2024-04-20_37edf3bfad57abb589767a6c624fe067_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-04-20_37edf3bfad57abb589767a6c624fe067_icedid
Size

1.5MB
MD5

37edf3bfad57abb589767a6c624fe067
SHA1

6435701ab9d0629320d1184966ffd4bc1742b609
SHA256

3f2dbcf9e6093aaaef04e0875f767431788d46ed420e268ff1ee3de0eb546f0b
SHA512

208d29856d10369adc2240b41d57af1dadf158a92bc9774bf6c2706bb62ce688c7a755b563ea52f318192f8a05d8e5b91e2e78068a418f5577500ec99fb93830
SSDEEP

24576:xs0j0A3CDcB/ykbkITaPhLpzKXuBnhsHVM0zDiYDPSKCFG5tTuWCP7pNdZ2JRb:acRykbVTUcuBnGG0zDi0PSKCAXTapNdM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-04-20_37edf3bfad57abb589767a6c624fe067_icedid

Files

2024-04-20_37edf3bfad57abb589767a6c624fe067_icedid
.exe windows:4 windows x86 arch:x86

6d27de06d943340747c1b8e9a6169383

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\SuhilVasim\Desktop\Gunz 1.5 Repack by Jur13n #2 (Clean)\Clean source\Clean source\MatchServer\Runtime\MatchServer.pdb

Imports

kernel32

FileTimeToLocalFileTime
LocalFileTimeToFileTime
lstrcpynW
RtlUnwind
ExitProcess
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTimeZoneInformation
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
LCMapStringA
LCMapStringW
GetDriveTypeA
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
CreateDirectoryA
SetCurrentDirectoryA
GetModuleFileNameA
GetTickCount
GetLocalTime
Sleep
CloseHandle
GetLastError
CreateMutexA
ReleaseMutex
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetShortPathNameA
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
MultiByteToWideChar
GetVersion
lstrcmpiA
lstrlenW
lstrlenA
CompareStringA
CompareStringW
GetStringTypeExA
GetCurrentDirectoryA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
GetModuleHandleA
TerminateThread
WaitForSingleObject
CreateThread
LoadLibraryA
FreeLibrary
GetCurrentProcess
CreateEventA
SetUnhandledExceptionFilter
GetPrivateProfileIntA
GetPrivateProfileStringA
OutputDebugStringA
WaitForMultipleObjects
PostQueuedCompletionStatus
CreateIoCompletionPort
TerminateProcess
SetEvent
GetQueuedCompletionStatus
ResetEvent
GetSystemInfo
FileTimeToSystemTime
SystemTimeToFileTime
GetCurrentThreadId
ExitThread
GlobalUnlock
GlobalLock
lstrcatA
GlobalMemoryStatusEx
GetCurrentProcessId
CreateFileA
InterlockedDecrement
OpenProcess
ReadFile
SetFileTime
GetFileAttributesA
GetCurrentThread
FindClose
FindNextFileA
GetVolumeInformationA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
DeleteFileA
MoveFileA
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
LocalAlloc
GlobalFlags
lstrcpyW
GlobalReAlloc
InterlockedIncrement
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
WritePrivateProfileStringA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
SetLastError
GlobalFree
CopyFileA
MulDiv
GlobalSize
GlobalAlloc
FormatMessageA
LocalFree
SetErrorMode
lstrcpyA
RaiseException
FreeResource
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GlobalGetAtomNameA
GlobalAddAtomA
lstrcpynA
FindFirstFileA

user32

GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
CountClipboardFormats
IsClipboardFormatAvailable
SetCapture
ClientToScreen
MessageBeep
FillRect
LoadCursorA
DestroyCursor
SetRect
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetParent
DeleteMenu
IsRectEmpty
GetMenuItemInfoA
InflateRect
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
IsZoomed
ReleaseDC
GetDC
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
MoveWindow
SetWindowTextA
IsDialogMessageA
BeginPaint
SetDlgItemTextA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendMessageA
EnableWindow
wsprintfA
GetSubMenu
LoadMenuA
GetWindowRect
EndPaint
GetSysColorBrush
KillTimer
WindowFromPoint
GetDCEx
GetClientRect
IsWindowVisible
SetTimer
SendDlgItemMessageA
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
LockWindowUpdate
DestroyIcon
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
PostThreadMessageA
FindWindowA
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
RegisterClassA
DrawIcon
SetWindowRgn
CreateMenu
GetTabbedTextExtentA
SendNotifyMessageA
SetForegroundWindow
LoadIconA
GetCursorPos
UpdateWindow
PeekMessageA
GetKeyState
EnableMenuItem
GetSystemMenu
CharUpperA
PostMessageA
MessageBoxA
DefFrameProcA
GetMenu
DefMDIChildProcA
GetMenuItemID
GetMenuItemCount
GetParent
DrawMenuBar
GetActiveWindow
BringWindowToTop
CreateWindowExA
TranslateMDISysAccel
TranslateAcceleratorA
IsWindow
SetWindowLongA
GetWindowLongA
SetWindowPos
RedrawWindow
AdjustWindowRectEx
IsWindowEnabled
GetWindow
GetDesktopWindow
ShowWindow
SetMenu
GetLastActivePopup
CopyRect
SetRectEmpty
OffsetRect
IntersectRect
CreatePopupMenu
InsertMenuItemA
IsIconic
InvalidateRect
SetActiveWindow
LoadAcceleratorsA
ReleaseCapture
GetCapture
SetCursor
GetClassInfoA
ReuseDDElParam
UnpackDDElParam
GetDlgCtrlID
GetDlgItem
EqualRect
GetFocus
SetFocus
WinHelpA
GetSysColor
GetClassNameA
DestroyMenu
RegisterWindowMessageA
PtInRect
GetSystemMetrics
GetWindowPlacement
SystemParametersInfoA
CallWindowProcA
DefWindowProcA
UnregisterClassA

gdi32

GetViewportOrgEx
DPtoLP
Rectangle
GetStockObject
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
ScaleWindowExtEx
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
Escape
CreatePen
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
CreateSolidBrush
SetRectRgn
CombineRgn
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
CreateEllipticRgn
LPtoDP
Ellipse
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetWindowOrgEx
ExtTextOutA
BitBlt
CreateFontIndirectA
CreateCompatibleBitmap
CreateCompatibleDC
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
CreateRectRgnIndirect
PatBlt
SelectObject
GetTextMetricsA
GetTextExtentPoint32A
DeleteDC
StretchDIBits
DeleteObject
GetCharWidthA
CreateFontA
GetDeviceCaps
CopyMetaFileA
SetViewportOrgEx
CreateDCA

comdlg32

CommDlgExtendedError
FindTextA
ReplaceTextA
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
PrintDlgA

winspool.drv

ClosePrinter
OpenPrinterA
GetJobA
DocumentPropertiesA

advapi32

SetFileSecurityA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
GetFileSecurityA
RegCloseKey
RegDeleteValueA

shell32

ShellExecuteA
Shell_NotifyIconA
SHGetFileInfoA
ExtractIconA
DragAcceptFiles
DragQueryFileA
DragFinish

comctl32

ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy

shlwapi

PathFileExistsA
PathIsDirectoryA
PathRemoveFileSpecA
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
PathIsUNCA

oledlg

ord4
ord11
ord8
ord3

ole32

StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromProgID
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
CreateILockBytesOnHGlobal
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoUninitialize
CoCreateInstance
OleRun
CoInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CreateFileMoniker
OleSave
WriteClassStm
OleSaveToStream
CreateStreamOnHGlobal
OleLockRunning
OleSetContainedObject
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateFromFile
OleCreateLinkToFile
OleCreate
OleLoad
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
GetHGlobalFromILockBytes
ReadClassStg
CreateBindCtx
OleSetMenuDescriptor
CLSIDFromString

oleaut32

OleCreateFontIndirect
SafeArrayDestroy
SysStringLen
SysAllocStringLen
VariantChangeType
VariantClear
VariantCopy
VariantInit
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VarBstrFromDate
VarDateFromStr
SystemTimeToVariantTime
SysFreeString
GetErrorInfo
VariantTimeToSystemTime

odbc32

ord31
ord4
ord17
ord41
ord10
ord2
ord1
ord9
ord14
ord3
ord61
ord16
ord20
ord8
ord11
ord46
ord18
ord59
ord68
ord44
ord45
ord50
ord51
ord5
ord13
ord43
ord24
ord19
ord72
ord12
ord48
ord49
ord15

winmm

timeGetTime

ws2_32

htons
WSACreateEvent
WSAEventSelect
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSACloseEvent
recvfrom
sendto
socket
WSAStartup
connect
WSACleanup
closesocket
WSARecv
shutdown
WSASend
gethostbyname
ntohs
htonl
bind
listen
WSASocketA
WSAGetLastError
setsockopt
inet_addr
inet_ntoa

dbghelp

MiniDumpWriteDump

psapi

EnumProcesses
GetModuleFileNameExA
EnumProcessModules
GetModuleBaseNameA

mswsock

GetAcceptExSockaddrs
AcceptEx
TransmitFile

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 9.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d27de06d943340747c1b8e9a6169383

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

odbc32

winmm

ws2_32

dbghelp

psapi

mswsock

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 224KB - Virtual size: 220KB

.data Size: 20KB - Virtual size: 9.3MB

.rsrc Size: 48KB - Virtual size: 47KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 224KB - Virtual size: 220KB

.data
Size: 20KB - Virtual size: 9.3MB

.rsrc
Size: 48KB - Virtual size: 47KB