2024-09-25_9b14ef4bbfa5d5ff75111856c4bdea71_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-09-25_9b14ef4bbfa5d5ff75111856c4bdea71_icedid
Size

2.3MB
MD5

9b14ef4bbfa5d5ff75111856c4bdea71
SHA1

a4762f741ad2516f17ebe9401657d8710ab9e6a4
SHA256

43f4d40926f75f4d363ba89de50d6310f7dcd7a98f9a590ed523786d9da6c307
SHA512

06da47261c031eaf5d84ce25b4667756b89d9483623ed9624917f750577bf9564d71b84355ca248f5ad13fcf69ed147bb25006ba49efde9c59f94376e59fb9b3
SSDEEP

24576:xcX7uu4qsxPYcIE2A/DF54I7Cmg57TMgyoOnUNHMLg0YZ4P:c9sacI5A7F54IGmgxdyoOnUNUYZ4P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-25_9b14ef4bbfa5d5ff75111856c4bdea71_icedid

Files

2024-09-25_9b14ef4bbfa5d5ff75111856c4bdea71_icedid
.exe windows:4 windows x86 arch:x86

7238d318e4038b6f7662b9351b3faf77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetFileAttributesA
SetFileTime
GetFileTime
GetTempFileNameA
GetFullPathNameA
GetDiskFreeSpaceA
InterlockedDecrement
RaiseException
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
LeaveCriticalSection
GlobalReAlloc
GlobalHandle
EnterCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
FileTimeToSystemTime
SystemTimeToFileTime
GlobalFlags
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
MoveFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
CreateFileA
GetShortPathNameA
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetErrorMode
GetTickCount
RtlUnwind
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
TerminateProcess
HeapSize
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
SetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetEnvironmentVariableA
CloseHandle
GetCurrentThread
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
lstrcmpA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
FreeResource
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
GetStringTypeExA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
CopyFileA
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
GlobalMemoryStatus
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
LocalAlloc
InterlockedExchange

user32

GetMenuItemInfoA
IsRectEmpty
UnionRect
PostQuitMessage
ShowOwnedPopups
ValidateRect
GetMessageA
MapDialogRect
SetWindowContextHelpId
DestroyCursor
FindWindowA
DrawIcon
SetWindowRgn
SetCapture
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
GetSysColorBrush
GetDCEx
LockWindowUpdate
DeleteMenu
DestroyIcon
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
SetParent
CreateMenu
PostThreadMessageA
GetTabbedTextExtentA
RegisterClipboardFormatA
BringWindowToTop
SetMenu
TranslateAcceleratorA
wsprintfA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
CreateWindowExA
SetWindowsHookExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
InflateRect
LoadIconA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetMenu
PostMessageA
GetSysColor
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
UnregisterClassA
CallWindowProcA
SetWindowLongA
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
PtInRect
GetWindow
DefWindowProcA
GetDlgCtrlID
GetKeyState
GetCursorPos
WindowFromPoint
IsChild
GetCapture
KillTimer
ScreenToClient
ClientToScreen
OffsetRect
CopyRect
SetRect
DeferWindowPos
GetDesktopWindow
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringA
MessageBoxA
EnableWindow
CreatePopupMenu
AppendMenuA
GetMenuItemCount
GetSubMenu
InsertMenuA
DrawMenuBar
SendMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
UpdateWindow
LoadBitmapA
GetMenuItemID
RemoveMenu
WinHelpA
GetClientRect
InvalidateRect
SetTimer
LoadCursorA
CharUpperA
FillRect
GetDC
ReleaseDC
IsZoomed
LoadMenuA
GetWindowRect
DestroyMenu
UnpackDDElParam
ReuseDDElParam
SetCursor
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
GetMessagePos
SetRectEmpty
CallNextHookEx

gdi32

GetCurrentPositionEx
CreateDCA
GetBkColor
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
CreateCompatibleBitmap
SelectObject
GetTextMetricsA
GetTextExtentPoint32A
DeleteDC
StretchDIBits
DeleteObject
GetCharWidthA
CreateFontA
CreateFontIndirectA
ExtTextOutA
CreateRectRgnIndirect
PatBlt
CreatePen
GetViewportOrgEx
DPtoLP
Rectangle
StartDocA
GetBitmapDimensionEx
CreateCompatibleDC
StretchBlt
GetObjectA
BitBlt
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
StartPage
EndPage
SetAbortProc
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
AbortDoc
EndDoc
CreateEllipticRgn
LPtoDP
Ellipse
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
CreateRectRgn
SelectClipRgn
SetTextCharacterExtra
SetTextAlign
SetMapMode
ExcludeClipRect
IntersectClipRect
ExtSelectClipRgn
CreatePatternBrush
CreateSolidBrush
SetRectRgn
CombineRgn
GetMapMode
GetTextColor
GetRgnBox
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetWindowOrgEx
MoveToEx
GetDeviceCaps
LineTo

advapi32

RegSetValueA
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA

shell32

ShellExecuteA
DragQueryFileA
ExtractIconA
SHGetFileInfoA
DragAcceptFiles
DragFinish

comctl32

ImageList_Destroy
ImageList_GetImageInfo
ImageList_Draw
ord17

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

libeng

engClose
engPutVariable
engEvalString
engGetVariable
engOpen

libmx

mxGetPr
mxCreateDoubleMatrix

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

GetJobA
DocumentPropertiesA
ClosePrinter
OpenPrinterA

comdlg32

CommDlgExtendedError
PrintDlgA
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

ole32

OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
IsAccelerator
OleCreateMenuDescriptor
OleTranslateAccelerator
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoRevokeClassObject
CLSIDFromProgID

oleaut32

SysStringLen
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
VariantCopy
SysFreeString
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect

Sections

.text
Size: 444KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7238d318e4038b6f7662b9351b3faf77

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

comctl32

shlwapi

oledlg

libeng

libmx

oleacc

winspool.drv

comdlg32

ole32

oleaut32

Sections

.text Size: 444KB - Virtual size: 440KB

.rdata Size: 128KB - Virtual size: 127KB

.data Size: 12KB - Virtual size: 28KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.text
Size: 444KB - Virtual size: 440KB

.rdata
Size: 128KB - Virtual size: 127KB

.data
Size: 12KB - Virtual size: 28KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB