9440554c7b7319c3ae257a7675c052d9_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

9440554c7b7319c3ae257a7675c052d9_icedid_JC.exe
Size

436KB
MD5

9440554c7b7319c3ae257a7675c052d9
SHA1

3d7da864136b48d0809d8abd2958157131cc97a5
SHA256

75d9286b7135548997c871ed185233ed832a7ee7b297b699fe8412b980aeb63e
SHA512

ea1668a28bfdb4da441dd9cddd9007d5de65c9954cca6ed4b3bb1a6ae5f21b6d70fe5fc9145b4c07c1457becf55e0840db0eda267ff8eb6aeffa526513e04a1f
SSDEEP

6144:kOaTPvInHW5CSWxMgThyAEb8MXJ11ZrBMjFd9g+/7:kOIvI2wxVEbT1ZrBoFp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9440554c7b7319c3ae257a7675c052d9_icedid_JC.exe

Files

9440554c7b7319c3ae257a7675c052d9_icedid_JC.exe
.exe windows x86

852b2ac2b3b74b47bf48773a8834f053

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shfolder

SHGetFolderPathA

kernel32

HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetStartupInfoA
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
RtlUnwind
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
TerminateProcess
ExitProcess
SetErrorMode
GetOEMCP
GetCPInfo
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalFlags
InterlockedIncrement
GetCurrentDirectoryA
WritePrivateProfileStringA
InterlockedDecrement
SetLastError
GlobalFree
MulDiv
FormatMessageA
LocalFree
FreeResource
GlobalFindAtomA
lstrcatA
lstrcmpW
lstrcpynA
GlobalUnlock
GlobalGetAtomNameA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
CloseHandle
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadResource
LockResource
SizeofResource
FindResourceA
GetLastError
lstrlenA
lstrcmpiA
WideCharToMultiByte
CompareStringA
CompareStringW
MultiByteToWideChar
GetVersion
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetCommandLineA
FreeEnvironmentStringsW
SetCurrentDirectoryA

user32

GetMenuItemInfoA
InflateRect
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
ReleaseDC
GetDC
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetWindowTextA
IsDialogMessageA
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
GetClientRect
DeferWindowPos
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
PtInRect
RegisterWindowMessageA
LoadMenuA
DestroyMenu
GetClassNameA
GetSysColor
SetWindowPos
WinHelpA
SetFocus
EqualRect
GetDlgItem
SetWindowLongA
GetMenu
UnpackDDElParam
ReuseDDElParam
MessageBoxA
EnumDisplaySettingsA
GetWindowThreadProcessId
FindWindowExA
EnableWindow
CharUpperA
SendMessageA
GetSystemMetrics
LoadBitmapA
RedrawWindow
LoadIconA
GetClassInfoA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
InsertMenuItemA
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
BringWindowToTop
SetMenu
ShowWindow
IsWindow
GetDesktopWindow
GetWindow
TranslateAcceleratorA
GetDlgCtrlID
IsChild
InvalidateRect
UpdateWindow
IsIconic
AdjustWindowRectEx
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetMenuState
ScreenToClient
SetTimer
KillTimer
SetForegroundWindow
wsprintfA
PostQuitMessage
PostMessageA
SetCursor
ShowOwnedPopups
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA

gdi32

CreateSolidBrush
CreateFontIndirectA
GetTextExtentPoint32A
GetStockObject
CreatePatternBrush
DeleteDC
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SelectObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
CreateCompatibleDC
GetObjectA
GetPixel
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
SetBkColor
SetTextColor
GetClipBox
CreateCompatibleBitmap
CreateBitmap
BitBlt
SetViewportOrgEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegDeleteKeyA
RegCreateKeyExA

shell32

DragQueryFileA
DragFinish

comctl32

ImageList_Draw
ImageList_GetImageInfo
ord17
ImageList_Destroy

shlwapi

PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathIsUNCA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 252KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

852b2ac2b3b74b47bf48773a8834f053

Headers

File Characteristics

Imports

shfolder

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Sections

.text Size: 132KB - Virtual size: 131KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 8KB - Virtual size: 20KB

.rsrc Size: 252KB - Virtual size: 248KB

.text
Size: 132KB - Virtual size: 131KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 8KB - Virtual size: 20KB

.rsrc
Size: 252KB - Virtual size: 248KB