2024-07-03_0b9040e19020782eabc08d739bed2fdb_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-07-03_0b9040e19020782eabc08d739bed2fdb_icedid
Size

3.0MB
MD5

0b9040e19020782eabc08d739bed2fdb
SHA1

b781432da2e75ecb69b6c4c2dd4c4edaeed88050
SHA256

628686a847d64326dfb4ef58887c54cc0b6a5597bae7528f1d6df3a86e48147e
SHA512

281df341e51d796eee441d2d44578e7cc56f588c56df0441628de74d876348c1b081aac8b36b88577d368401dafdca64b3e436cad33effbf42fbdf49827d0788
SSDEEP

49152:SaJwLaMlsSmuDjWdKUmx0lWiqulNHypUu6TWY:/WLa0WkUmditjHypD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-03_0b9040e19020782eabc08d739bed2fdb_icedid

Files

2024-07-03_0b9040e19020782eabc08d739bed2fdb_icedid
.exe windows:4 windows x86 arch:x86

07d7ac5a5ac54def323c345e05d9d304

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

d3dx9_43

D3DXQuaternionRotationAxis
D3DXQuaternionSlerp
D3DXQuaternionInverse
D3DXQuaternionNormalize
D3DXMatrixDecompose
D3DXAssembleShader
D3DXMatrixTransformation
D3DXSaveSurfaceToFileA
D3DXSphereBoundProbe
D3DXMatrixRotationQuaternion
D3DXPlaneIntersectLine
D3DXPlaneNormalize
D3DXIntersectTri
D3DXMatrixRotationZ
D3DXVec2Normalize
D3DXPlaneFromPointNormal
D3DXPlaneFromPoints
D3DXMatrixTransformation2D
D3DXQuaternionMultiply
D3DXVec3TransformCoord
D3DXMatrixTranslation
D3DXCreateTexture
D3DXMatrixRotationY
D3DXVec3Normalize
D3DXMatrixScaling
D3DXMatrixTranspose
D3DXMatrixMultiply
D3DXMatrixInverse
D3DXMatrixRotationYawPitchRoll
D3DXMatrixPerspectiveFovLH
D3DXMatrixOrthoLH
D3DXMatrixLookAtLH
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromSurface
D3DXGetImageInfoFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXMatrixRotationX

winmm

mmioOpenA
mmioRead
mmioAscend
mmioGetInfo
mmioAdvance
mmioSetInfo
mmioSeek
mmioDescend
mmioClose
timeGetTime

advapi32

CryptEncrypt
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
CryptGetHashParam
CryptDeriveKey
CryptCreateHash
CryptHashData
CryptVerifySignatureA
CryptDestroyHash
RegEnumValueA
RegCreateKeyExA
GetUserNameA
CryptAcquireContextA
CryptImportKey
CryptDestroyKey
CryptReleaseContext
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CloseServiceHandle
ControlService
QueryServiceConfigA
StartServiceA
ChangeServiceConfigA
OpenServiceA

imm32

ImmSetConversionStatus
ImmGetCompositionStringA
ImmGetContext
ImmNotifyIME
ImmReleaseContext
ImmGetConversionStatus
ImmGetCandidateListA

dsound

ord11

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

dbghelp

StackWalk
GetTimestampForLoadedLibrary
EnumerateLoadedModules

psapi

GetModuleFileNameExA
EnumProcesses
EnumProcessModules

kernel32

GetSystemDefaultLangID
VirtualQuery
FreeLibrary
FormatMessageA
LoadLibraryExA
VirtualFree
VirtualProtect
VirtualAlloc
SetEndOfFile
QueryPerformanceFrequency
QueryPerformanceCounter
HeapFree
HeapAlloc
GetProcessHeap
WriteFile
CreateMutexA
GetExitCodeProcess
WaitForMultipleObjects
OpenEventA
CopyFileA
MoveFileExA
lstrcatA
GetCurrentThreadId
GetCurrentProcessId
OpenMutexA
TerminateThread
ReleaseMutex
GetComputerNameA
ExitProcess
GetSystemDirectoryA
GetModuleFileNameW
OpenFileMappingA
GetCurrentDirectoryA
GetTempFileNameA
GetTempPathA
DuplicateHandle
SetStdHandle
CreatePipe
GetStdHandle
PeekNamedPipe
InterlockedIncrement
lstrcpynA
GlobalUnlock
GlobalLock
SetLastError
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
FindFirstFileA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeResource
InterlockedDecrement
MoveFileA
FlushFileBuffers
LockFile
UnlockFile
GetVolumeInformationA
GetFullPathNameA
EnumResourceLanguagesA
ConvertDefaultLocale
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetDriveTypeA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
GetFileType
HeapSize
HeapDestroy
HeapCreate
IsBadWritePtr
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetEnvironmentVariableA
GetLocaleInfoW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
lstrcmpW
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
GetVersion
FindNextFileA
FindClose
Module32First
Module32Next
GetExitCodeThread
TerminateProcess
LoadLibraryA
lstrcpyA
SearchPathA
OpenProcess
IsDebuggerPresent
GetProcAddress
lstrcmpiA
lstrlenA
CompareStringA
CompareStringW
GetStringTypeExA
SizeofResource
LockResource
LoadResource
FindResourceA
IsDBCSLeadByte
MulDiv
CreateFileMappingA
MapViewOfFile
GetFileSize
GlobalAlloc
ResetEvent
GlobalFree
UnmapViewOfFile
SetUnhandledExceptionFilter
GetLocalTime
GetCurrentProcess
GetCurrentThread
GetModuleHandleA
IsBadReadPtr
LocalAlloc
LocalLock
LocalUnlock
LocalFree
CreateToolhelp32Snapshot
CreateDirectoryA
GetModuleFileNameA
lstrcmpA
SetFilePointer
SetThreadLocale
CreateFileA
ReadFile
GetSystemInfo
CreateEventA
WaitForSingleObject
CloseHandle
DeleteFileA
CreateProcessA
Sleep
CreateThread
SetThreadPriority
ResumeThread
SetEvent
LeaveCriticalSection
EnterCriticalSection
GetTickCount
GetSystemTime

user32

CheckMenuItem
EnableMenuItem
ModifyMenuA
SetMenuItemBitmaps
MapDialogRect
SetWindowContextHelpId
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
GetNextDlgTabItem
CreateDialogIndirectParamA
GetDesktopWindow
GetNextDlgGroupItem
MessageBeep
CopyAcceleratorTableA
InvalidateRgn
GetSysColorBrush
DestroyMenu
CharNextA
RegisterClipboardFormatA
PostThreadMessageA
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
GetMenu
GetSysColor
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
DefWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
GetWindow
GetWindowTextLengthA
GetWindowTextA
SetFocus
IsWindowEnabled
MoveWindow
GetDlgCtrlID
IsDialogMessageA
GetMenuCheckMarkDimensions
SendDlgItemMessageA
RemovePropA
GetMessageA
GetActiveWindow
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
DestroyCaret
GetWindowLongA
ValidateRect
GetCaretBlinkTime
CallWindowProcA
IsChild
ChildWindowFromPointEx
GetFocus
InvalidateRect
ReleaseDC
IsRectEmpty
GetKeyboardLayout
wsprintfA
EnumChildWindows
SetCapture
IsWindowVisible
GetClientRect
DeleteMenu
GetWindowRect
ShowWindow
DialogBoxParamA
EndDialog
SetWindowTextA
GetDlgItem
SetWindowPos
GetParent
SetParent
SetForegroundWindow
LoadCursorA
EnumDisplaySettingsA
EnableWindow
DestroyCursor
ActivateKeyboardLayout
GetDC
IsIconic
SetWindowsHookExA
LoadAcceleratorsA
PeekMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
MessageBoxA
UnhookWindowsHookEx
LoadIconA
GetForegroundWindow
UpdateWindow
PostMessageA
CallNextHookEx
SendMessageA
SetRectEmpty
GetAsyncKeyState
LoadBitmapA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetKeyState
SetCursor
AdjustWindowRect
SetWindowLongA
PostQuitMessage
EqualRect
IntersectRect
MapVirtualKeyA
SetRect
ReleaseCapture
ClipCursor
GetCursorPos
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
OffsetRect
SetCursorPos
ShowCursor
ScreenToClient
ClientToScreen
InflateRect
PtInRect
CopyRect
UnregisterClassA
CharUpperA
IsWindow
GetLastActivePopup
SetActiveWindow
WaitMessage

gdi32

CreateFontA
CreateFontIndirectA
BitBlt
GetDeviceCaps
GetClipBox
SetTextColor
SetBkColor
GetObjectA
CreateBitmap
SaveDC
RestoreDC
SetMapMode
CreateDIBSection
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateCompatibleDC
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetStockObject
CreateRectRgnIndirect
GetRgnBox
GetMapMode
GetBkColor
GetTextColor
SetViewportOrgEx
SelectObject
DeleteObject
DeleteDC

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

shell32

ShellExecuteA

comctl32

ord17

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

oledlg

ord8

ole32

CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoInitialize
CoCreateInstance
CoSetProxyBlanket
CoTaskMemFree
CoTaskMemAlloc
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject

oleaut32

SystemTimeToVariantTime
SysFreeString
SafeArrayDestroy
VariantCopy
VariantChangeType
SysAllocStringByteLen
SysAllocStringLen
SysStringLen
SysAllocString
VariantClear
VariantInit
OleCreateFontIndirect

ws2_32

inet_addr
setsockopt
ioctlsocket
WSASocketA
WSACleanup
sendto
WSASend
WSAAsyncSelect
gethostbyname
connect
recv
send
htons
getsockname
closesocket
socket
WSAStartup
WSAGetLastError
inet_ntoa

iphlpapi

GetAdaptersInfo

gdiplus

GdiplusShutdown
GdiplusStartup
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteFont
GdipDeleteGraphics
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdipAlloc
GdipFree
GdipCreateFontFromDC
GdipMeasureString
GdipCreateSolidFill
GdipDrawString

d3d9

Direct3DCreate9

Exports

Exports

fcEXP

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 259KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 169KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

07d7ac5a5ac54def323c345e05d9d304

Headers

File Characteristics

Imports

d3dx9_43

winmm

advapi32

imm32

dsound

version

dbghelp

psapi

kernel32

user32

gdi32

comdlg32

winspool.drv

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

iphlpapi

gdiplus

d3d9

Exports

Exports

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 259KB - Virtual size: 258KB

.data Size: 169KB - Virtual size: 311KB

.rsrc Size: 104KB - Virtual size: 103KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 259KB - Virtual size: 258KB

.data
Size: 169KB - Virtual size: 311KB

.rsrc
Size: 104KB - Virtual size: 103KB