2023-08-22_ed08d63dbd1186ba8d363aca32ac7b23_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-22_ed08d63dbd1186ba8d363aca32ac7b23_icedid_JC.exe
Size

7.8MB
MD5

ed08d63dbd1186ba8d363aca32ac7b23
SHA1

7f012d0c2973aae14e178849a30ff6f784fb3074
SHA256

8516f8b112b228616c20eb316918348eb861be207cde5a8f54309b81b834b750
SHA512

566139b5355cb8e122b92d0a60f4edf374dc9854a178e16907d521b14b6709c8d7ddf4eabfa8195007d8dad0c0ee56020287cf5cc7703759f138eea94ae45f83
SSDEEP

196608:qOGV0m2YgHJKLkvyUQYUV0XPA3DdFuDZuwtfOh+KnRwDL2JLw5PijZbcPQy:WVlSHfXPASAM2h+KnRwDL25bad

Score

1^/10

Malware Config

Signatures

Files

2023-08-22_ed08d63dbd1186ba8d363aca32ac7b23_icedid_JC.exe
.exe windows x86

17fcfd509e0fbb0e39f387ba04568dc4

Code Sign

07
Certificate

Issuer

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

75:ad:78:56:33:72:47:b8
Certificate

Issuer

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

17/02/2020, 15:54

Not After

17/04/2021, 22:23

Subject

CN=Landsman David,O=Landsman David,L=Yoqneam Illit,C=IL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

93:93:77:35:c6:94:9f:da:bb:5c:22:7d:f2:67:6a:f9:ef:e2:bd:1b
Signer

Actual PE Digest

93:93:77:35:c6:94:9f:da:bb:5c:22:7d:f2:67:6a:f9:ef:e2:bd:1b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
CreateFileA
WriteConsoleA
GetConsoleOutputCP
SetConsoleCtrlHandler
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
SetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
SetStdHandle
HeapSize
SetConsoleMode
ReadConsoleInputA
FlushConsoleInputBuffer
VirtualQuery
FindFirstFileA
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleW
RaiseException
MulDiv
lstrlenW
SetLastError
GetLastError
LoadLibraryW
lstrcpyW
WinExec
lstrcatW
WideCharToMultiByte
GlobalFree
GlobalReAlloc
GlobalAlloc
QueryPerformanceCounter
GetTickCount
ResumeThread
CreateEventW
CloseHandle
Sleep
WaitForSingleObject
SetEvent
FreeLibrary
GlobalUnlock
GlobalLock
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
lstrlenA
GetUserDefaultLCID
DuplicateHandle
GetCurrentProcess
SetThreadExecutionState
CreateDirectoryW
MoveFileW
DeleteFileW
GetTimeFormatW
GetDateFormatW
GetCurrentThreadId
VirtualAlloc
VirtualProtect
ExitProcess
GetStdHandle
GetFileType
WriteConsoleW
GetConsoleMode
GetConsoleCP
CreateThread
ExitThread
GetDateFormatA
GetTimeFormatA
IsDebuggerPresent
UnhandledExceptionFilter
HeapReAlloc
GetSystemTimeAsFileTime
RtlUnwind
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
SetErrorMode
GlobalFlags
TlsFree
LocalReAlloc
LocalFree
FormatMessageW
TlsSetValue
TlsAlloc
TlsGetValue
GetTempFileNameW
LocalAlloc
FindNextFileW
SuspendThread
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetStringTypeExW
lstrcmpiW
GetSystemDirectoryW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
LoadLibraryExW
CompareStringA
GlobalGetAtomNameW
lstrcmpA
GetPrivateProfileIntW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetVersionExA
GetModuleHandleA
FreeResource
WritePrivateProfileStringW
GetPrivateProfileStringW
GetLocaleInfoW
GlobalSize
GetThreadLocale
LoadLibraryA
GetSystemInfo
InterlockedExchange
TerminateThread
GetExitCodeThread
GetProcessId
OpenThread
CreateProcessW
OutputDebugStringA
LocalFileTimeToFileTime
SetFileTime
DosDateTimeToFileTime
SetFileAttributesW
SystemTimeToFileTime
GetFileInformationByHandle
FileTimeToDosDateTime
GetTempPathW
ReleaseSemaphore
CreateSemaphoreW
SetThreadPriority
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVersion
GetVersionExW
SetUnhandledExceptionFilter
OpenMutexW
CreateMutexW
GetLocalTime
GetCurrentProcessId
GetCurrentDirectoryW
WaitForMultipleObjects
CreateFileW
GetFileTime
ResetEvent
WriteFile
ReadFile
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
RemoveDirectoryW
GetFileAttributesW
GetModuleFileNameW
GetDiskFreeSpaceW
CopyFileW
GlobalHandle
GlobalMemoryStatus

user32

ReuseDDElParam
DestroyMenu
LoadAcceleratorsW
InsertMenuItemW
TranslateAcceleratorW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
SendDlgItemMessageA
WinHelpW
GetForegroundWindow
GetLastActivePopup
ScrollWindow
GetClassInfoExW
SetWindowPlacement
SystemParametersInfoA
GetWindowPlacement
EndPaint
BeginPaint
GetWindowTextLengthW
ScrollWindowEx
IsDialogMessageW
SetDlgItemTextW
SendDlgItemMessageW
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
InvalidateRgn
CharLowerW
GetDialogBaseUnits
GetUpdateRect
AdjustWindowRectEx
DestroyCaret
CreateCaret
SetCaretPos
EnableScrollBar
SubtractRect
PostQuitMessage
GetTopWindow
GetMenuStringW
EmptyClipboard
ShowCaret
GetDesktopWindow
SetClipboardData
IsClipboardFormatAvailable
GetOpenClipboardWindow
ShowScrollBar
InvertRect
DrawEdge
UnregisterClassW
RegisterClipboardFormatW
IsIconic
MsgWaitForMultipleObjectsEx
OpenClipboard
GetClipboardData
CloseClipboard
PrintWindow
GetSysColorBrush
InsertMenuW
DestroyWindow
MoveWindow
ShowWindow
EnableMenuItem
CreateWindowExW
SetMenuContextHelpId
SetWindowsHookExW
CallNextHookEx
GetWindowThreadProcessId
UnhookWindowsHookEx
SetMenu
RegisterWindowMessageW
SetActiveWindow
FindWindowW
SetForegroundWindow
TrackPopupMenu
SetMenuDefaultItem
DestroyIcon
UnpackDDElParam
MessageBoxW
SwitchToThisWindow
PostThreadMessageW
SetFocus
SetWindowTextW
SetCursorPos
GetWindowTextW
SetWindowContextHelpId
BringWindowToTop
LoadIconW
DrawIcon
ValidateRect
HideCaret
DefWindowProcW
ClipCursor
LockWindowUpdate
UnionRect
PeekMessageW
GrayStringW
DrawTextExW
TabbedTextOutW
FrameRect
GetClassLongW
IsWindowEnabled
SetLayeredWindowAttributes
LoadMenuW
DestroyCursor
GetScrollRange
GetScrollPos
SetScrollRange
SetScrollInfo
SetScrollPos
GetScrollInfo
GetCursor
KillTimer
SetTimer
DrawFrameControl
GetMenu
AdjustWindowRect
MapWindowPoints
RemovePropW
RemoveMenu
GetMenuContextHelpId
GetMenuItemID
IsWindowVisible
wsprintfW
GetDCEx
GetSysColor
GetSystemMetrics
GetWindowRect
IsZoomed
InflateRect
MessageBoxA
ModifyMenuW
GetMenuState
GetMenuItemInfoW
SetMenuItemInfoW
MessageBeep
SetWindowRgn
GetWindowDC
DrawTextW
SetWindowPos
LoadBitmapW
TranslateMessage
GetMessagePos
SetRect
IntersectRect
IsWindow
GetMessageTime
SetCursor
GetMenuItemCount
GetSubMenu
CreatePopupMenu
CopyIcon
UpdateWindow
GetSystemMenu
DeleteMenu
AppendMenuW
GetDlgCtrlID
GetMessageW
CountClipboardFormats
CharUpperW
GetTabbedTextExtentA
CharNextW
ShowOwnedPopups
MapDialogRect
CreateMenu
GetNextDlgGroupItem
CopyAcceleratorTableW
SendNotifyMessageW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
MsgWaitForMultipleObjects
GetProcessWindowStation
GetUserObjectInformationW
UnregisterClassA
GetClientRect
OffsetRect
GetWindowRgn
ReleaseCapture
SetCapture
GetCapture
PtInRect
GetKeyState
WindowFromPoint
GetCursorPos
SendMessageW
PostMessageW
GetMonitorInfoW
MonitorFromWindow
SystemParametersInfoW
MonitorFromRect
RegisterClassW
GetClassInfoW
SetClassLongW
ReleaseDC
GetDC
EndDeferWindowPos
DeferWindowPos
GetDlgItem
BeginDeferWindowPos
GetWindowLongW
EqualRect
GetClassNameW
CallWindowProcW
SetWindowLongW
GetWindow
GetPropW
SetPropW
GetParent
FillRect
EnableWindow
ScreenToClient
InvalidateRect
DrawFocusRect
CopyRect
IsChild
GetFocus
SetRectEmpty
IsRectEmpty
SetParent
LoadCursorW
ClientToScreen
RedrawWindow
DispatchMessageW

gdi32

CreatePolygonRgn
BitBlt
CreateCompatibleBitmap
PlayEnhMetaFileRecord
DeleteEnhMetaFile
EnumEnhMetaFile
CloseEnhMetaFile
CreateEnhMetaFileW
DeleteObject
SetViewportOrgEx
PtInRegion
CreateBitmap
CreateRoundRectRgn
GetTextAlign
GetMapMode
DPtoLP
LPtoDP
StretchBlt
GetWindowOrgEx
Ellipse
Pie
RoundRect
PtVisible
RectVisible
TextOutW
Escape
GetTextExtentExPointW
GetViewportExtEx
GetRandomRgn
GetGlyphIndicesW
SetViewportExtEx
SetWindowExtEx
SetMapMode
GetCurrentPositionEx
FillPath
EndPath
BeginPath
StretchDIBits
SetBrushOrgEx
CreatePenIndirect
ExtCreatePen
CreateBrushIndirect
DeleteDC
EnumFontFamiliesExW
CreateICW
GetWindowExtEx
FillRgn
GetTextExtentPointW
CreateFontW
RectInRegion
PaintRgn
CopyMetaFileW
CreateDCW
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
PathToRegion
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
GetPixel
StartDocW
OffsetViewportOrgEx
ScaleViewportExtEx
SetWindowOrgEx
ScaleWindowExtEx
PolyBezierTo
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
SetRectRgn
CreateEllipticRgn
CloseMetaFile
DeleteMetaFile
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetCharWidthW
GetNearestColor
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextFaceW
GetTextExtentPoint32A
GetRgnBox
GetStockObject
OffsetRgn
CombineRgn
GetTextMetricsW
Rectangle
RealizePalette
CreatePalette
SetBkColor
CreateRectRgnIndirect
CreatePen
GetBkColor
PatBlt
GetDeviceCaps
GetObjectW
CreateFontIndirectW
ExtTextOutW
CreateCompatibleDC
EnumFontFamiliesW
Polygon
SetPixel
GetTextColor
CreateSolidBrush
SetTextColor
GetViewportOrgEx
GetTextExtentPoint32W
SelectObject
CreateRectRgn
FrameRgn
SetStretchBltMode
GetBkMode

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
GetJobW
EnumPrintersW
ord204
DocumentPropertiesW
OpenPrinterW

advapi32

ReportEventA
GetFileSecurityW
RegisterEventSourceA
SetFileSecurityW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExA
CryptDecrypt
CryptEncrypt
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptSetKeyParam
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
RegCreateKeyW
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegQueryValueW
RegCloseKey
DeregisterEventSource

shell32

SHGetFileInfoW
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
Shell_NotifyIconW
DragAcceptFiles
ExtractIconW
ShellExecuteW
DragFinish
DragQueryFileW

shlwapi

PathCompactPathW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathIsUNCW

oledlg

OleUIInsertObjectW
OleUIPasteSpecialW
OleUIBusyW
OleUIObjectPropertiesW

ole32

StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleQueryCreateFromData
CreateStreamOnHGlobal
CLSIDFromString
CoInitializeEx
CoUninitialize
CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CoTreatAsClass
OleDuplicateData
OleIsCurrentClipboard
OleFlushClipboard
CoDisconnectObject
CLSIDFromProgID
CoGetClassObject
CoInitialize
CreateFileMoniker
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleSave
WriteClassStm
OleSaveToStream
OleLockRunning
OleCreateFromData
CoRegisterMessageFilter
CoRevokeClassObject
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleGetClipboard
OleSetMenuDescriptor
CreateGenericComposite
OleCreateStaticFromData
OleCreateLinkFromData
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
OleLoad
OleCreate
CreateItemMoniker

oleaut32

VarUdateFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromStr
VariantClear
VariantCopy
VariantInit
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysAllocString
VariantChangeType
VarBstrFromDate
SysStringLen
SysAllocStringLen
OleCreateFontIndirect
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayCreate
SafeArrayDestroy
GetErrorInfo
SafeArrayGetDim

ws2_32

getnameinfo
getaddrinfo
freeaddrinfo
accept
sendto
WSARecvFrom
WSARecv
recvfrom
bind
listen
setsockopt
WSASetLastError
getsockname
getsockopt
ntohs
getservbyname
ioctlsocket
WSAGetLastError
connect
htons
gethostbyname
inet_addr
socket
closesocket
shutdown
send
recv
gethostname
WSACleanup
WSAStartup
inet_ntoa
getpeername
__WSAFDIsSet
select

gdiplus

GdipFillEllipseI
GdipDrawImageI
GdipDrawImageRectI
GdipBitmapSetPixel
GdipSetCompositingMode
GdipDrawImageRectRect
GdipCreateBitmapFromStream
GdipFillRectangleI
GdipGetPathWorldBoundsI
GdipSetClipRectI
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipSetImageAttributesColorKeys
GdiplusShutdown
GdiplusStartup
GdipReleaseDC
GdipGetDC
GdipCreateLineBrushFromRectWithAngleI
GdipDrawEllipseI
GdipCreateBitmapFromStreamICM
GdipDeleteGraphics
GdipDeleteBrush
GdipCreateLineBrushI
GdipCreateFromHDC
GdipAlloc
GdipCloneBrush
GdipFree
GdipCreateSolidFill
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipDisposeImage
GdipCloneImage
GdipDeletePath
GdipClosePathFigure
GdipCreatePath
GdipDeletePen
GdipCreatePen1
GdipDeleteRegion
GdipGetRegionHRgn
GdipCreateRegionPath
GdipDeleteStringFormat
GdipDeleteFont
GdipMeasureString
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipDrawRectangleI
GdipSetStringFormatTrimming
GdipCreateStringFormat
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipDrawString
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipFillEllipse
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipDeleteMatrix
GdipSetWorldTransform
GdipCreateMatrix2
GdipDrawArcI
GdipDrawPieI
GdipFillPieI
GdipAddPathLineI
GdipDrawPolygonI
GdipFillPolygonI
GdipAddPathArcI
GdipDrawPath
GdipFillPath
GdipFillRegion
GdipCombineRegionPath
GdipResetWorldTransform
GdipSetPathGradientCenterPointI
GdipSetPathGradientCenterColor
GdipTransformPath
GdipTranslateMatrix
GdipCreateMatrix
GdipResetClip
GdipSetClipRegion
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipSetLineBlend
GdipDrawImageRectRectI
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateImageAttributes
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImageWidth
GdipGetImageHeight
GdipClonePath
GdipAddPathBezierI
GdipAddPathRectangleI
GdipAddPathEllipseI
GdipCreatePathGradientFromPath
GdipSetPathGradientSurroundColorsWithCount
GdipGetPathGradientPointCount
GdipSetStringFormatFlags

wininet

InternetSetFilePointer
InternetSetOptionExW
InternetQueryDataAvailable
HttpOpenRequestW
InternetConnectW
HttpSendRequestExW
HttpEndRequestW
InternetReadFile
InternetWriteFile
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
HttpAddRequestHeadersW

Sections

.text
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 980KB - Virtual size: 977KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 528KB - Virtual size: 525KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17fcfd509e0fbb0e39f387ba04568dc4

Code Sign

07Certificate

Key Usages

75:ad:78:56:33:72:47:b8Certificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

93:93:77:35:c6:94:9f:da:bb:5c:22:7d:f2:67:6a:f9:ef:e2:bd:1bSigner

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

ws2_32

gdiplus

wininet

Sections

.text Size: 6.2MB - Virtual size: 6.2MB

.rdata Size: 980KB - Virtual size: 977KB

.data Size: 124KB - Virtual size: 197KB

.rsrc Size: 528KB - Virtual size: 525KB

07
Certificate

75:ad:78:56:33:72:47:b8
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

93:93:77:35:c6:94:9f:da:bb:5c:22:7d:f2:67:6a:f9:ef:e2:bd:1b
Signer

.text
Size: 6.2MB - Virtual size: 6.2MB

.rdata
Size: 980KB - Virtual size: 977KB

.data
Size: 124KB - Virtual size: 197KB

.rsrc
Size: 528KB - Virtual size: 525KB