46bf345b38ce8c83cf644e386bbedeaa_hacktools_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

46bf345b38ce8c83cf644e386bbedeaa_hacktools_icedid_JC.exe
Size

4.2MB
MD5

46bf345b38ce8c83cf644e386bbedeaa
SHA1

925611a17e4fb250f5892f3a4eed658bd5b01958
SHA256

0f0ed72621eea1b2ed7dbe4e013274112901e5eae16f23f358e3ad153d55ef2b
SHA512

1b835a79cf941031ca8673992e2410e6147eeb8e59c9a3091674c622ebe4c3d1a0be9f50504c745753f29e3f8770f9aa817b6c565bed990b0df3cf1d85ed69e2
SSDEEP

49152:XZ8GeBSu5uVcOqmOBcj5cXbOkES2aYgox+xVTfGfo3+USkkEymZY7Q917ogpTsQ/:XOR0QuVNqxvEmox+bfNuWkEUyol6L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46bf345b38ce8c83cf644e386bbedeaa_hacktools_icedid_JC.exe

Files

46bf345b38ce8c83cf644e386bbedeaa_hacktools_icedid_JC.exe
.exe windows x86

57b540b99fbfb76cbdcaf7848a36fde7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

winmm

PlaySoundA

crypt32

CertCloseStore
CertOpenStore
CertFindCertificateInStore
CertFreeCertificateContext
CertSetCertificateContextProperty
CertGetSubjectCertificateFromStore
CertNameToStrW
CryptDecodeObject
CertEnumCertificatesInStore
CertGetCertificateContextProperty
CertCreateCertificateContext
CryptMsgControl
CryptMsgGetParam
CryptMsgClose
CryptMsgUpdate
CryptMsgOpenToDecode
CryptDecryptMessage
CryptSignMessage
CryptEncodeObject
CryptVerifyMessageSignature
CryptVerifyDetachedMessageSignature
CryptEncryptMessage
CertDuplicateCertificateContext

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

SetErrorMode
GetSystemDirectoryW
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
GetCPInfo
IsDebuggerPresent
GetTimeFormatA
GetCommandLineA
GetStartupInfoA
ExitProcess
VirtualAlloc
VirtualQuery
IsValidCodePage
LCMapStringA
LCMapStringW
VirtualFree
GetStdHandle
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetProcessHeap
EnumResourceTypesA
EnumResourceNamesA
TerminateThread
GetExitCodeThread
lstrcpynA
GetModuleHandleW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
InterlockedIncrement
VirtualProtect
GetShortPathNameA
GetCurrentProcess
DuplicateHandle
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetTempFileNameA
GetPrivateProfileIntA
GetFileSizeEx
GetFileAttributesExA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
lstrlenA
FreeResource
GlobalAddAtomA
WaitForSingleObject
ResumeThread
SetThreadPriority
SetLastError
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
LoadLibraryExA
CompareStringA
InterlockedExchange
lstrcmpA
AreFileApisANSI
GetCurrentProcessId
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
GetDiskFreeSpaceW
LockFileEx
HeapSize
FlushFileBuffers
MultiByteToWideChar
HeapValidate
HeapCreate
HeapDestroy
FormatMessageW
LoadLibraryW
GetSystemTimeAsFileTime
UnlockFileEx
LockFile
UnlockFile
InterlockedCompareExchange
HeapFree
QueryPerformanceCounter
HeapAlloc
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateMutexW
HeapReAlloc
CreateThread
CreateFileW
GetVersionExA
GetTimeZoneInformation
GetFileSize
WriteFile
ReadFile
SetFileTime
GetFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateFileA
GetFileAttributesA
CreateDirectoryA
FindFirstFileA
FindNextFileA
FindClose
SetFileAttributesW
GetFileAttributesW
SetFilePointer
DeleteFileW
MoveFileA
GetModuleFileNameW
GetTempPathA
GetTempPathW
GetCurrentDirectoryW
GetFullPathNameA
GetFullPathNameW
GetComputerNameA
GetOEMCP
GetACP
GetSystemTime
CompareFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
ExpandEnvironmentStringsA
Sleep
GetProfileIntA
SearchPathA
GetCurrentDirectoryA
SetCurrentDirectoryA
FileTimeToLocalFileTime
FileTimeToSystemTime
MulDiv
InterlockedDecrement
GlobalFree
CopyFileA
FormatMessageA
LocalFree
SetFileAttributesA
GetTickCount
GetSystemDirectoryA
GetLocalTime
GetDateFormatA
GetLocaleInfoA
GetCurrencyFormatA
LoadLibraryA
GetProcAddress
FreeLibrary
GetVolumeInformationA
DeleteFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
GlobalAlloc
GlobalLock
GlobalUnlock
CreateMutexA
GetLastError
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
CloseHandle
SetUnhandledExceptionFilter

user32

GetSysColorBrush
SetRectEmpty
IsZoomed
EndPaint
BeginPaint
GetWindowDC
SetRect
CharUpperA
GetMenuItemInfoA
MapVirtualKeyA
GetKeyNameTextA
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetClassInfoExA
GetClassInfoA
UnregisterClassA
ScreenToClient
EqualRect
DeferWindowPos
InsertMenuItemA
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
IntersectRect
GetWindowPlacement
GetWindow
UnhookWindowsHookEx
GetMenuStringA
InsertMenuA
PostThreadMessageA
RemoveMenu
GetDesktopWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
EndDialog
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
ShowOwnedPopups
SetWindowsHookExA
CallNextHookEx
GetMessageA
IsWindowVisible
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostQuitMessage
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetCapture
GetAsyncKeyState
CreateWindowExA
SetWindowPos
GetMenuItemCount
GetMenuItemID
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
GetSystemMenu
GetDCEx
RedrawWindow
SetFocus
ReuseDDElParam
UnpackDDElParam
CharNextA
DeleteMenu
GetScrollInfo
GetDialogBaseUnits
LockWindowUpdate
RegisterClassA
SetActiveWindow
SetParent
ReleaseCapture
AdjustWindowRectEx
GetSystemMetrics
PtInRect
SetCapture
SetWindowRgn
IsIconic
DrawIcon
IsRectEmpty
FindWindowA
RegisterWindowMessageA
KillTimer
SetTimer
BringWindowToTop
SystemParametersInfoA
LoadIconA
LoadCursorA
GetKeyState
TranslateMDISysAccel
DrawMenuBar
DefFrameProcA
GetDoubleClickTime
SendMessageTimeoutA
GetCursor
GetKeyboardLayout
MapVirtualKeyExA
GetCursorPos
LoadBitmapA
DestroyMenu
LoadMenuA
DestroyCursor
LoadImageA
GetSubMenu
TrackPopupMenuEx
PostMessageA
SetCursor
GetWindowLongA
WindowFromPoint
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
DrawFocusRect
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
GetIconInfo
CreateIconIndirect
DrawStateA
GetDC
ReleaseDC
DestroyIcon
GetParent
LoadStringA
GetSysColor
GetClientRect
MessageBoxA
SendMessageA
GetWindowRect
AppendMenuA
CreatePopupMenu
GetFocus
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
PeekMessageA
TranslateMessage
IsCharLowerA
GetKeyboardLayoutList
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
GetMenuDefaultItem
CopyIcon
DrawIconEx
SetCursorPos
GetMenuStringW
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
HideCaret
ShowCaret
IsMenu
GetWindowRgn
DrawFrameControl
InvertRect
DrawEdge
IsClipboardFormatAvailable
DispatchMessageA
LoadAcceleratorsA
EnableWindow
UpdateWindow
TranslateAcceleratorA
GetMenu

gdi32

CreatePen
GetTextMetricsA
GetTextColor
GetRgnBox
CreateFontA
EnumFontFamiliesExA
RestoreDC
SelectPalette
SetStretchBltMode
RealizePalette
CreateDIBitmap
CreateEllipticRgn
DPtoLP
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
StretchDIBits
LPtoDP
Ellipse
RoundRect
CreatePolygonRgn
GetWindowOrgEx
GetViewportOrgEx
GetBitmapBits
Rectangle
SetDIBits
GetDIBits
ExtCreateRegion
PtInRegion
CreateDIBSection
GetCurrentObject
StretchBlt
Polygon
SetBrushOrgEx
SaveDC
CreatePatternBrush
CombineRgn
SetRectRgn
CreateRectRgn
GetTextExtentPoint32A
CreateRectRgnIndirect
GetClipBox
CreateDCA
Escape
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
PatBlt
CreateFontIndirectA
CreateSolidBrush
DeleteObject
GetStockObject
DeleteDC
SetTextColor
BitBlt
SetBkColor
SelectObject
CreateCompatibleDC
CreateBitmap
SetPixel
GetPixel
CreateCompatibleBitmap
GetObjectA
ExtTextOutA
CreatePalette
GetDeviceCaps
SetBkMode

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ord201
ClosePrinter

advapi32

CryptExportKey
RegSetValueExA
RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegSetValueA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
CryptGetUserKey
CryptDestroyKey
RegCloseKey
CryptGetProvParam
CryptEnumProvidersA
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegDeleteValueA
CryptAcquireContextA
GetUserNameA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyExA

shell32

SHGetFileInfoA
ExtractIconA
DragQueryFileA
DragFinish
ShellExecuteExA
SHGetFolderPathA
ShellExecuteA

comctl32

_TrackMouseEvent
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy

shlwapi

PathIsUNCA
PathStripToRootA
PathRemoveExtensionA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW

oledlg

ord1
ord8

ole32

CoDisconnectObject
CoInitializeEx
CoCreateInstance
CoUninitialize
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoGetClassObject
CoInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoCreateGuid

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
VarUdateFromDate
SysFreeString
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SysAllocString
OleCreateFontIndirect
LoadTypeLi
VariantCopy
SafeArrayDestroy

ws2_32

connect
htons
inet_addr
gethostbyname
getsockname
select
ntohs
WSAStartup
socket
WSAGetLastError
ioctlsocket
setsockopt
__WSAFDIsSet
bind
gethostname
closesocket
shutdown
send
recv
inet_ntoa

imagehlp

MakeSureDirectoryPathExists

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 959KB - Virtual size: 959KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

57b540b99fbfb76cbdcaf7848a36fde7

Headers

DLL Characteristics

File Characteristics

Imports

winmm

crypt32

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

imagehlp

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 959KB - Virtual size: 959KB

.data Size: 107KB - Virtual size: 142KB

.rsrc Size: 286KB - Virtual size: 285KB

.adata Size: 68KB - Virtual size: 114KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 959KB - Virtual size: 959KB

.data
Size: 107KB - Virtual size: 142KB

.rsrc
Size: 286KB - Virtual size: 285KB

.adata
Size: 68KB - Virtual size: 114KB