80eb8b555c2f8b52b53dacb05aab3d00_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
80eb8b555c2f8b52b53dacb05aab3d00_icedid_JC.exe
Size 1016KB
Sample230824-sp1pwsdd64
SHA256 24bd618853e87a3f81a949d0426b34cdbd0c39025872fd391d9b3163a9abea3c
MD5 80eb8b555c2f8b52b53dacb05aab3d00
SHA1 f3b0a9cac8575919cadc1e38a22e005e75bb9466
SHA512 16a240f4c3235f48ff6d96204495860e042e1a4abd3e3831e22d040111a057e6519ce2865e962e7a33cc28b838f9e84d2afe23b13a121124087daecfdcbea3b6
SSDEEP 12288:IyiP4NKFqoxWAB0bJXDAReMWHD5QlA6WkO0fI2uBafN7Uio7nbFOU2EVrOyR:NE4NKFqh3zAGHF8u0Uk76rbF52EQ0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
80eb8b555c2f8b52b53dacb05aab3d00_icedid_JC.exe

File Explorer

80eb8b555c2f8b52b53dacb05aab3d00_icedid_JC.exe

.exe 1016KB

80eb8b555c2f8b52b53dacb05aab3d00_icedid_JC.exe

IMPHASH 32fb603eacde131439274043836f2c75
SHA256 24bd618853e87a3f81a949d0426b34cdbd0c39025872fd391d9b3163a9abea3c
MD5 80eb8b555c2f8b52b53dacb05aab3d00
SHA1 f3b0a9cac8575919cadc1e38a22e005e75bb9466
SHA512 16a240f4c3235f48ff6d96204495860e042e1a4abd3e3831e22d040111a057e6519ce2865e962e7a33cc28b838f9e84d2afe23b13a121124087daecfdcbea3b6
SSDEEP 12288:IyiP4NKFqoxWAB0bJXDAReMWHD5QlA6WkO0fI2uBafN7Uio7nbFOU2EVrOyR:NE4NKFqh3zAGHF8u0Uk76rbF52EQ0
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

432061

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

InternetCloseHandle HttpOpenRequestW HttpQueryInfoW InternetSetOptionW HttpSendRequestW InternetReadFile InternetCanonicalizeUrlW InternetOpenW InternetConnectW

kernel32

CompareStringW GetSystemDefaultUILanguage GetUserDefaultUILanguage TlsAlloc TlsGetValue TlsSetValue TlsFree GlobalReAlloc GlobalHandle LocalReAlloc GlobalGetAtomNameW GetFileTime GetFullPathNameW GetUserDefaultLCID FindClose FlushFileBuffers GetFileSize GetVolumeInformationW LockFile SetEndOfFile SetFilePointer UnlockFile DuplicateHandle GlobalFlags FileTimeToLocalFileTime GetFileAttributesExW GetFileSizeEx SetErrorMode IsDebuggerPresent IsProcessorFeaturePresent RtlUnwind VirtualProtect VirtualQuery GetModuleHandleExW AreFileApisANSI HeapQueryInformation GetStdHandle GetFileType GetStartupInfoW GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter GetConsoleMode ReadConsoleW IsValidCodePage GetOEMCP GetCPInfo GetStringTypeW GetTimeZoneInformation OutputDebugStringW LCMapStringW IsValidLocale EnumSystemLocalesW GetConsoleCP SetFilePointerEx SetStdHandle WriteConsoleW SetEnvironmentVariableA FormatMessageW GetTickCount WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW lstrcmpA MulDiv GlobalAlloc GlobalFree GlobalUnlock GlobalLock GlobalFindAtomW GlobalAddAtomW lstrcmpW GlobalDeleteAtom LoadLibraryExW FreeResource FreeLibrary GetSystemDirectoryW GetCurrentThreadId EncodePointer LoadLibraryA SetLastError OutputDebugStringA GetACP GetCurrentProcessId ReadProcessMemory GetNativeSystemInfo GetLongPathNameW GetTempPathW QueryPerformanceFrequency GetSystemInfo GlobalMemoryStatusEx GetLogicalProcessorInformation IsWow64Process LocalAlloc lstrlenW FileTimeToSystemTime GetVersionExW LoadLibraryW GetCurrentThread QueryPerformanceCounter GetCurrentProcess GetComputerNameA CreateProcessW DeviceIoControl GetDiskFreeSpaceW GetLogicalDrives GetDriveTypeW GetSystemTimeAsFileTime FindFirstFileW GetLocaleInfoW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteFileW ReadFile MultiByteToWideChar WideCharToMultiByte LocalFree GetCommandLineW GetFileAttributesW CreateDirectoryExW CreateThread lstrcpyW CloseHandle CreateToolhelp32Snapshot lstrcatW LoadLibraryExA GetModuleHandleA Process32NextW WaitForMultipleObjects LockResource Process32FirstW VirtualAlloc GetProcAddress lstrcmpiA ExitThread CreateFileW TerminateProcess GetExitCodeProcess SizeofResource OpenProcess WriteFile GetModuleHandleW WaitForSingleObject CreateDirectoryW InterlockedDecrement InterlockedIncrement LoadResource FindResourceW ExitProcess GetModuleFileNameW Sleep DeleteCriticalSection DecodePointer HeapSize GetLastError RaiseException InitializeCriticalSectionAndSpinCount GetProcessHeap HeapFree HeapAlloc HeapReAlloc GetThreadLocale

user32

ReuseDDElParam GetNextDlgGroupItem MessageBeep PostThreadMessageW InflateRect GetMenuItemInfoW DestroyMenu GetSysColorBrush RealChildWindowFromPoint WindowFromPoint EndPaint BeginPaint GetWindowDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW LoadMenuW RegisterClipboardFormatW TranslateMessage GetMessageW MapDialogRect SetWindowContextHelpId ShowOwnedPopups PostQuitMessage IsRectEmpty OffsetRect FillRect ClientToScreen GetCursorPos SetWindowRgn DrawIcon KillTimer SetTimer ReleaseCapture SetCapture InvalidateRect IsIconic IsDialogMessageW MoveWindow GetDesktopWindow GetActiveWindow GetNextDlgTabItem EndDialog CreateDialogIndirectParamW GetMonitorInfoW MonitorFromWindow UnpackDDElParam GetScrollInfo SetScrollInfo CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetWindow GetLastActivePopup GetTopWindow GetClassNameW GetClassLongW PtInRect EqualRect CopyRect GetSysColor MapWindowPoints ScreenToClient AdjustWindowRectEx GetWindowTextLengthW GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow RedrawWindow ValidateRect SetForegroundWindow GetForegroundWindow SetActiveWindow UpdateWindow TrackPopupMenu GetMenuItemCount GetMenuItemID GetSubMenu SetMenu GetMenu GetCapture GetKeyState GetDlgCtrlID IsWindowVisible EndDeferWindowPos DeferWindowPos BeginDeferWindowPos DestroyWindow IsChild GetClassInfoExW GetClassInfoW RegisterClassW DefWindowProcW GetMessageTime GetMessagePos PeekMessageW DispatchMessageW RegisterWindowMessageW IsWindowEnabled SetFocus IsWindow SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem GetFocus SendDlgItemMessageA SetCursor RemovePropW InsertMenuItemW CreatePopupMenu TranslateAcceleratorW LoadAcceleratorsW BringWindowToTop CharNextW CharUpperW SetRectEmpty LoadCursorW LoadBitmapW IntersectRect SetRect InvalidateRgn CopyAcceleratorTableW WinHelpW LoadIconW GetWindowRect GetClientRect SetPropW GetWindowLongW SetWindowLongW SetWindowPos ShowWindow CreateWindowExW GetPropW CallWindowProcW GetDC SystemParametersInfoW ReleaseDC wsprintfA GetWindowTextW GetDlgItem SetWindowTextW LoadStringW EnumWindows wsprintfW MessageBoxW SendMessageW GetWindowThreadProcessId PostMessageW GetParent GetSystemMetrics EnableWindow UnregisterClassW ShowScrollBar

gdi32

TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetBkMode SetWindowOrgEx OffsetViewportOrgEx CreateRectRgnIndirect GetRgnBox CreateCompatibleBitmap GetBkColor GetTextColor GetMapMode ScaleViewportExtEx ExtSelectClipRgn SaveDC SetMapMode BitBlt SetTextColor SetBkColor CreateBitmap GetStockObject DeleteDC GetObjectW GetTextExtentPoint32W GetTextMetricsW CreateFontIndirectW DeleteObject ScaleWindowExtEx SelectObject RestoreDC RectVisible PtVisible GetWindowExtEx GetViewportExtEx GetPixel GetClipBox Escape CreateSolidBrush CreatePatternBrush GetDeviceCaps LPtoDP CreateDIBSection Ellipse CreateEllipticRgn CreateCompatibleDC

comdlg32

GetSaveFileNameW

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

advapi32

GetTokenInformation RegEnumValueW RegQueryValueW RegEnumKeyW RegDeleteValueW RegDeleteKeyW GetUserNameA AllocateAndInitializeSid OpenThreadToken OpenProcessToken RegSetValueExW RegCloseKey RegEnumKeyExW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegCreateKeyExW CheckTokenMembership FreeSid

shell32

ShellExecuteExW CommandLineToArgvW SHGetFolderPathW ShellExecuteW DragFinish DragQueryFileW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW PathRemoveFileSpecW PathIsUNCW PathFindFileNameW PathStripToRootW

ole32

OleUninitialize OleInitialize CoFreeUnusedLibraries CLSIDFromProgID CLSIDFromString CoCreateGuid OleDraw CoTaskMemFree CoInitializeEx CoSetProxyBlanket CoInitializeSecurity CoInitialize CoUninitialize CoCreateInstance CoRegisterMessageFilter OleIsCurrentClipboard OleFlushClipboard CoRevokeClassObject CoTaskMemAlloc CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject CoDisconnectObject CreateStreamOnHGlobal

oleaut32

SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen VariantCopy VariantChangeType VariantInit SysAllocStringLen SysFreeString VariantClear LoadTypeLi OleCreateFontIndirect SysAllocString

oledlg

OleUIBusyW

gdiplus

GdiplusShutdown

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject