631780977113bef1b_icedid
.exe windows:5 windows x86 arch:x86

769a3914baa4e9b4a645fb8fe9dbe2db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\tw\GameTools\ServiceTools\LauncherTools\Bin\Service\DragonaLauncher.pdb

Imports

kernel32

GetFileAttributesW
GetFileSizeEx
GetFileTime
GetStartupInfoW
ExitThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
RtlUnwind
RaiseException
ExitProcess
HeapReAlloc
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetDriveTypeA
SetEnvironmentVariableW
GetProcessHeap
CreateProcessW
GetCurrentDirectoryA
GetDriveTypeW
CreateDirectoryW
FileTimeToLocalFileTime
SetErrorMode
GlobalFlags
GetCurrentDirectoryW
GetTickCount
FileTimeToSystemTime
lstrlenA
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileW
InterlockedDecrement
FormatMessageW
lstrlenW
MulDiv
GetModuleHandleA
GlobalFindAtomW
LoadLibraryA
GetVersionExA
GetThreadLocale
GlobalAddAtomW
WaitForSingleObject
GetCurrentProcessId
SetLastError
FreeResource
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
CompareStringA
InterlockedExchange
lstrcmpW
FreeLibrary
GetModuleHandleW
GetProcAddress
TlsFree
GlobalFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedIncrement
MultiByteToWideChar
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
FindResourceW
LoadResource
LockResource
SizeofResource
CompareStringW
SetEvent
GetVersionExW
DeleteFileW
GetPrivateProfileIntW
CloseHandle
CreateEventW
WritePrivateProfileStringW
GetLastError
CreateMutexW
GetModuleFileNameW
ReleaseMutex
GetOEMCP
Sleep

user32

UnregisterClassW
DestroyMenu
GetSysColorBrush
LoadCursorW
RegisterClipboardFormatW
CharUpperW
ShowWindow
SetWindowTextW
SetDlgItemTextW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetWindowTextW
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SystemParametersInfoA
GetWindowPlacement
PtInRect
OemToCharA
MessageBoxA
SendMessageW
EnableWindow
GetDlgCtrlID
CharNextW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetKeyState
IsDialogMessageW
MessageBeep
IsChild
GetTopWindow
GetNextDlgGroupItem
GetLastActivePopup
GetActiveWindow
LoadIconW
GetClientRect
SetActiveWindow
SetTimer
LoadBitmapW
GetSystemMetrics
MoveWindow
IsIconic
DrawIcon
GetWindowRect
SetWindowPos
PostMessageW
KillTimer
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
GetWindowThreadProcessId
PostThreadMessageW
GetParent
EnumDisplaySettingsW
GetForegroundWindow
GetDC
ReleaseDC
GetCursorPos
WindowFromPoint
InvalidateRect
CopyRect
GetSysColor
UpdateWindow
IsRectEmpty
SetRect
CopyAcceleratorTableW
OffsetRect
IsWindow
IntersectRect
EqualRect
GetWindowLongW
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindow
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
ReleaseCapture
SetFocus
GetDesktopWindow
GetFocus
SetCapture
InvalidateRgn
IsWindowEnabled
IsWindowVisible
GetClassLongW

gdi32

DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetMapMode
GetObjectW
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetTextColor
GetBkColor
GetDeviceCaps
CreateBitmap
GetRgnBox
CreateRectRgnIndirect
CreateSolidBrush
CreateCompatibleBitmap
GetStockObject
BitBlt
CreateCompatibleDC
OffsetViewportOrgEx

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW

shell32

ShellExecuteExW
ShellExecuteW

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromString
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitialize
OleUninitialize
CoFreeUnusedLibraries

oleaut32

VariantInit
SysAllocString
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VariantClear
SafeArrayDestroy
SysAllocStringLen
OleCreateFontIndirect
VariantChangeType
VariantCopy

wininet

InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetCloseHandle
InternetConnectW
InternetOpenW

patchw32

ord1

Sections

.text
Size: 394KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

769a3914baa4e9b4a645fb8fe9dbe2db

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

patchw32

Sections

.text Size: 394KB - Virtual size: 394KB

.rdata Size: 95KB - Virtual size: 94KB

.data Size: 14KB - Virtual size: 30KB

.rsrc Size: 2.4MB - Virtual size: 2.4MB

.text
Size: 394KB - Virtual size: 394KB

.rdata
Size: 95KB - Virtual size: 94KB

.data
Size: 14KB - Virtual size: 30KB

.rsrc
Size: 2.4MB - Virtual size: 2.4MB