4516e7da67c61b153ae1129dbf887825_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

4516e7da67c61b153ae1129dbf887825_icedid_JC.exe
Size

1.5MB
MD5

4516e7da67c61b153ae1129dbf887825
SHA1

472685ac068540c5ea478951dfd72b9f6d34f520
SHA256

008041e58fde7f7b07f97a9a5e188f872e5e5d4c1592ed1b0035bf8e5e7d5180
SHA512

6a3316e1a49c1aa42c5db83947b38703961e4979b807a9a7107f25a547baf586b3965461c3ccbaa1e5bf20d4e09f88336d592cc855e1014e492cf26cc6badc12
SSDEEP

24576:KfTMkKr2JIkqkL1lzF0E6RaW4dvR7wHF+IE9qT7c5:0TMzryZd3WuCl+1qTo5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4516e7da67c61b153ae1129dbf887825_icedid_JC.exe

Files

4516e7da67c61b153ae1129dbf887825_icedid_JC.exe
.exe windows x86

651ef386542e2f2f1019b7af9a1bb947

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
CompareStringA
CompareStringW
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetCurrentDirectoryA
FreeEnvironmentStringsA
IsBadReadPtr
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetDriveTypeA
GetLocaleInfoW
UnhandledExceptionFilter
HeapSize
FindResourceA
GlobalAddAtomA
GetProfileStringA
InterlockedExchange
GetFileType
SetStdHandle
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitThread
CreateThread
HeapReAlloc
GetDriveTypeW
RaiseException
HeapFree
HeapAlloc
RtlUnwind
GetStartupInfoW
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
FindResourceExW
GetCurrentDirectoryW
GlobalFlags
FindNextFileW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetVolumeInformationW
FindFirstFileW
FindClose
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProfileIntW
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetProcessVersion
GetDiskFreeSpaceW
GetFileTime
SetFileTime
GetFullPathNameW
GetTempFileNameW
GetFileAttributesW
GlobalFree
lstrcmpW
lstrcmpA
lstrcmpiA
GetCurrentThread
GlobalGetAtomNameW
SuspendThread
LoadLibraryA
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
InterlockedDecrement
InterlockedIncrement
MulDiv
GetModuleHandleA
SetLastError
lstrlenA
ExitProcess
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
SetCurrentDirectoryW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
FindResourceW
FlushFileBuffers
WriteFile
ReadFile
SetFilePointerEx
SetEndOfFile
GetFileSizeEx
CreateFileW
MultiByteToWideChar
GetWindowsDirectoryW
GetModuleFileNameW
LeaveCriticalSection
WideCharToMultiByte
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcess
GetTempPathW
CreateDirectoryW
GetFileAttributesExW
GetLongPathNameW
GetShortPathNameW
GetLastError
LocalFree
MoveFileW
DeleteFileW
SetThreadPriority
SetEvent
CreateEventW
Sleep
CreateProcessW
TerminateProcess
GetExitCodeProcess
CloseHandle
FreeLibrary
LoadLibraryW
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
GetVersionExW
lstrcpynW
lstrcpyW
WaitForSingleObject
ResumeThread
GetTickCount
lstrlenW

user32

MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
GetDlgItemInt
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetTopWindow
MessageBoxW
IsChild
WinHelpW
GetClassInfoW
RegisterClassW
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextW
GetDlgCtrlID
DestroyWindow
CreateWindowExW
DefWindowProcW
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SystemParametersInfoW
GetWindowPlacement
wsprintfW
EndPaint
BeginPaint
GetWindowDC
LockWindowUpdate
CheckMenuItem
SetWindowPos
GetMenu
SetMenu
IsIconic
ExitWindowsEx
DestroyIcon
GetMessageW
PeekMessageW
TranslateMessage
DispatchMessageW
InsertMenuW
FindWindowW
GetMenuStringW
CallNextHookEx
keybd_event
SetWindowsHookExW
TrackPopupMenuEx
UnhookWindowsHookEx
GetMenuItemCount
WindowFromPoint
ShowWindow
SetRect
GetCapture
IntersectRect
IsRectEmpty
SetRectEmpty
ReleaseDC
DrawFocusRect
GetSysColor
SetCursor
IsWindowEnabled
SetFocus
RegisterWindowMessageW
GetWindow
CreatePopupMenu
GetMessagePos
RedrawWindow
LoadCursorW
DestroyCursor
UnregisterClassW
GetWindowTextLengthA
GetWindowTextLengthW
HideCaret
ShowCaret
ExcludeUpdateRgn
BeginDeferWindowPos
OffsetRect
EndDeferWindowPos
GetSystemMenu
RemovePropW
GetPropW
CallWindowProcW
SetPropW
SetWindowLongW
GetMenuItemID
GetMenuDefaultItem
LoadIconW
KillTimer
SetTimer
SetParent
InflateRect
ClientToScreen
CheckMenuRadioItem
GetCursorPos
GetNextDlgTabItem
GetClassNameW
CharUpperW
GetDCEx
GetSysColorBrush
ShowOwnedPopups
wvsprintfW
MapDialogRect
GetAsyncKeyState
GetKeyState
DeleteMenu
GetParent
GrayStringW
DrawTextW
TabbedTextOutW
ScreenToClient
InvalidateRect
UpdateWindow
GetFocus
SetCapture
ReleaseCapture
PtInRect
IsWindowVisible
SetActiveWindow
SetForegroundWindow
PostMessageW
LoadMenuW
LoadBitmapW
GetDC
GetWindowRect
GetSubMenu
SetMenuDefaultItem
SendMessageW
EnableWindow
GetClientRect
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
LoadStringW
EndDialog
CreateDialogIndirectParamW
PostQuitMessage
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
GetDesktopWindow
TranslateAcceleratorW
LoadAcceleratorsW
GetActiveWindow
ValidateRect
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
DestroyMenu
EnableMenuItem
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
IsWindow
GetWindowLongW
CopyRect
GetSystemMetrics

gdi32

OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
SetViewportOrgEx
GetDeviceCaps
CreatePen
CreateSolidBrush
CreatePatternBrush
SetRectRgn
GetTextMetricsW
EnumFontFamiliesExW
SetMapMode
CreateRectRgn
CombineRgn
SetTextColor
SetBkMode
SetBkColor
SaveDC
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
StretchDIBits
SetDIBitsToDevice
RestoreDC
CreateDIBSection
DeleteDC
PatBlt
DeleteObject
SelectObject
GetBkMode
GetBkColor
GetTextExtentPoint32W
GetTextColor
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateBitmap
GetStockObject
GetObjectW
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
CreateFontIndirectW

comdlg32

GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueW
RegSetValueExW
RegCreateKeyW
RegSetValueW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegCreateKeyExW
RegDeleteValueW
SetFileSecurityW
GetFileSecurityW
RegEnumKeyExW

shell32

SHGetDesktopFolder
SHGetMalloc
SHGetFileInfoW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderPathW
DragAcceptFiles
DragQueryFileW
DragFinish
ExtractIconW

comctl32

ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_DragEnter
_TrackMouseEvent
ImageList_Draw
ImageList_AddMasked
ImageList_DragLeave
ImageList_DragMove
ImageList_EndDrag
ord17
ImageList_Destroy
ImageList_Create
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_DrawIndirect
ImageList_ReplaceIcon

ole32

CoUninitialize
CoCreateGuid
CoInitialize
CoCreateInstance

oleaut32

SysAllocString
SysFreeString

shlwapi

PathFindExtensionW
PathFileExistsW
PathMakePrettyW
PathFindFileNameW
PathRemoveFileSpecW
PathRenameExtensionW
PathIsRootW
PathIsDirectoryW
PathIsURLW

winhttp

WinHttpQueryHeaders
WinHttpCrackUrl
WinHttpReadData
WinHttpCloseHandle
WinHttpOpen
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpQueryOption
WinHttpSetOption
WinHttpReceiveResponse

Sections

.text
Size: 816KB - Virtual size: 813KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 468KB - Virtual size: 464KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

651ef386542e2f2f1019b7af9a1bb947

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

shlwapi

winhttp

Sections

.text Size: 816KB - Virtual size: 813KB

.rdata Size: 128KB - Virtual size: 125KB

.data Size: 100KB - Virtual size: 117KB

.rsrc Size: 468KB - Virtual size: 464KB

.text
Size: 816KB - Virtual size: 813KB

.rdata
Size: 128KB - Virtual size: 125KB

.data
Size: 100KB - Virtual size: 117KB

.rsrc
Size: 468KB - Virtual size: 464KB