834c43c4c49e21724d342cc05e8927dd_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

834c43c4c49e21724d342cc05e8927dd_icedid_JC.exe
Size

8.8MB
MD5

834c43c4c49e21724d342cc05e8927dd
SHA1

3b18bac989e5005726a61dc91e7ebd776394f4de
SHA256

a53d09906ff949fbe21b80df657eff467f1d37d9a43ec52a5484bd9b77bb9806
SHA512

c5394010203bede707fbd754e1c52942d265192e03c884b1b09e0d9ccb53955fd111c07bc069bd458c1ca62bcdae4411c1e0d5ceac80b5b41c502906a2084247
SSDEEP

196608:mxDs98yYp8QX8Cp8G3b8Oh8SJx5cLH7uqENKoXwLaI2GETlFzQ8:T98hp8QX8Cp8Gr8Oh8dbwdALa0ETlFM8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
834c43c4c49e21724d342cc05e8927dd_icedid_JC.exe

Files

834c43c4c49e21724d342cc05e8927dd_icedid_JC.exe
.exe windows x86

d1cd9c5c6708507aac516a541e8bf390

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasHangUpA

winmm

midiOutPrepareHeader

ws2_32

select

kernel32

SetFilePointer

user32

ValidateRect

gdi32

TextOutA

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

OleRun

oleaut32

RegisterTypeLi

comctl32

ImageList_Destroy

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 720KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 96KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 756KB - Virtual size: 756KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1cd9c5c6708507aac516a541e8bf390

Headers

File Characteristics

Imports

rasapi32

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

msvcrt

iphlpapi

psapi

Sections

.text Size: 720KB - Virtual size: 720KB

.rdata Size: 7.2MB - Virtual size: 7.2MB

.data Size: 96KB - Virtual size: 384KB

.rsrc Size: 52KB - Virtual size: 52KB

.sedata Size: 756KB - Virtual size: 756KB

.idata Size: 4KB - Virtual size: 4KB

.sedata Size: 4KB - Virtual size: 4KB

.text
Size: 720KB - Virtual size: 720KB

.rdata
Size: 7.2MB - Virtual size: 7.2MB

.data
Size: 96KB - Virtual size: 384KB

.rsrc
Size: 52KB - Virtual size: 52KB

.sedata
Size: 756KB - Virtual size: 756KB

.idata
Size: 4KB - Virtual size: 4KB

.sedata
Size: 4KB - Virtual size: 4KB