General

Malware Config

Signatures

Files

• 0ad85e423c71eec80fbc1cd975fd6a53_icedid_JC.exe

  .exe windows x86

  070330dc3be59c1cf38f8c5d99225424

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  VirtualAlloc

  HeapReAlloc

  Sleep

  ExitProcess

  HeapSize

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetStdHandle

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  SetHandleCount

  GetFileType

  HeapCreate

  VirtualFree

  QueryPerformanceCounter

  HeapFree

  GetSystemTimeAsFileTime

  GetACP

  IsValidCodePage

  InitializeCriticalSectionAndSpinCount

  GetConsoleCP

  GetConsoleMode

  LCMapStringA

  LCMapStringW

  GetStringTypeA

  GetStringTypeW

  SetStdHandle

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  HeapAlloc

  GetStartupInfoA

  GetCommandLineA

  RaiseException

  RtlUnwind

  SetErrorMode

  CreateFileA

  FlushFileBuffers

  SetFilePointer

  WriteFile

  ReadFile

  WritePrivateProfileStringA

  GetOEMCP

  GetCPInfo

  GlobalFlags

  TlsFree

  DeleteCriticalSection

  LocalReAlloc

  TlsSetValue

  TlsAlloc

  InitializeCriticalSection

  GlobalHandle

  GlobalReAlloc

  EnterCriticalSection

  TlsGetValue

  LeaveCriticalSection

  LocalAlloc

  InterlockedIncrement

  GetModuleHandleW

  CloseHandle

  GetCurrentThread

  ConvertDefaultLocale

  EnumResourceLanguagesA

  GetLocaleInfoA

  InterlockedExchange

  lstrcmpA

  InterlockedDecrement

  GetModuleFileNameW

  GetCurrentProcessId

  GetModuleFileNameA

  FreeResource

  GetCurrentThreadId

  GlobalGetAtomNameA

  GlobalAddAtomA

  GlobalFindAtomA

  GlobalDeleteAtom

  FreeLibrary

  CompareStringA

  LoadLibraryA

  lstrcmpW

  GetModuleHandleA

  GetVersionExA

  GetLastError

  SetLastError

  GlobalFree

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  FormatMessageA

  LocalFree

  MultiByteToWideChar

  MulDiv

  lstrlenA

  LoadLibraryExA

  GetProcAddress

  GetCurrentProcess

  WideCharToMultiByte

  FindResourceA

  LoadResource

  LockResource

  GetTickCount

  SizeofResource

  user32

  UnregisterClassA

  GetSysColorBrush

  DestroyMenu

  SetCursor

  GetMessageA

  TranslateMessage

  ValidateRect

  PostQuitMessage

  GetCursorPos

  WindowFromPoint

  GetDesktopWindow

  GetActiveWindow

  CreateDialogIndirectParamA

  GetNextDlgTabItem

  EndDialog

  GetWindowThreadProcessId

  EndPaint

  BeginPaint

  ReleaseDC

  GetDC

  ClientToScreen

  GrayStringA

  DrawTextExA

  DrawTextA

  TabbedTextOutA

  IsWindowEnabled

  ShowWindow

  MoveWindow

  SetWindowTextA

  IsDialogMessageA

  SetMenuItemBitmaps

  GetMenuCheckMarkDimensions

  LoadBitmapA

  ModifyMenuA

  EnableMenuItem

  CheckMenuItem

  RegisterWindowMessageA

  GetCapture

  SetWindowsHookExA

  CallNextHookEx

  GetClassLongA

  GetClassNameA

  SetPropA

  GetPropA

  RemovePropA

  GetFocus

  SetFocus

  GetWindowTextLengthA

  GetWindowTextA

  GetForegroundWindow

  GetLastActivePopup

  SetActiveWindow

  DispatchMessageA

  GetDlgItem

  GetTopWindow

  DestroyWindow

  UnhookWindowsHookEx

  GetMessageTime

  PeekMessageA

  MapWindowPoints

  GetKeyState

  SetMenu

  SetForegroundWindow

  IsWindowVisible

  UpdateWindow

  PostMessageA

  MessageBoxA

  CreateWindowExA

  GetClassInfoExA

  GetClassInfoA

  AdjustWindowRectEx

  CopyRect

  SetRect

  InflateRect

  OffsetRect

  ScreenToClient

  GetDlgCtrlID

  CallWindowProcA

  GetMenu

  GetWindowLongA

  SetWindowLongA

  SetWindowPos

  WinHelpA

  DrawEdge

  DrawFrameControl

  DrawFocusRect

  SendMessageA

  GetWindowRect

  RedrawWindow

  GetParent

  EnableWindow

  IsWindow

  GetSystemMetrics

  GetSysColor

  PtInRect

  GetClientRect

  InvalidateRect

  SetCapture

  SystemParametersInfoA

  ReleaseCapture

  GetMessagePos

  RegisterClassA

  LoadCursorA

  GetWindowPlacement

  GetWindow

  GetMenuState

  GetMenuItemID

  GetMenuItemCount

  GetSubMenu

  LoadIconA

  IsIconic

  GetSystemMenu

  AppendMenuA

  DrawIcon

  IsRectEmpty

  DefWindowProcA

  SendDlgItemMessageA

  gdi32

  TextOutA

  ExtTextOutA

  Escape

  SetViewportOrgEx

  OffsetViewportOrgEx

  SetViewportExtEx

  ScaleViewportExtEx

  SetWindowExtEx

  ScaleWindowExtEx

  DeleteDC

  RectVisible

  SelectPalette

  PtVisible

  DeleteObject

  Rectangle

  MoveToEx

  LineTo

  SetMapMode

  SetBkMode

  RestoreDC

  SaveDC

  CreateBitmap

  GetObjectA

  SetBkColor

  SetTextColor

  GetClipBox

  BitBlt

  Pie

  Ellipse

  SelectObject

  CreateCompatibleDC

  CreateCompatibleBitmap

  CreateFontA

  CreateSolidBrush

  GetStockObject

  GetTextExtentPoint32A

  RealizePalette

  GetDeviceCaps

  CreatePalette

  CreateFontIndirectA

  CreatePen

  winspool.drv

  DocumentPropertiesA

  OpenPrinterA

  ClosePrinter

  advapi32

  RegSetValueExA

  RegCreateKeyExA

  RegQueryValueA

  RegOpenKeyA

  RegEnumKeyA

  RegDeleteKeyA

  RegOpenKeyExA

  RegQueryValueExA

  RegCloseKey

  shlwapi

  PathFindFileNameA

  PathFindExtensionA

  oleaut32

  VariantClear

  VariantChangeType

  VariantInit

  Sections

  .text

  Size: 164KB - Virtual size: 163KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 46KB - Virtual size: 46KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 9KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 52KB - Virtual size: 51KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ