2024-10-12_17ae01c242ea5339c2ead7505e61f844_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-10-12_17ae01c242ea5339c2ead7505e61f844_icedid
Size

8.3MB
MD5

17ae01c242ea5339c2ead7505e61f844
SHA1

909b45343832a3079d2172deecb8c8e2b0dcb9f8
SHA256

ffd21e185c3ba335fb594f69e0c25a9f16cb32f1f1f116ee522c844d37b25b13
SHA512

f53bd704e85ad63dde279eb6ab8a08cc1aec45d14101d29ec8567cb5a2c01ff6696d6ff0df93f1703f40baccfe161e4b3b03bdd01f3f237c9f8f5b9b40403e0e
SSDEEP

196608:QJe3org9XO8lMSnZdNhjbUFUjJGEDF3QamYAk9:PogTbaF8JGAr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-10-12_17ae01c242ea5339c2ead7505e61f844_icedid

Files

2024-10-12_17ae01c242ea5339c2ead7505e61f844_icedid
.exe windows:5 windows x86 arch:x86

c8671832af339b58fc0b592843890bf2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\_work\2010 Ran Source\RanBattlepass\_Bin\Release\MiniA.pdb

Imports

d3dx9_43

D3DXSaveSurfaceToFileA
D3DXCreateEffectFromFileA
D3DXFrameDestroy
D3DXFrameCalculateBoundingSphere
D3DXLoadMeshHierarchyFromXA
D3DXLoadMeshHierarchyFromXInMemory
D3DXCreateSprite
D3DXCreateFontIndirectA
D3DXPlaneTransform
D3DXQuaternionRotationYawPitchRoll
D3DXVec2Normalize
D3DXMatrixRotationZ
D3DXLoadMeshFromXInMemory
D3DXLoadMeshFromXA
D3DXLoadSurfaceFromSurface
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXQuaternionInverse
D3DXMatrixRotationAxis
D3DXPlaneFromPointNormal
D3DXVec3CatmullRom
D3DXComputeNormals
D3DXQuaternionRotationAxis
D3DXVec3Normalize
D3DXQuaternionSlerp
D3DXQuaternionNormalize
D3DXMatrixRotationQuaternion
D3DXPlaneIntersectLine
D3DXMatrixInverse
D3DXVec3TransformNormal
D3DXMatrixTranspose
D3DXQuaternionMultiply
D3DXCreateTexture
D3DXSaveTextureToFileA
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXCreateCubeTextureFromFileExA
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileExA
D3DXPlaneFromPoints
D3DXCreateMeshFVF
D3DXGetFVFVertexSize
D3DXVec3Project
D3DXMatrixMultiply
D3DXMatrixRotationYawPitchRoll
D3DXMatrixTranslation
D3DXMatrixScaling
D3DXMatrixPerspectiveFovLH
D3DXMatrixLookAtLH
D3DXVec3TransformCoord
D3DXMatrixRotationY
D3DXMatrixRotationX

kernel32

GetTimeZoneInformation
LCMapStringW
GetStringTypeW
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetConsoleCP
GetConsoleMode
SetEnvironmentVariableA
CreateFileW
GetCurrentDirectoryW
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetDriveTypeW
SetHandleCount
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsValidCodePage
IsProcessorFeaturePresent
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
GetDateFormatA
GetTimeFormatA
HeapReAlloc
CreateThread
ExitThread
GetSystemTimeAsFileTime
GetStartupInfoW
HeapSetInformation
GetCommandLineA
DecodePointer
EncodePointer
RtlUnwind
RaiseException
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathA
GetProfileIntA
InitializeCriticalSectionAndSpinCount
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
GetFileSizeEx
GetFileAttributesExA
SetErrorMode
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
InterlockedIncrement
FindFirstFileA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetThreadLocale
GlobalGetAtomNameA
GlobalFindAtomA
FreeResource
GetCurrentProcessId
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
ResumeThread
SetThreadPriority
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
CompareStringA
ActivateActCtx
LoadLibraryA
DeactivateActCtx
InterlockedExchange
lstrcmpA
GetModuleHandleW
SetLastError
GlobalFree
CopyFileA
GlobalSize
FormatMessageA
LocalFree
GetComputerNameA
GetVolumeInformationA
SleepEx
ResetEvent
WaitForMultipleObjects
FindResourceA
MulDiv
lstrcpyA
GetFileSize
GetProcessHeap
HeapAlloc
ReadFile
HeapFree
GetCurrentDirectoryA
SetCurrentDirectoryA
CompareStringW
lstrcmpW
lstrlenW
IsDBCSLeadByteEx
WriteFile
GetFileTime
GetFileAttributesA
lstrcmpiA
QueryPerformanceFrequency
QueryPerformanceCounter
GetFullPathNameA
CreateFileA
GetACP
GetVersion
lstrlenA
SetEvent
WaitForSingleObject
CreateEventA
GetModuleFileNameW
LoadLibraryW
MultiByteToWideChar
GetModuleHandleA
GetProcAddress
GetVersionExA
GetSystemDirectoryA
GlobalAlloc
GlobalLock
GlobalUnlock
DeleteFileA
GlobalMemoryStatus
FindClose
CreateToolhelp32Snapshot
Process32First
Process32Next
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateDirectoryA
FreeLibrary
CloseHandle
Sleep
GetLastError
GetModuleFileNameA
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
GetLocaleInfoW

user32

SetRectEmpty
KillTimer
SetTimer
RealChildWindowFromPoint
DeleteMenu
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
CharNextA
CharUpperA
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetWindowTextLengthA
GetWindowTextA
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetClassInfoExA
GetClassInfoA
GetSysColor
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
GetDlgCtrlID
CallWindowProcA
GetWindow
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
ShowOwnedPopups
GetActiveWindow
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
EnumDisplayMonitors
GetSubMenu
RemoveMenu
wsprintfA
LoadImageA
GetForegroundWindow
GetDesktopWindow
ToAsciiEx
SetCapture
ReleaseCapture
DrawEdge
CheckDlgButton
GetDlgItem
EndDialog
LoadIconA
GetFocus
GetKeyboardLayout
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
InvalidateRect
InvertRect
FillRect
MsgWaitForMultipleObjects
ClientToScreen
SetCursorPos
SetFocus
LoadCursorFromFileA
ShowCursor
TranslateAcceleratorA
DestroyAcceleratorTable
SetWindowLongA
MoveWindow
keybd_event
GetKeyState
PostQuitMessage
ShowWindow
SetMenu
SetWindowPlacement
IsZoomed
IsWindowVisible
GetAsyncKeyState
MessageBoxW
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
RegisterClassA
SetRect
AdjustWindowRect
CreateWindowExA
GetMenu
DestroyMenu
DestroyWindow
GetCursorPos
ScreenToClient
SetLayeredWindowAttributes
LoadCursorW
WindowFromPoint
WaitMessage
DestroyIcon
CopyAcceleratorTableA
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
GetNextDlgTabItem
MessageBeep
InflateRect
GetMenuItemInfoA
CreateDialogIndirectParamA
SetWindowRgn
RedrawWindow
DefWindowProcA
GetClassLongA
GetWindowRect
ClipCursor
GetIconInfo
GetDC
ReleaseDC
SetWindowPos
OpenClipboard
EmptyClipboard
SetClipboardData
SetParent
CreatePopupMenu
NotifyWinEvent
SetClassLongA
LoadMenuW
GetSystemMenu
DrawStateA
GetMenuItemCount
DrawIconEx
GetClientRect
EnableWindow
UnregisterClassA
PostMessageA
DispatchMessageA
GetMessageA
TranslateMessage
PeekMessageA
MessageBoxA
SetCursor
DestroyCursor
FindWindowA
SendMessageA
AdjustWindowRectEx
LoadCursorA
LoadIconW
GetWindowRgn
GetWindowLongA
CloseClipboard
DrawFrameControl
DrawFocusRect
UpdateWindow
DrawIcon
SubtractRect
MapVirtualKeyExA
GetKeyNameTextA
IsCharLowerA
GetDoubleClickTime
CharUpperBuffA
CopyIcon
LoadImageW
GetUpdateRect
FrameRect
IsClipboardFormatAvailable
SetMenuDefaultItem
PostThreadMessageA
CreateMenu
IsMenu
UpdateLayeredWindow
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
CopyImage
EnableScrollBar
GetMenuDefaultItem
RegisterClipboardFormatA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
LockWindowUpdate
BringWindowToTop
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
PtInRect
MapVirtualKeyA

gdi32

SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateDIBitmap
CreateCompatibleBitmap
CreateRectRgnIndirect
EnumFontFamiliesA
GetTextCharsetInfo
GetRgnBox
SetRectRgn
CombineRgn
GetMapMode
SaveDC
DPtoLP
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
SetLayout
Rectangle
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceA
SetPixelV
SetTextAlign
GetTextColor
GetBkColor
CreateBitmap
CreateDCA
CopyMetaFileA
GetTextExtentPoint32A
SetBkColor
ExtTextOutA
SetTextColor
ExtTextOutW
CreateFontIndirectA
CreateDIBSection
SetMapMode
SetBkMode
CreateSolidBrush
SetDeviceGammaRamp
GetDeviceGammaRamp
GetBitmapBits
CreateFontW
CreateFontA
TextOutW
GetTextExtentPoint32W
GetTextMetricsA
GetClipBox
GetObjectA
CreateCompatibleDC
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetROP2
SetPolyFillMode
GetLayout
RealizePalette
RestoreDC
SelectObject
GetDIBits
DeleteObject
DeleteDC
GetDeviceCaps
PatBlt
GetStockObject

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
CryptReleaseContext
CryptDestroyHash
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
CryptDecrypt
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptEncrypt
CryptDestroyKey

shell32

SHAppBarMessage
SHGetSpecialFolderPathA
SHGetFileInfoA
DragFinish
DragQueryFileA
SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder

comctl32

ImageList_GetIconSize

shlwapi

PathFileExistsA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathIsUNCA

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoCreateInstance
CoRegisterMessageFilter
CoRevokeClassObject
CoUninitialize
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoInitialize

oleaut32

OleCreateFontIndirect
VariantCopy
VariantChangeType
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
SysAllocString
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantInit
SysStringLen
VariantClear

oledlg

ord8

ws2_32

WSACleanup
WSAStartup
htons
inet_addr
socket
ioctlsocket
connect
WSAWaitForMultipleEvents
WSACreateEvent
WSAEventSelect
WSACloseEvent
WSAEnumNetworkEvents
recv
closesocket
send
WSAGetLastError

iphlpapi

GetAdaptersInfo

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipDrawImageI
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipGetImagePaletteSize
GdipFree
GdipAlloc
GdipDisposeImage
GdipDeleteGraphics

winmm

mmioRead
mmioAscend
timeSetEvent
timeKillEvent
timeGetTime
mmioDescend
mmioAdvance
mmioWrite
mmioClose
mmioOpenA
PlaySoundA
mmioGetInfo
mmioCreateChunk
mmioSetInfo
mmioSeek

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetContext
ImmNotifyIME
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmGetCompositionStringW
ImmGetProperty

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ijl15

ord2
ord3
ord5

dsound

ord11

dinput8

DirectInput8Create

d3d9

Direct3DCreate9

d3dxof

DirectXFileCreate

bugtrap

BT_SetSupportURL
BT_SetFlags
BT_SetSupportEMail
BT_SetAppName
BT_SetSupportServer
BT_InstallSehFilter

Sections

.text
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 180KB - Virtual size: 148.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8671832af339b58fc0b592843890bf2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3dx9_43

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

ws2_32

iphlpapi

oleacc

gdiplus

winmm

imm32

version

ijl15

dsound

dinput8

d3d9

d3dxof

bugtrap

Sections

.text Size: 6.9MB - Virtual size: 6.9MB

.rdata Size: 1.2MB - Virtual size: 1.2MB

.data Size: 180KB - Virtual size: 148.5MB

.rsrc Size: 42KB - Virtual size: 41KB

.text
Size: 6.9MB - Virtual size: 6.9MB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 180KB - Virtual size: 148.5MB

.rsrc
Size: 42KB - Virtual size: 41KB