2023-08-23_3fda8c7cf1cc9f49dc6910a6d2ec557e_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-23_3fda8c7cf1cc9f49dc6910a6d2ec557e_icedid_JC.exe
Size

632KB
MD5

3fda8c7cf1cc9f49dc6910a6d2ec557e
SHA1

71847347539d8e9626e4e7ca20d7583f8393ddc4
SHA256

7691a8c1f54dcb5f9f6645ff2681d95a9f09d451e744e840f5adfc703409d619
SHA512

064b8a33b2971926b9a55e874e6dd12a021df35bec99d9f0359227b2ab7ce91f9bff639b39573c9d2e8c071c17331477ab80be23505e49bd1abfbe1bc312ef52
SSDEEP

12288:wK6eHk0ogiVHvdDDDyGcXXILLR/L1a9nrlFzZrosYOAK:wQiRvxDyh8RJEnrlFzZrosYOA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-23_3fda8c7cf1cc9f49dc6910a6d2ec557e_icedid_JC.exe

Files

2023-08-23_3fda8c7cf1cc9f49dc6910a6d2ec557e_icedid_JC.exe
.exe windows x86

8bb8d934649edbb78590fbdd48d622cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetConsoleMode
HeapCreate
VirtualAlloc
VirtualFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitProcess
HeapSize
HeapReAlloc
GetStartupInfoW
HeapFree
HeapAlloc
RtlUnwind
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetLocalTime
CreateDirectoryW
GetModuleHandleA
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFlags
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryA
lstrcmpW
GetVersionExA
lstrlenA
lstrcmpA
WideCharToMultiByte
GetCurrentProcessId
LockResource
TlsFree
GlobalFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalAlloc
GlobalHandle
GlobalUnlock
GlobalReAlloc
GlobalLock
TlsGetValue
SetLastError
OpenEventW
PulseEvent
InitializeCriticalSectionAndSpinCount
GetCommandLineW
SetEvent
GetCurrentThreadId
CreateTimerQueue
CreateTimerQueueTimer
GetVersionExW
CreateThread
Sleep
GetCurrentThread
GetCurrentProcess
DeleteTimerQueue
WaitForSingleObject
CreateEventW
LocalAlloc
LocalFree
ExpandEnvironmentStringsW
DeleteFileW
CreateFileW
CloseHandle
LoadLibraryExW
GetProcessHeap
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
GetModuleHandleW
GetProcAddress
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
EnterCriticalSection
GetStdHandle
LeaveCriticalSection

user32

WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
LoadIconW
CharNextW
TranslateMessage
DispatchMessageW
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterWindowMessageW
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
SetWindowLongW
SetWindowPos
GetMessageW
LoadStringW
PostThreadMessageW
CharUpperW
MessageBoxW
UnhookWindowsHookEx
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetParent
SendMessageW
GetWindowThreadProcessId
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
ValidateRect
PeekMessageW
GetKeyState
SetWindowTextW
ClientToScreen
DestroyMenu
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
PostQuitMessage
RegisterClassW
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExW
CallNextHookEx

gdi32

Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
PtVisible
TextOutW
RectVisible
SetMapMode
GetDeviceCaps
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
DeleteObject
ExtTextOutW
RestoreDC
SaveDC

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
CreateWellKnownSid
OpenThreadToken
OpenProcessToken
SetSecurityDescriptorDacl
ControlService
DeleteService
CreateServiceW
InitializeAcl
AddAccessAllowedAce
GetAclInformation
AddAce
GetAce
GetTokenInformation
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
InitializeSecurityDescriptor
IsValidSid
GetLengthSid
CopySid
RegQueryValueExW
RegisterEventSourceW
ReportEventW
DeregisterEventSource
SetServiceStatus
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW

shell32

SHGetFolderPathW

ole32

CoResumeClassObjects
CoInitializeSecurity
CoCreateInstance
StringFromGUID2
CoUninitialize
CoRevokeClassObject
CoSuspendClassObjects
CoInitializeEx
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoFreeUnusedLibraries
CoSetProxyBlanket
CoRegisterClassObject

oleaut32

VarUI4FromStr
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocString
VariantChangeType
VariantInit
RegisterTypeLi
UnRegisterTypeLi
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayDestroy
VariantClear
SysFreeString

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8bb8d934649edbb78590fbdd48d622cf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

oleacc

Sections

.text Size: 151KB - Virtual size: 151KB

.rdata Size: 49KB - Virtual size: 49KB

.data Size: 10KB - Virtual size: 33KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 151KB - Virtual size: 151KB

.rdata
Size: 49KB - Virtual size: 49KB

.data
Size: 10KB - Virtual size: 33KB

.rsrc
Size: 6KB - Virtual size: 6KB