2024-06-09_859d0e4c86fc799d4d65f208aca81508_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-09_859d0e4c86fc799d4d65f208aca81508_icedid
Size

2.5MB
MD5

859d0e4c86fc799d4d65f208aca81508
SHA1

6b9edcc04eb2aef3af767f27ae34c809c8b3748c
SHA256

89853e33cc3dadf20082bb707ea5c618bc75f97ccf42744d8693a7cc12ed0248
SHA512

17c462bc2e0c1cda7e0ea072be0dcd528a9f5d81b1959ef20db66ed1e2b59b9412e9142c2efd544baa6b321d13b7310cb17dbef49857d922164016e095728147
SSDEEP

49152:j2ZOP3onHrvCSijwypkkE7p00WX5dSuV:j28P3aakYhE1y5d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-09_859d0e4c86fc799d4d65f208aca81508_icedid

Files

2024-06-09_859d0e4c86fc799d4d65f208aca81508_icedid
.exe windows:4 windows x86 arch:x86

37c02ed528c4d22d9373dfcd254d539c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Nicks Jay Cuadra\Desktop\FILES TO COMPILE\Output\WorldServer\Release\WorldServer.pdb

Imports

winmm

timeGetTime

ws2_32

WSACloseEvent
WSACreateEvent
ntohs
WSASocketA
htonl
bind
gethostname
htons
closesocket
shutdown
WSASetLastError
WSAGetLastError
connect
gethostbyname
WSAEnumNetworkEvents
WSAAccept
WSAEventSelect
listen
setsockopt
WSAWaitForMultipleEvents
WSAResetEvent
inet_addr
WSARecv
getpeername
WSASend
WSACleanup
WSAStartup
WSASetEvent

kernel32

lstrcpynA
CreateFileA
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
WriteFile
DeleteFileA
ReadFile
GetProfileIntA
GetModuleHandleA
LocalFree
FormatMessageA
GetFileSize
VirtualFree
VirtualAlloc
GetFileAttributesA
GetModuleFileNameA
QueryPerformanceCounter
HeapCreate
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
CreateIoCompletionPort
PostQueuedCompletionStatus
GetOverlappedResult
GetQueuedCompletionStatus
GetSystemInfo
SetThreadPriority
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
SetConsoleTitleA
GetCurrentDirectoryA
SetCurrentDirectoryA
AllocConsole
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleScreenBufferSize
FreeLibrary
LoadLibraryA
GetProcAddress
GetLocalTime
CreateDirectoryA
lstrcatA
CreateEventA
OpenEventA
SetEvent
GetExitCodeProcess
TerminateProcess
CompareStringW
CompareStringA
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
lstrcmpA
MulDiv
lstrlenA
ExitProcess
CloseHandle
OutputDebugStringA
WaitForSingleObject
GetTickCount
WideCharToMultiByte
lstrcpyA
LeaveCriticalSection
EnterCriticalSection
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateProcessA
CreatePipe
GlobalMemoryStatus
FileTimeToDosDateTime
SetEnvironmentVariableA
GetLocaleInfoW
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
SetLastError
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
MoveFileA
SetFilePointer
FlushFileBuffers
SetEndOfFile
DuplicateHandle
GetCurrentProcess
RaiseException
LocalAlloc
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCurrentThread
GetCPInfo
GetOEMCP
FileTimeToLocalFileTime
GetFileTime
GetSystemTimeAsFileTime
RtlUnwind
GetTimeFormatA
GetDateFormatA
VirtualProtect
VirtualQuery
ExitThread
CreateThread
SetStdHandle
GetFileType
GetStartupInfoA
GetCommandLineA
HeapSize
GetTimeZoneInformation
GetCurrentProcessId
LCMapStringA
LCMapStringW
IsBadWritePtr
UnhandledExceptionFilter
SetHandleCount
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetUserDefaultLCID

user32

GetTopWindow
GetDlgItem
GetLastActivePopup
GetForegroundWindow
GetWindowTextA
GetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassInfoExA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetCapture
WinHelpA
RegisterWindowMessageA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
UnhookWindowsHookEx
IsWindowEnabled
LoadBitmapA
GetMenuCheckMarkDimensions
CheckMenuItem
EnableMenuItem
ModifyMenuA
SetMenuItemBitmaps
ValidateRect
DestroyMenu
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
SetForegroundWindow
wsprintfA
CharNextExA
MessageBoxA
GetClientRect
GetDC
ReleaseDC
GetMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
SetWindowPos
ShowWindow
LoadIconA
LoadCursorA
RegisterClassExA
SetWindowTextA
DefWindowProcA
DestroyWindow
BeginPaint
EndPaint
PostQuitMessage
InvalidateRect
LoadStringA
EnableWindow
KillTimer
SetTimer
UpdateWindow
GetWindowRect
SetRect
PtInRect
GetMenu
PostMessageA
GetSysColor
AdjustWindowRectEx
GetParent
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
SendMessageA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
CopyRect
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetKeyState
GetSysColorBrush

gdi32

GetStockObject
CreateBitmap
SetBkColor
SaveDC
RestoreDC
SetTextColor
GetClipBox
SelectObject
DeleteObject
DeleteDC
TextOutA
GetDeviceCaps
SetMapMode
PtVisible
RectVisible
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx

advapi32

GetUserNameA
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
CryptReleaseContext

oleaut32

VariantClear
VariantChangeType
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime

comctl32

ord17

oleacc

CreateStdAccessibleObject
LresultFromObject

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

mscoree

_CorExeMain

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 306KB - Virtual size: 306KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

37c02ed528c4d22d9373dfcd254d539c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winmm

ws2_32

kernel32

user32

gdi32

advapi32

oleaut32

comctl32

oleacc

winspool.drv

mscoree

version

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 306KB - Virtual size: 306KB

.data Size: 71KB - Virtual size: 1.8MB

.rsrc Size: 160KB - Virtual size: 160KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 306KB - Virtual size: 306KB

.data
Size: 71KB - Virtual size: 1.8MB

.rsrc
Size: 160KB - Virtual size: 160KB