2023-08-26_e1d8f338d705a100455969daf3f2a461_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-26_e1d8f338d705a100455969daf3f2a461_icedid_JC.exe
Size

621KB
MD5

e1d8f338d705a100455969daf3f2a461
SHA1

aa9180e4e43e6e52004c195c91f108457c2b6623
SHA256

a249a843eddd78c296072c66649c413c50bf103edf45739e87892e6f3509a615
SHA512

fe11ce8011b6744fd69036c55a9fa71e417d8d1b7e6ac3d4b4b50905e3d0276c66e2b1b0dc90399af7be54e68eb94ef60b6f6b25db956c8d03bd1fbde2e0c5ad
SSDEEP

12288:+shOdGZhKKPy9SOjnERG8OIYYgXtpT3hw8es:+TQSnER9MX/3hwO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-26_e1d8f338d705a100455969daf3f2a461_icedid_JC.exe

Files

2023-08-26_e1d8f338d705a100455969daf3f2a461_icedid_JC.exe
.exe windows:5 windows x86

81b6b86e92611d824c81351ce72b0211

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

olepro32

ord250

kernel32

SetFileAttributesW
GetFileSizeEx
GetFileTime
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetCurrentDirectoryW
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
HeapReAlloc
HeapSize
ExitThread
CreateThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FatalAppExitA
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
SetFileTime
LocalFileTimeToFileTime
IsValidCodePage
GetTimeZoneInformation
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetModuleHandleA
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GlobalFlags
SystemTimeToFileTime
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FileTimeToSystemTime
lstrlenA
lstrcmpA
GetAtomNameW
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
GetStringTypeExW
DeleteFileW
MoveFileW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetVersionExW
SetLastError
CopyFileW
FormatMessageW
LocalFree
MulDiv
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GetFileAttributesW
CreateDirectoryW
WriteFile
lstrcmpiW
LoadLibraryExW
MultiByteToWideChar
FreeLibrary
RaiseException
GetLastError
GetModuleFileNameW
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceW
Sleep
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteProfileStringW
CreateFileW
GetFileSize
CloseHandle
WideCharToMultiByte
GetSystemDirectoryW
LoadLibraryW
lstrlenW
lstrcpyW
GetProfileStringW
GetProfileIntW
GetModuleHandleW
GetProcAddress
lstrcpynW
lstrcatW
RtlUnwind
ExitProcess
CreateFileA
SetEnvironmentVariableA

user32

SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
SetWindowPlacement
GetDlgCtrlID
CallWindowProcW
CopyRect
PtInRect
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetFocus
IsWindowEnabled
GetParent
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetWindowTextW
GetSysColor
CharNextW
SendDlgItemMessageW
EnableWindow
GetDlgItem
SetScrollInfo
RegisterHotKey
SetMenu
UnregisterHotKey
LoadMenuW
GetSysColorBrush
GetScrollInfo
SetScrollPos
ScrollWindow
GetDlgItemInt
CheckDlgButton
GetDlgItemTextW
IsDlgButtonChecked
EndDialog
DialogBoxParamW
PostMessageW
GetClassNameW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
GetCapture
IsChild
WinHelpW
SetClassLongW
GetMenuItemCount
wsprintfW
RemoveMenu
AppendMenuW
InvalidateRect
SetTimer
UpdateWindow
MessageBoxW
IsWindow
KillTimer
DestroyWindow
CreateDialogParamW
SendMessageW
SetFocus
GetWindowRect
GetClientRect
ClientToScreen
SetWindowPos
EnableMenuItem
CheckMenuItem
GetMenu
GetSubMenu
PostQuitMessage
GetAsyncKeyState
BeginPaint
GetWindowThreadProcessId
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
CreateDialogIndirectParamW
GetActiveWindow
GetDesktopWindow
InflateRect
GetMenuItemInfoW
SystemParametersInfoW
ValidateRect
GetCursorPos
GetMessageW
FillRect
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetWindowDC
UnregisterClassW
DestroyIcon
GetDialogBaseUnits
SetRectEmpty
SetCursor
ShowOwnedPopups
DeleteMenu
BringWindowToTop
CreatePopupMenu
SetCapture
LockWindowUpdate
GetDCEx
UnionRect
SetParent
GetSystemMenu
IsRectEmpty
MapVirtualKeyW
GetKeyNameTextW
WindowFromPoint
SetRect
EndPaint
SetDlgItemTextW
SendDlgItemMessageA
RegisterWindowMessageW
CharUpperW
CheckRadioButton
SetDlgItemInt
IsDialogMessageW
ScrollWindowEx
GetSystemMetrics
MoveWindow
DefWindowProcW
PeekMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
WaitMessage
LoadAcceleratorsW
LoadStringW
LoadCursorW
LoadIconW
RegisterClassW
GetDC
ReleaseDC
CreateWindowExW
GetWindowLongW
SetWindowLongW
ShowWindow
SetWindowTextW
UnpackDDElParam
ReuseDDElParam
GetMenuBarInfo
ReleaseCapture
GetScrollPos
InsertMenuItemW
DestroyMenu

gdi32

GetObjectW
CreateBitmap
CreateFontIndirectW
GetTextExtentPoint32W
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocW
PtVisible
RectVisible
GetClipBox
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateHatchBrush
GetCharWidthW
StretchDIBits
CreateCompatibleBitmap
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetBkColor
GetDCOrgEx
CopyMetaFileW
CreateDCW
GetDeviceCaps
SetBkColor
SetTextColor
ExtTextOutW
PatBlt
CreateSolidBrush
CreateFontW
StretchBlt
CreateCompatibleDC
CreateDIBitmap
BitBlt
DeleteObject
DeleteDC
GetStockObject
SelectObject
GetTextMetricsW
TextOutW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

comdlg32

GetOpenFileNameW
GetFileTitleW

advapi32

RegSetValueExW
RegEnumKeyW
RegQueryValueW
RegCreateKeyW
RegOpenKeyW
RegSetValueW
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW

shell32

SHBrowseForFolderW
SHGetFileInfoW
ExtractIconW
DragFinish
DragQueryFileW
SHGetPathFromIDListW

ole32

CoTreatAsClass
ReleaseStgMedium
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateStreamOnHGlobal
CoTaskMemRealloc
CoTaskMemAlloc
CoGetMalloc
GetRunningObjectTable
CreateItemMoniker
CreateBindCtx
MkParseDisplayName
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx
OleDuplicateData
CoDisconnectObject
StringFromGUID2
CLSIDFromString
StringFromCLSID

oleaut32

SafeArrayCopy
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SysFreeString
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysStringLen
VarUI4FromStr

comctl32

CreateStatusWindowW

shlwapi

PathRemoveExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW

gdiplus

GdipCreateFromHWNDICM
GdipCreateFromHWND
GdipCreateBitmapFromGdiDib
GdipDrawImageRectI
GdipCloneImage
GdipDisposeImage
GdipSaveImageToStream
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDrawImageRect
GdipDeleteGraphics
GdiplusShutdown
GdiplusStartup
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipFree

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Sections

.text
Size: 481KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81b6b86e92611d824c81351ce72b0211

Headers

DLL Characteristics

File Characteristics

Imports

winmm

olepro32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

gdiplus

oleacc

Sections

.text Size: 481KB - Virtual size: 480KB

.rdata Size: 115KB - Virtual size: 114KB

.data Size: 12KB - Virtual size: 33KB

.rsrc Size: 12KB - Virtual size: 11KB

.text
Size: 481KB - Virtual size: 480KB

.rdata
Size: 115KB - Virtual size: 114KB

.data
Size: 12KB - Virtual size: 33KB

.rsrc
Size: 12KB - Virtual size: 11KB