2023-08-22_07cd1a3988814382bd9c89f9574f33f7_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-22_07cd1a3988814382bd9c89f9574f33f7_icedid_JC.exe
Size

1005KB
MD5

07cd1a3988814382bd9c89f9574f33f7
SHA1

bc38626cc8c1f94d93bc1ba27ba34948fd3ceec1
SHA256

34fff45f761d2d241f88b30159495eb4f8bcd7c2c70256aa7e4b51ea538d4f30
SHA512

8e27e087ad2a0f96c07469c05bc39be012f598758575e836eecf275b6f2be0525b72236de0bad6c85695b5136c0a261b64cfdfbb8e6b4c453ef1f947b2648cb3
SSDEEP

12288:UU/v0/UP4BHx6kCftqTjczMXWUNyLQmRYVVq9Dz9NG6hW42xZSO:j/v0/UP4XaftScocDYV49ne6EFnSO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-22_07cd1a3988814382bd9c89f9574f33f7_icedid_JC.exe

Files

2023-08-22_07cd1a3988814382bd9c89f9574f33f7_icedid_JC.exe
.exe windows x86

1799768327fefe3c293ae50883109b2a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

SetEvent
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateEventW
DeleteCriticalSection
CloseHandle
GetEnvironmentVariableW
CreateProcessW
GetCurrentProcess
GetEnvironmentStringsW
WriteFile
WaitForSingleObject
TerminateProcess
ReadFile
MultiByteToWideChar
GetTempPathW
GetLastError
CreatePipe
FreeEnvironmentStringsW
DuplicateHandle
ResetEvent
FreeLibrary
GetTickCount
LoadLibraryW
TerminateThread
Sleep
GetVersionExW
GetProcAddress
GetCurrentThreadId
GetCommandLineW
CreateMutexW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetFileAttributesW
CreateDirectoryW
GetFullPathNameW
GetModuleFileNameW
GetLocaleInfoW
GetTimeZoneInformation
GetSystemTime
WaitForMultipleObjects
CreateWaitableTimerW
SetWaitableTimer
CancelWaitableTimer
SystemTimeToTzSpecificLocalTime
FindFirstFileW
FindNextFileW
FindClose
GetPrivateProfileSectionW
GetPrivateProfileIntW
SetLastError
LocalAlloc
TlsGetValue
GlobalLock
GlobalReAlloc
GlobalUnlock
GlobalHandle
GlobalAlloc
TlsAlloc
TlsSetValue
LocalReAlloc
GlobalFree
TlsFree
GetModuleHandleW
InterlockedDecrement
SizeofResource
LockResource
LoadResource
FindResourceW
GetCurrentProcessId
WideCharToMultiByte
lstrlenW
InterlockedIncrement
lstrcmpA
lstrlenA
GetVersionExA
lstrcmpW
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GlobalFlags
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetModuleHandleA
InterlockedExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetStartupInfoW
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
RaiseException
HeapSize
ExitProcess
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetStdHandle
GetModuleFileNameA
LCMapStringA
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
CreateFileA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
InterlockedCompareExchange
ReleaseMutex
LocalFree
WritePrivateProfileSectionW
MapViewOfFile
UnmapViewOfFile
OpenProcess
CreateFileMappingA
GetPrivateProfileStringA
WritePrivateProfileStringA
FormatMessageW
GetComputerNameW
SetErrorMode
GetComputerNameA
DeleteFileW
CreateFileW
GetFileSize
CreateThread
ExitThread
FormatMessageA

user32

SetPropW
GetClassNameW
GetClassLongW
GetCapture
WinHelpW
LoadIconW
RegisterWindowMessageW
ClientToScreen
DestroyMenu
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetClientRect
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
GetPropW
GetMessagePos
PtInRect
GetDlgCtrlID
CallWindowProcW
GetMenu
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExW
CallNextHookEx
GetKeyState
ValidateRect
GetMenuState
GetMenuItemID
GetSubMenu
GetWindowThreadProcessId
GetParent
GetLastActivePopup
IsWindowEnabled
UnhookWindowsHookEx
MessageBoxW
RemovePropW
GetForegroundWindow
SetThreadDesktop
CloseDesktop
CloseWindowStation
SetProcessWindowStation
DispatchMessageW
DefWindowProcW
RegisterClassW
CreateWindowExW
TranslateMessage
FindWindowW
PostMessageW
PostQuitMessage
GetMessageW
SetWindowTextW
EnableWindow
SendMessageW
SetDlgItemTextW
IsWindow
CreateDialogParamW
ShowWindow
SetWindowLongW
GetDlgItem
PeekMessageW
GetWindowLongW
IsDialogMessageW
SetForegroundWindow
GetTopWindow
GetMessageTime
MapWindowPoints
DestroyWindow
SetMenu
CopyRect
GetMenuItemCount

gdi32

PtVisible
RectVisible
TextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetDeviceCaps
GetStockObject
GetObjectW
CreateFontIndirectW
SetMapMode
RestoreDC
SaveDC
ExtTextOutW
DeleteObject
SetBkColor
SetTextColor
GetClipBox
CreateBitmap

advapi32

RegCloseKey
DeregisterEventSource
ReportEventW
RegisterEventSourceW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
ControlService
RegisterServiceCtrlHandlerW
SetServiceStatus
QueryServiceStatus
StartServiceW
StartServiceCtrlDispatcherW
RegSetValueExW
QueryServiceConfigW
RegFlushKey
RegOpenKeyExW
ChangeServiceConfigW
RegDeleteValueW
RegQueryValueExW
OpenServiceW
OpenSCManagerW
DeleteService
CloseServiceHandle
CreateServiceW
IsTextUnicode

shell32

ShellExecuteW
CommandLineToArgvW

ws2_32

WSAEnumNetworkEvents
connect
WSAEventSelect
WSACreateEvent
listen
bind
accept
gethostbyname
send
ntohs
select
WSAGetLastError
htons
WSACloseEvent
htonl
setsockopt
getsockopt
ioctlsocket
WSASetLastError
getpeername
inet_ntoa
inet_addr
closesocket
shutdown
recv
WSAStartup
WSACleanup
socket
gethostbyaddr
__WSAFDIsSet

shlwapi

PathRemoveFileSpecW
PathRemoveBackslashW
PathFindFileNameW
PathAddBackslashW

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

oleaut32

VariantChangeType
VariantClear
VariantInit

Sections

.text
Size: 781KB - Virtual size: 781KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1799768327fefe3c293ae50883109b2a

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

ws2_32

shlwapi

iphlpapi

oleacc

winspool.drv

oleaut32

Sections

.text Size: 781KB - Virtual size: 781KB

.rdata Size: 158KB - Virtual size: 157KB

.data Size: 13KB - Virtual size: 34KB

.rsrc Size: 51KB - Virtual size: 50KB

.text
Size: 781KB - Virtual size: 781KB

.rdata
Size: 158KB - Virtual size: 157KB

.data
Size: 13KB - Virtual size: 34KB

.rsrc
Size: 51KB - Virtual size: 50KB