2023-08-23_3da0f1a423c23edc7a14fbf18c1b84ea_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-23_3da0f1a423c23edc7a14fbf18c1b84ea_icedid_JC.exe
Size

907KB
MD5

3da0f1a423c23edc7a14fbf18c1b84ea
SHA1

877070f541828d67494be010b762f9577c1b6208
SHA256

56d04f0d92359b31a6e1561551ad651cb25c6ba6c8f62a99be6b2b91606ab8ed
SHA512

e03706fb577c2f436d7fbba081e8209c375fcd41827b5d512a708a8112e319585455bd94c7171a979664b9a5d7e9e1272d64fa3a4589a44df992406ad9636187
SSDEEP

12288:59oi1ZCvg4SMa2GaI1r0XY8IvdI1kUJWDf0hLkwKqTbhSf05qbXJe8:59D2dWaC8IvW1bJWYkuTbhxqbQ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-23_3da0f1a423c23edc7a14fbf18c1b84ea_icedid_JC.exe

Files

2023-08-23_3da0f1a423c23edc7a14fbf18c1b84ea_icedid_JC.exe
.exe windows x86

a2bed0d9d82de4b423541a177967bc93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugBreak
FileTimeToDosDateTime
GetFileInformationByHandle
MapViewOfFile
ResetEvent
InterlockedCompareExchange
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalAlloc
GetSystemTime
SystemTimeToFileTime
FindNextFileW
GetPrivateProfileSectionW
FindResourceExW
GetStartupInfoW
MulDiv
SetProcessWorkingSetSize
CreateDirectoryW
GetFileSizeEx
WideCharToMultiByte
RaiseException
GetTempPathW
GetTempFileNameW
GetFileAttributesExW
UnmapViewOfFile
GetFileSize
CreateFileMappingW
MapViewOfFileEx
SetEndOfFile
ReadFile
UnlockFile
LockFile
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenA
OutputDebugStringW
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentThreadId
WritePrivateProfileStringW
CopyFileW
SetFilePointer
WriteFile
VirtualProtect
CreateToolhelp32Snapshot
Thread32First
OpenThread
GetThreadTimes
Thread32Next
CreateEventW
CreateThread
OpenProcess
GetTickCount
SetEvent
GetProcessTimes
InterlockedDecrement
GlobalFree
InterlockedIncrement
GetSystemDirectoryW
GetFileAttributesW
LocalAlloc
MultiByteToWideChar
GetSystemInfo
GetModuleHandleA
SearchPathW
GetLongPathNameW
lstrlenW
CreateProcessW
LocalFree
GetPrivateProfileStringW
GetPrivateProfileIntW
GetCurrentProcess
FindFirstFileW
FindClose
GetVersionExW
SetLastError
IsBadReadPtr
DeleteFileW
RemoveDirectoryW
GetCommandLineW
CreateMutexW
GetLastError
SetProcessShutdownParameters
LoadLibraryW
FreeLibrary
GetCurrentProcessId
CreateFileW
DeviceIoControl
OpenEventW
WaitForSingleObject
Sleep
GetModuleFileNameW
CloseHandle
GetModuleHandleW
GetProcAddress
WaitForMultipleObjects
MoveFileExW
UnlockFileEx
LockFileEx
SetFilePointerEx
GetEnvironmentVariableW
SetEnvironmentVariableW
ReleaseMutex
GetLocalTime
SetEnvironmentVariableA
GetProcessHeap
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
FindResourceW
LoadResource
GetStringTypeW
LockResource
SizeofResource
GetStringTypeA
LCMapStringA
InitializeCriticalSectionAndSpinCount
LCMapStringW
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
VirtualQuery
VirtualAlloc
HeapSize
FormatMessageW
GetVersionExA
lstrcmpW
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FreeResource
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetThreadLocale
FileTimeToSystemTime
FlushFileBuffers
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
SetErrorMode
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetFileTime
RtlUnwind
ExitThread
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
HeapReAlloc
ExitProcess

user32

GetFocus
RemovePropW
GetPropW
SetPropW
GetClassNameW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
GetCapture
IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
CheckMenuItem
EnableMenuItem
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsDialogMessageW
MoveWindow
IsWindowEnabled
PostQuitMessage
ValidateRect
GetActiveWindow
TranslateMessage
GetMessageW
RegisterClipboardFormatW
MapDialogRect
SetWindowContextHelpId
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
DestroyMenu
GetSysColorBrush
UnregisterClassW
CharUpperW
MessageBeep
PostThreadMessageW
CharNextW
IsRectEmpty
CopyAcceleratorTableW
InvalidateRgn
SetCapture
ReleaseCapture
GetNextDlgGroupItem
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetMessagePos
LoadBitmapW
CopyRect
GetDlgCtrlID
CallWindowProcW
GetMenu
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
EndPaint
BeginPaint
GetIconInfo
GetSysColor
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetRect
RedrawWindow
UpdateWindow
GetForegroundWindow
GetWindow
GetWindowInfo
GetShellWindow
WindowFromPoint
GetAncestor
GetWindowThreadProcessId
GetMenuItemID
GetDC
DrawIconEx
InflateRect
GetCursorPos
RegisterWindowMessageW
LoadMenuW
ModifyMenuW
GetSubMenu
SetMenuDefaultItem
DeleteMenu
DestroyIcon
SetClassLongW
GetParent
GetDesktopWindow
IsWindow
SystemParametersInfoW
GetWindowLongW
SetWindowLongW
SetLayeredWindowAttributes
SetWindowRgn
EqualRect
SetCursor
SendMessageW
wvsprintfW
GetWindowRect
GetClientRect
InvalidateRect
PtInRect
FrameRect
KillTimer
SetTimer
ReleaseDC
GetWindowDC
DrawIcon
MessageBoxW
OffsetRect
SetWindowTextW
ClientToScreen
ScreenToClient
UnhookWindowsHookEx
EnableWindow
LoadIconW
LoadCursorW
DefWindowProcW
AppendMenuW
FillRect
SendMessageTimeoutW
FindWindowW
GetSystemMetrics
ShowWindow
SetForegroundWindow
WaitForInputIdle
PostMessageW
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
SetMenu
IsWindowVisible
CreateWindowExW
GetClassInfoExW
GetMenuItemCount
GetMenuStringW
GetMenuState

gdi32

MoveToEx
LineTo
GetClipBox
SetMapMode
Escape
ExtTextOutW
SetTextColor
RectVisible
PtVisible
DeleteDC
EnumFontFamiliesW
GetDeviceCaps
GetStockObject
CreateRoundRectRgn
CreateFontIndirectW
Rectangle
CreateSolidBrush
CreatePen
StretchBlt
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontW
GetObjectW
DeleteObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetViewportExtEx
GetTextExtentExPointW
GetWindowExtEx
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
TextOutW
GetRgnBox
GetTextColor
GetBkColor
GetMapMode
CreateRectRgnIndirect

advapi32

RegEnumKeyExW
RegDeleteKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExA
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
ChangeServiceConfigW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
ControlService
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyW
GetTokenInformation
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegDeleteValueW

shell32

ShellExecuteW
CommandLineToArgvW
ShellExecuteExW
SHCreateDirectoryExW
Shell_NotifyIconW
ord680
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation

ole32

OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
CoRevokeClassObject
CoGetClassObject
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoUninitialize

oleaut32

SysAllocString
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysStringLen
VariantCopy

comctl32

_TrackMouseEvent

shlwapi

PathRemoveFileSpecW
StrChrW
PathFindExtensionW
PathIsRelativeW
StrCmpIW
PathAddBackslashW
PathFindFileNameW
StrRStrIW
PathStripToRootW
PathIsUNCW
StrRChrW
SHDeleteValueW
SHSetValueW
PathFileExistsW
PathAppendW
SHGetValueW
StrStrW
StrStrIW
PathCombineW
PathIsDirectoryW
StrCmpW
PathIsPrefixW

oledlg

OleUIBusyW

urlmon

URLDownloadToCacheFileW
URLDownloadToFileW

imm32

ImmDisableIME

setupapi

SetupIterateCabinetW

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wininet

HttpAddRequestHeadersA
InternetQueryOptionW
InternetSetOptionA
InternetWriteFile
InternetOpenW
InternetConnectW
HttpOpenRequestW
InternetCloseHandle
InternetReadFile
InternetSetStatusCallbackA
InternetErrorDlg
HttpQueryInfoW
InternetSetOptionW
InternetCrackUrlW
InternetGetConnectedState
InternetConnectA
InternetOpenA
HttpOpenRequestA
HttpQueryInfoA
InternetReadFileExA
HttpSendRequestExA
HttpEndRequestA
HttpSendRequestW
DeleteUrlCacheEntryW

rpcrt4

RpcStringFreeW
RpcStringBindingComposeW
NdrClientCall2
RpcBindingFree
RpcBindingFromStringBindingW

psapi

GetModuleFileNameExW

oleacc

CreateStdAccessibleObject
LresultFromObject

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

comdlg32

GetFileTitleW

netapi32

Netbios

ws2_32

inet_ntoa
WSAStartup
WSACleanup
getpeername
ntohl

crypt32

CryptMsgClose
CryptMsgUpdate
CryptMsgOpenToDecode
CertOpenStore
CertGetCertificateContextProperty
CertGetNameStringW
CertCloseStore

wintrust

WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain

winmm

timeGetTime

Sections

.text
Size: 507KB - Virtual size: 506KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 159KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a2bed0d9d82de4b423541a177967bc93

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

oledlg

urlmon

imm32

setupapi

iphlpapi

version

wininet

rpcrt4

psapi

oleacc

winspool.drv

comdlg32

netapi32

ws2_32

crypt32

wintrust

winmm

Sections

.text Size: 507KB - Virtual size: 506KB

.rdata Size: 150KB - Virtual size: 149KB

.data Size: 16KB - Virtual size: 44KB

.rsrc Size: 159KB - Virtual size: 160KB

.text
Size: 507KB - Virtual size: 506KB

.rdata
Size: 150KB - Virtual size: 149KB

.data
Size: 16KB - Virtual size: 44KB

.rsrc
Size: 159KB - Virtual size: 160KB