2024-07-03_99b45b15239eb74715a9d276e52ef646_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-03_99b45b15239eb74715a9d276e52ef646_icedid
Size

496KB
MD5

99b45b15239eb74715a9d276e52ef646
SHA1

b659c41e81dc3a619ece781cf050394902a36d30
SHA256

942fdba6ac8edaf1bd6afbe3acb02d2214a3358e44d81b3c5c3ddefb693efd7d
SHA512

f0804341f39b0e173c75b25225ad95cf6ab5f82e3e45434516af94f8522878fc9c26a4c4679c5bcf7c8788ac7f3d79097dc6905fcf8b22391386c3f3f7792a2a
SSDEEP

12288:1dtpnet3QXGN0qgIHutleE4axbK18g5dL4:LzQ0VAutlJxb8xd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-03_99b45b15239eb74715a9d276e52ef646_icedid

Files

2024-07-03_99b45b15239eb74715a9d276e52ef646_icedid
.exe windows:4 windows x86 arch:x86

9e261ebd0e9bdc1a8e3ce6b5c3b64cbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dinput8

DirectInput8Create

comctl32

ord17
ImageList_Destroy
ImageList_Create
ImageList_GetIconSize
ImageList_GetIcon
ImageList_ReplaceIcon
_TrackMouseEvent

winmm

PlaySoundA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

RtlUnwind
GetSystemTimeAsFileTime
ExitThread
CreateThread
GetTimeFormatA
GetDateFormatA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
SetStdHandle
GetFileType
TerminateProcess
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeZoneInformation
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetCurrentProcessId
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
SetErrorMode
GetOEMCP
GetCPInfo
TlsFree
GetModuleHandleA
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
GlobalFlags
GetFileTime
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetTickCount
FindNextFileA
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
GetThreadLocale
GetVersionExA
FormatMessageA
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
CloseHandle
TerminateThread
WaitForSingleObject
SetLastError
GetLastError
GetProcAddress
LoadLibraryA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
InterlockedIncrement
GetShortPathNameA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
GetLocaleInfoA
GetACP
InterlockedExchange
LocalFree
FindFirstFileA
FindClose
lstrcpyA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
InterlockedDecrement
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
lstrcpynA
GlobalLock
GlobalUnlock
FreeResource
FreeLibrary
GlobalAlloc
GlobalFree
MulDiv
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
RaiseException
MultiByteToWideChar
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
GetModuleFileNameA
GetFileAttributesA
GetEnvironmentStrings
CopyFileA

user32

InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
PostQuitMessage
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
wsprintfA
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
IsChild
GetWindowTextLengthA
CopyAcceleratorTableA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MapWindowPoints
MessageBoxA
SetForegroundWindow
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
EqualRect
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
DrawIconEx
RedrawWindow
InflateRect
GetIconInfo
CreateIconIndirect
ReleaseDC
GetWindow
MonitorFromRect
GetMonitorInfoA
IsRectEmpty
SetWindowLongA
UnregisterClassA
CharUpperA
SetRect
PostMessageA
GetWindowLongA
GetFocus
PtInRect
GetMessagePos
DestroyIcon
GetDC
CharNextA
ReleaseCapture
SetCapture
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
ValidateRect
GetWindowTextA
GetCursorPos
ScreenToClient
OffsetRect
DrawStateA
IsWindow
GetKeyState
TranslateMessage
DispatchMessageA
LoadCursorA
SetCursor
DrawFrameControl
GetSysColorBrush
FillRect
GetSystemMetrics
LoadIconA
KillTimer
IsWindowVisible
GetWindowRect
IsIconic
GetSystemMenu
SendMessageA
AppendMenuA
DrawIcon
SetRectEmpty
GetSysColor
InvalidateRect
DrawFocusRect
DrawEdge
CopyRect
GetParent
SetTimer
GetClientRect
EnableWindow
SendDlgItemMessageA
GetMessageA

gdi32

GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePen
CreateRectRgnIndirect
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
MoveToEx
LineTo
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
SelectObject
GetStockObject
Rectangle
GetDIBits
SetDIBits
DeleteObject
GetDeviceCaps
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPoint32A
CreateFontIndirectA
GetObjectA
CreateSolidBrush
GetViewportExtEx

comdlg32

GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA

shell32

SHGetFolderPathA
ExtractIconA
ShellExecuteA

shlwapi

PathIsUNCA
PathFindExtensionA
UrlUnescapeA
PathStripToRootA
PathFindFileNameA

oledlg

ord8

ole32

CoInitialize
CoTaskMemFree
StringFromCLSID
CoCreateInstance
CoTaskMemAlloc
CoRegisterClassObject
CoRevokeClassObject
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoDisconnectObject
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoSetProxyBlanket
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

SysFreeString
OleCreateFontIndirect
SystemTimeToVariantTime
SafeArrayDestroy
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VariantCopy
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
OleLoadPicture
SysAllocString
SysStringLen

ws2_32

inet_addr
gethostname
htons
getsockopt
getsockname
getpeername
WSASetLastError
recv
recvfrom
select
send
sendto
htonl
WSAStartup
WSACleanup
closesocket
shutdown
ntohs
getservbyname
gethostbyname
ntohl
setsockopt
listen
bind
socket
connect
inet_ntoa
WSAGetLastError

wininet

InternetCrackUrlA
InternetCanonicalizeUrlA
InternetOpenUrlA
InternetConnectA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
FtpGetFileA
FtpPutFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpCreateDirectoryA
InternetSetOptionExA
InternetQueryDataAvailable
FtpDeleteFileA
InternetQueryOptionA

Sections

.text
Size: 352KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e261ebd0e9bdc1a8e3ce6b5c3b64cbc

Headers

File Characteristics

Imports

dinput8

comctl32

winmm

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

Sections

.text Size: 352KB - Virtual size: 350KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 44KB - Virtual size: 41KB

.text
Size: 352KB - Virtual size: 350KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 44KB - Virtual size: 41KB