2024-04-20_e9e14b53a0f53571bf7a4b695da3c799_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-20_e9e14b53a0f53571bf7a4b695da3c799_icedid
Size

1.9MB
MD5

e9e14b53a0f53571bf7a4b695da3c799
SHA1

9510bdb452b8462915b4eb5ddb5ac6e435210792
SHA256

f810bc2a70e7ca7eb19302643b4413515b7aaf2abfd7e67b0a5078978a0d667d
SHA512

95801686d2790b9173d7b8d6dc721e3c1e515b25b73dd1b95569b9a68865f54ba8ba805920a17ec6a9ac915a31f368a5971c329334b98c766cdee4399410a043
SSDEEP

49152:/rttayAqK3PbyX0TP33j4mMr1ZZ0wyzLbLTEyG9Bx/g0H8S0cgl4CZL:/ba/qK3PbyX0Tv37Mr1ZZ0wyzLbLTEyt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-20_e9e14b53a0f53571bf7a4b695da3c799_icedid

Files

2024-04-20_e9e14b53a0f53571bf7a4b695da3c799_icedid
.exe windows:4 windows x86 arch:x86

e580efa84f9a160ab5d3ba4e8dee7cf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
LCMapStringA
VirtualQuery
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
GetCurrentDirectoryA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetDriveTypeA
SetEnvironmentVariableA
VirtualAlloc
VirtualProtect
HeapSize
ExitProcess
SizeofResource
HeapReAlloc
RtlUnwind
RaiseException
GetTimeZoneInformation
ExitThread
GetDriveTypeW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
SetErrorMode
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
LocalAlloc
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
FindNextFileW
lstrlenA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
LoadLibraryExW
CompareStringA
FindFirstFileW
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
InterlockedDecrement
GetPrivateProfileIntW
SuspendThread
FormatMessageW
LocalFree
GetModuleHandleA
GetCurrentProcessId
GlobalFindAtomW
CompareStringW
lstrcmpW
GetVersionExA
InterlockedExchange
SetThreadAffinityMask
lstrcmpiW
GetSystemInfo
CreateEventW
ResetEvent
SetEvent
FreeResource
FileTimeToSystemTime
UnmapViewOfFile
WriteFile
SetFileTime
SetFilePointer
DuplicateHandle
DosDateTimeToFileTime
GetFileType
GetCurrentDirectoryW
GetVersionExW
GlobalDeleteAtom
GlobalGetAtomNameW
ReleaseMutex
CreateMutexW
GlobalAddAtomW
lstrlenW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WritePrivateProfileStringW
GetCurrentProcess
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalMemoryStatusEx
GetVolumeInformationW
GetLocaleInfoW
GetWindowsDirectoryW
CreateDirectoryW
GlobalReAlloc
GlobalFree
GetVersion
MulDiv
LoadLibraryA
FreeLibrary
GetPrivateProfileStringW
CreateThread
SetThreadPriority
Sleep
TerminateThread
WaitForSingleObject
GetFileSize
CreateFileA
CreateFileW
ReadFile
CloseHandle
GetFullPathNameW
GetModuleFileNameW
RemoveDirectoryW
SetFileAttributesW
MultiByteToWideChar
GetCurrentThreadId
WideCharToMultiByte
GetTempFileNameW
GetTempPathW
MoveFileW
DeleteFileW
LoadLibraryW
GetLastError
SetLastError
GetTickCount
GetProcAddress
GetModuleHandleW
ResumeThread
FindResourceW
LoadResource
LockResource
LCMapStringW

user32

SetMenu
TranslateAcceleratorW
InvalidateRgn
CopyAcceleratorTableW
GetSysColorBrush
FindWindowW
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
CharUpperW
DestroyMenu
GetMessageW
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SetWindowTextW
IsDialogMessageW
EndPaint
BeginPaint
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
IsWindowEnabled
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetMenu
MessageBoxW
InsertMenuItemW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
CallWindowProcW
SystemParametersInfoA
GetWindowPlacement
UnionRect
GetFocus
IntersectRect
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
ShowWindow
CreateWindowExW
GetLastActivePopup
BroadcastSystemMessageW
RegisterWindowMessageW
ChangeDisplaySettingsW
ChangeDisplaySettingsExW
EnumDisplaySettingsExW
EnumDisplayDevicesW
wsprintfW
EnumDisplaySettingsW
CopyIcon
MoveWindow
PostQuitMessage
DrawTextW
ScrollDC
IsRectEmpty
GetNextDlgGroupItem
GetCapture
PtInRect
PostMessageW
UnregisterClassA
EnableWindow
SetWindowLongW
GetWindowLongW
SetLayeredWindowAttributes
WindowFromPoint
DrawIconEx
DrawEdge
GetMenuItemID
CopyRect
GetMenuItemInfoW
SystemParametersInfoW
GetSubMenu
GetMenuItemCount
GetKeyboardLayout
GetKeyNameTextW
MapVirtualKeyW
DrawFrameControl
DefWindowProcW
GetClassInfoW
EnableScrollBar
RedrawWindow
ClientToScreen
DestroyCursor
FillRect
LoadAcceleratorsW
LoadMenuW
ReuseDDElParam
UnpackDDElParam
CharNextW
UnregisterClassW
MessageBeep
IsWindow
InflateRect
GetSysColor
RegisterClipboardFormatW
PostThreadMessageW
GetClassInfoExW
SetTimer
KillTimer
BringWindowToTop
SendMessageW
GetWindowRect
DestroyIcon
CreatePopupMenu
SetRectEmpty
GetParent
InvalidateRect
UpdateWindow
GetClientRect
IsWindowVisible
SetActiveWindow
GetSystemMetrics
GetCursorPos
GetWindow
OffsetRect
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
SetForegroundWindow
IsIconic
DrawIcon
FlashWindow
LoadIconW
GetSystemMenu
AppendMenuW
ScreenToClient
GetDC
GetActiveWindow
ReleaseDC
SetWindowPos
SetWindowRgn
EqualRect
SetRect
SetCursor
PeekMessageW
TranslateMessage
DispatchMessageW
SetCapture
ReleaseCapture
DrawFocusRect
GetKeyState
LoadImageW
AnimateWindow
LoadBitmapW
LoadCursorW

gdi32

IntersectClipRect
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
CreateRectRgnIndirect
CreateEllipticRgn
GetRgnBox
RestoreDC
SaveDC
SetBkColor
GetClipBox
LineTo
SetBkMode
SetTextColor
GetDIBits
TextOutW
RectVisible
PtVisible
Escape
GetViewportExtEx
ExtTextOutW
CreateRectRgn
GdiFlush
MoveToEx
CreatePen
CombineRgn
ExtCreateRegion
CreateDIBSection
SetBitmapBits
GetBitmapBits
SelectPalette
CreateFontW
GetBkColor
RealizePalette
GetDeviceCaps
StretchBlt
SelectClipRgn
GetTextColor
CreateDIBitmap
PatBlt
FillRgn
PtInRegion
CreatePolygonRgn
Rectangle
CreateFontIndirectW
GetTextExtentPoint32W
DPtoLP
LPtoDP
CreateSolidBrush
GetStockObject
GetPixel
CreateBitmap
DeleteObject
GetTextMetricsW
CreateCompatibleBitmap
Ellipse
SetMapMode
GetWindowExtEx
CreateCompatibleDC
GetObjectW
DeleteDC
BitBlt
SelectObject
GetMapMode

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueW
RegDeleteValueW
RegEnumKeyW
RegOpenKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW

shell32

DragQueryFileW
DragAcceptFiles
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW
DragFinish

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

CLSIDFromProgID
CLSIDFromString
CoTaskMemAlloc
CoGetClassObject
OleUninitialize
CoTaskMemFree
CoUninitialize
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
OleCreateStaticFromData
OleSetContainedObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleDuplicateData
ReleaseStgMedium
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
CoFreeUnusedLibraries
CoRevokeClassObject
OleInitialize
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SysAllocStringLen
SysAllocString
SysStringLen
SysFreeString
VariantInit
VariantCopy
VariantClear
VariantChangeType
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayCreateVector
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
OleLoadPicture

urlmon

URLDownloadToFileW

wininet

DeleteUrlCacheEntryW

ws2_32

WSAEventSelect
WSAEnumProtocolsW
getsockname
shutdown
setsockopt
sendto
WSACleanup
ioctlsocket
bind
socket
connect
inet_ntoa
WSAStartup
closesocket
recvfrom
ntohs
gethostbyname
accept
htons
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAGetLastError
htonl
inet_addr

dsound

ord1

winmm

timeKillEvent
PlaySoundW
mmioOpenW
mmioAscend
mmioRead
mmioClose
mmioDescend
timeSetEvent

d3d9

Direct3DCreate9

d3dx9_43

D3DXCreateSprite
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileExW
D3DXLoadSurfaceFromFileW
D3DXLoadSurfaceFromFileInMemory
D3DXGetImageInfoFromFileW
D3DXCreateFontW
D3DXSaveSurfaceToFileW
D3DXGetImageInfoFromFileInMemory
D3DXMatrixTransformation2D
D3DXLoadSurfaceFromSurface

dinput8

DirectInput8Create

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

iphlpapi

GetAdaptersInfo

msvfw32

MCIWndRegisterClass
MCIWndCreateW

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 352KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e580efa84f9a160ab5d3ba4e8dee7cf7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

wininet

ws2_32

dsound

winmm

d3d9

d3dx9_43

dinput8

version

iphlpapi

msvfw32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 352KB - Virtual size: 349KB

.data Size: 24KB - Virtual size: 234KB

.rsrc Size: 52KB - Virtual size: 48KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 352KB - Virtual size: 349KB

.data
Size: 24KB - Virtual size: 234KB

.rsrc
Size: 52KB - Virtual size: 48KB