2024-04-20_40ee0bf6df7e8ed3ef8541af7abaa26e_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-20_40ee0bf6df7e8ed3ef8541af7abaa26e_icedid
Size

10.4MB
MD5

40ee0bf6df7e8ed3ef8541af7abaa26e
SHA1

1ae8f1ce530798a7292cf393cd33e027e4d73b2c
SHA256

485a232f42db11e7adbd77f88329dcd5f5094c904b0fee382b4b153271ca13cc
SHA512

88ed56a41d4681b6cf6106d4b5694dc24c618f671adf427188d9fd8c468bd40d42fc4d1b6637a2a82a0f0970c701f7aaf5fbf62595234211d727397a22b1b4cf
SSDEEP

196608:OcFwDEntcT6vByBssZdBrAqO13W5dUSZ+SlJjkRbo4GPkAEEMJX88Rg:ZFwDE9BGM25dUucW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-20_40ee0bf6df7e8ed3ef8541af7abaa26e_icedid

Files

2024-04-20_40ee0bf6df7e8ed3ef8541af7abaa26e_icedid
.exe windows:5 windows x86 arch:x86

d33c0952c55ca1840bb58080bb199051

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

ddraw

DirectDrawCreateEx

gdiplus

GdipReleaseDC
GdiplusShutdown
GdiplusStartup
GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetDC
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipFree
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipCreateFromHDC

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
VirtualAlloc
VirtualQuery
HeapSize
HeapQueryInformation
SetStdHandle
GetFileType
GetStdHandle
GetLocaleInfoW
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
GetTimeZoneInformation
LCMapStringW
HeapCreate
SetHandleCount
GetStringTypeW
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetDriveTypeW
CompareStringW
EnumSystemLocalesA
IsValidLocale
GetCurrentDirectoryW
SetEnvironmentVariableA
GetSystemDefaultLangID
GetCurrentDirectoryA
CreateThread
GetModuleFileNameA
SizeofResource
GetDateFormatA
LockResource
LoadResource
FindResourceW
WideCharToMultiByte
CloseHandle
WriteFile
CreateFileA
MultiByteToWideChar
GetModuleFileNameW
GetCurrentProcessId
CreateFileW
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
SetUnhandledExceptionFilter
FreeLibrary
LoadLibraryA
QueryPerformanceCounter
GetLastError
SetLastError
FormatMessageA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
SetEvent
TerminateThread
WaitForSingleObject
CreateProcessA
GetTimeFormatA
GetSystemTimeAsFileTime
lstrlenA
Sleep
GetProcAddress
lstrlenW
ExitThread
GetConsoleMode
CreateDirectoryA
GetConsoleCP
EnumResourceLanguagesA
RtlUnwind
RaiseException
EncodePointer
DecodePointer
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathA
GetProfileIntA
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
SetErrorMode
GetACP
GetSystemDirectoryW
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
EnumResourceNamesA
EnumResourceTypesA
GetLocalTime
TlsGetValue
InitializeCriticalSection
FreeResource
FindResourceA
RemoveDirectoryA
GetDiskFreeSpaceExA
GlobalFlags
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
GetModuleHandleW
InterlockedExchange
GetFileTime
GetFileSizeEx
GetFileAttributesA
GetFileAttributesExA
InterlockedIncrement
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
MoveFileA
DeleteFileA
lstrcmpiA
GetThreadLocale
CreateEventA
SuspendThread
ResumeThread
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
CopyFileA
GlobalSize
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LoadLibraryW
lstrcmpW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileA
FindNextFileA
GetDriveTypeA
FindClose
MulDiv
SetThreadPriority
SetThreadExecutionState
lstrcmpA
GetProcessHeap
HeapAlloc
HeapFree
OpenMutexA
CreateMutexA
ExitProcess
LocalAlloc
LocalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
GetSystemInfo
GlobalMemoryStatus
GetTickCount
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
ActivateActCtx
DeactivateActCtx
GetModuleHandleA
lstrcpyA
lstrcpynA

user32

ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
RegisterClipboardFormatA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
HideCaret
InvertRect
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
DrawEdge
DrawIconEx
SetClassLongA
DestroyAcceleratorTable
GetNextDlgGroupItem
WaitMessage
InvalidateRgn
CopyAcceleratorTableA
GetMenuDefaultItem
SetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsRectEmpty
IsZoomed
GetAsyncKeyState
NotifyWinEvent
MessageBeep
DeleteMenu
UnregisterClassA
LoadCursorW
EnumDisplayMonitors
SetRectEmpty
CopyImage
GetSysColorBrush
RealChildWindowFromPoint
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
CharNextA
GetMenuItemInfoA
CharUpperA
GetMessageA
MapVirtualKeyA
GetKeyNameTextA
CreateDialogIndirectParamA
EndDialog
GetWindowThreadProcessId
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuStringA
InsertMenuA
IsWindowEnabled
ShowWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetDlgItemInt
CheckDlgButton
UnpackDDElParam
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
ValidateRect
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowPos
PtInRect
GetWindow
IntersectRect
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
SystemParametersInfoA
LoadIconA
GetKeyState
ChangeDisplaySettingsExA
SetWindowRgn
GetSystemMetrics
EnumDisplayDevicesA
EnumDisplaySettingsA
SetRect
LoadIconW
GetLastActivePopup
CopyIcon
CharUpperBuffA
PostThreadMessageA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
IsClipboardFormatAvailable
GetWindowRgn
FindWindowA
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
TranslateMessage
DispatchMessageA
PeekMessageA
GetDesktopWindow
GetForegroundWindow
SetForegroundWindow
SubtractRect
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
GetUpdateRect
SendDlgItemMessageA
ReleaseCapture
LoadCursorA
SetCapture
LoadBitmapA
IsWindowVisible
GetCursorPos
SetParent
LoadMenuW
RemoveMenu
SetWindowLongA
SetLayeredWindowAttributes
ScreenToClient
IsWindow
KillTimer
SetTimer
RedrawWindow
UpdateWindow
DestroyMenu
LoadMenuA
DestroyCursor
LoadImageA
GetSysColor
GetSubMenu
TrackPopupMenuEx
PostMessageA
SetCursor
GetWindowLongA
EnableWindow
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
DrawFocusRect
FrameRect
OffsetRect
InflateRect
CopyRect
DrawStateA
GetIconInfo
CreateIconIndirect
DestroyIcon
ReleaseDC
GetDC
FillRect
wsprintfA
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
MoveWindow

gdi32

GetBitmapBits
CombineRgn
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
GetDeviceCaps
Rectangle
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
GetMapMode
PatBlt
DPtoLP
CopyMetaFileA
GetDIBits
GetTextExtentPoint32A
GetBkColor
GetTextColor
CreateDIBitmap
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
GetRgnBox
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceA
SetPixelV
SetDIBits
StretchBlt
CreateFontIndirectA
CreateDIBSection
GetObjectA
CreateCompatibleBitmap
GetPixel
SetPixel
CreateBitmap
SetStretchBltMode
CreateCompatibleDC
SelectObject
SetBkColor
BitBlt
SetTextColor
CreatePen
SetBitmapBits
DeleteDC
StretchDIBits
SetDIBitsToDevice
SetBkMode
SetTextAlign
ExtTextOutA
RoundRect
CreateFontA
GetViewportOrgEx
SetViewportOrgEx
CreateDCA
CreateSolidBrush
DeleteObject
GetStockObject

msimg32

GradientFill
AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA

shell32

SHGetSpecialFolderLocation
ShellExecuteExA
ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFolderPathA
SHAppBarMessage
SHGetMalloc
DragQueryFileA
DragFinish
SHGetSpecialFolderPathA
SHGetDesktopFolder
SHGetFileInfoA

comctl32

ImageList_Destroy
ImageList_GetIconSize
_TrackMouseEvent

shlwapi

PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindExtensionA
PathIsDirectoryA
PathFindFileNameA

ole32

OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
OleCreateMenuDescriptor
CoTaskMemFree
CoCreateInstance
OleRun
CoInitialize
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CLSIDFromString
CoCreateGuid
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleUninitialize
CoFreeUnusedLibraries
OleInitialize

oleaut32

SysFreeString
VarBstrFromDate
SysStringLen
SafeArrayDestroy
VariantCopy
SafeArrayUnaccessData
OleCreateFontIndirect
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
VariantInit
SysAllocStringLen
GetErrorInfo
VarUdateFromDate
SafeArrayAccessData

oledlg

ord8

wsock32

WSACleanup
recvfrom
sendto
send
ntohl
recv
socket
setsockopt
htons
inet_ntoa
connect
getsockopt
shutdown
closesocket
accept
select
__WSAFDIsSet
ioctlsocket
gethostbyname
WSAGetLastError
WSAStartup

vcomp100

_vcomp_barrier
_vcomp_fork
_vcomp_set_num_threads
_vcomp_for_static_simple_init
_vcomp_for_static_end

cms_401g_dll

GetMainAddress

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

Exports

Exports

CREATE_ISF_CMS_DEV_INFO_CONVERTOR_INTERFACE
CREATE_ISF_DEV_EVENT_INFO_INTERFACE
CREATE_ISF_DEV_INFO_INTERFACE
CREATE_ISF_DISPLAY_OSD_RENDER_INTERFACE
CREATE_ISF_ENV_COMMON_INTERFACE
CREATE_ISF_ENV_OSD_POS_TEXT_INFO_INTERFACE
CREATE_ISF_UTIL_FUNC_INTERFACE
CreateIsCheckerUrlIpInterface

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 497KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.5MB - Virtual size: 6.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d33c0952c55ca1840bb58080bb199051

Headers

DLL Characteristics

File Characteristics

Imports

winmm

ddraw

gdiplus

version

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

wsock32

vcomp100

cms_401g_dll

oleacc

imm32

Exports

Exports

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 497KB - Virtual size: 496KB

.data Size: 37KB - Virtual size: 87KB

.rsrc Size: 6.5MB - Virtual size: 6.5MB

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 497KB - Virtual size: 496KB

.data
Size: 37KB - Virtual size: 87KB

.rsrc
Size: 6.5MB - Virtual size: 6.5MB