c0e9e5c5398402d294c022bb0e307dc6_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

c0e9e5c5398402d294c022bb0e307dc6_icedid_JC.exe
Size

448KB
MD5

c0e9e5c5398402d294c022bb0e307dc6
SHA1

cf474a060097258bcf7f0fd2548273fb131e9967
SHA256

7bc2158e6633331f2ed52d68a4ab56d0798d3ab89685633da8b3be75a1058bcb
SHA512

3236f5102ab5844852bc7bef559b04d6724b9ed4be9f29e478887e64085d8544ac05053efe71767d16ce93b8eb74f2f0b8b95b7a20725e579b033959f7b9d7cc
SSDEEP

12288:2sFAVvcSYWBM/qSapi3J9zND6uu2898oH/X3Rw:FF00SVC/qNpi3J9ZOuun8gy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c0e9e5c5398402d294c022bb0e307dc6_icedid_JC.exe

Files

c0e9e5c5398402d294c022bb0e307dc6_icedid_JC.exe
.exe windows x86

47bb701f21f1904831293d051517c7a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
VirtualAlloc
VirtualQuery
HeapSize
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
SetStdHandle
LCMapStringA
LCMapStringW
GetDriveTypeA
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapAlloc
CreateDirectoryW
TerminateProcess
HeapFree
ExitProcess
RtlUnwind
GetStartupInfoW
GetTickCount
GetFileTime
GetFileAttributesW
SetErrorMode
FindResourceExW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
GlobalFlags
InterlockedIncrement
GetCurrentDirectoryW
InterlockedDecrement
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
UnlockFile
LockFile
FlushFileBuffers
WriteFile
ReadFile
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalFindAtomW
lstrlenA
LoadLibraryA
GetVersionExA
FreeResource
GlobalFree
VirtualProtect
GlobalUnlock
GetModuleHandleA
SetLastError
GlobalAddAtomW
GetCurrentThread
GetCurrentThreadId
MultiByteToWideChar
GlobalLock
lstrcmpW
GlobalAlloc
GlobalDeleteAtom
WideCharToMultiByte
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
LoadLibraryW
MulDiv
LocalAlloc
FindResourceW
LoadResource
LockResource
SizeofResource
OutputDebugStringW
CreateFileW
FormatMessageW
LocalFree
SetFilePointer
CloseHandle
SetEndOfFile
FindFirstFileW
DeleteFileW
FindNextFileW
GetLastError
FindClose
lstrcmpiW
lstrcpynW
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetVersionExW
GetModuleHandleW
GetProcAddress
GetSystemInfo
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetModuleFileNameW
lstrcpyW
lstrcatW
IsBadWritePtr
GetPrivateProfileIntW

user32

PostThreadMessageW
DestroyMenu
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
SetRect
IsRectEmpty
CharNextW
GetSysColorBrush
LoadCursorW
CharUpperW
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
RegisterWindowMessageW
WinHelpW
CreateWindowExW
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageA
IsWindow
IsChild
GetForegroundWindow
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconW
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
GetClassInfoW
RegisterClassW
DefWindowProcW
CallWindowProcW
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
PtInRect
GetWindowTextW
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetWindow
SetWindowContextHelpId
MapDialogRect
ShowWindow
SetActiveWindow
GetAsyncKeyState
SetFocus
GetDlgItem
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetMenuItemBitmaps
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
SetWindowsHookExW
CallNextHookEx
GetMessageW
RegisterClipboardFormatW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
MessageBoxW
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
SetCursor
GetSysColor
ReleaseCapture
EqualRect
GetWindowLongW
SetCapture
GetCapture
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
OffsetRect
CopyRect
SetWindowPos
PostMessageW
EnableWindow
GetParent
GetWindowRect
wsprintfW
SendMessageW
UnregisterClassW

gdi32

GetMapMode
DPtoLP
EnumFontFamiliesExW
GetBkColor
GetRgnBox
CreateRectRgnIndirect
GetTextColor
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
ExtTextOutW
GetDeviceCaps
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateFontIndirectW
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
DeleteObject
SelectObject
GetStockObject
GetObjectW
Escape

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW

comctl32

PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ord17

shlwapi

PathIsNetworkPathW
PathFindFileNameW
PathStripToRootW
PathIsRootW
PathFindExtensionW
PathIsUNCW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject

oleaut32

VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString

winmm

mixerGetControlDetailsW
mixerOpen
mixerGetLineInfoW
mixerGetLineControlsW
mixerClose
mixerGetDevCapsW
mixerGetNumDevs

Sections

.text
Size: 192KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47bb701f21f1904831293d051517c7a5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

oledlg

ole32

oleaut32

winmm

Sections

.text Size: 192KB - Virtual size: 190KB

.rdata Size: 56KB - Virtual size: 52KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 184KB - Virtual size: 180KB

.text
Size: 192KB - Virtual size: 190KB

.rdata
Size: 56KB - Virtual size: 52KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 184KB - Virtual size: 180KB