2023-08-27_5591dc9a7327c52a44701000802813b6_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-27_5591dc9a7327c52a44701000802813b6_icedid_JC.exe
Size

1018KB
MD5

5591dc9a7327c52a44701000802813b6
SHA1

f5ac2e6e20a6aa997ccc29d725f43e2f623c001b
SHA256

9c44776403d2ae03e64e8b6ae93d2d4a71b602f5073099db4d98323eb79c99e9
SHA512

9f21f7b8d55a04f557ad343de2e345d852d0f9970be6d207af201de85ed84cfdc5d40a4451cb46b977b902f0178b283e2c55d3daa5245ffd64b297726a9a9175
SSDEEP

24576:IL23mj3sb1Dti13DtSZa3yF8ZqOz/fSGRz:cj3Is13DtSZaiF0qkfSGRz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-27_5591dc9a7327c52a44701000802813b6_icedid_JC.exe

Files

2023-08-27_5591dc9a7327c52a44701000802813b6_icedid_JC.exe
.exe windows:5 windows x86

104de1aeb97e70fa0048dca3bab42565

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList

kernel32

GetFileSizeEx
GetFileTime
SetErrorMode
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCurrentDirectoryA
GetTickCount
RtlUnwind
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
RaiseException
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
SetStdHandle
GetFileType
ExitProcess
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
LCMapStringA
GetFileAttributesA
SetHandleCount
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
FatalAppExitA
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetSystemDirectoryA
MoveFileExA
LocalLock
LocalUnlock
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
CreateDirectoryA
GetOEMCP
GetCPInfo
GlobalFlags
GetAtomNameA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetModuleHandleW
SystemTimeToFileTime
FileTimeToSystemTime
lstrcpyA
lstrcpyW
GlobalReAlloc
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiA
GetStringTypeExA
DeleteFileA
MoveFileA
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
GetThreadLocale
InterlockedIncrement
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
LoadLibraryA
lstrcmpW
GetModuleHandleA
GetProcAddress
GetVersionExA
SetLastError
CopyFileA
GlobalSize
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenW
MultiByteToWideChar
MulDiv
lstrlenA
GetLocalTime
GetModuleFileNameA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
ReadFile
WriteFile
Sleep
CreateFileA
CloseHandle
GetLastError
WaitForSingleObject
DeviceIoControl
ReleaseMutex
GlobalAlloc
GlobalFree
LCMapStringW

user32

LoadMenuA
GetMenuBarInfo
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorA
RegisterClipboardFormatA
SetRectEmpty
MessageBeep
GetNextDlgGroupItem
DestroyIcon
WaitMessage
WindowFromPoint
DeleteMenu
GetDialogBaseUnits
UnregisterClassA
ReleaseCapture
SetCapture
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableA
LoadCursorA
GetSysColorBrush
DestroyMenu
GetMenuItemInfoA
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
CharUpperA
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
InflateRect
EndPaint
BeginPaint
ReuseDDElParam
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
FillRect
CharNextA
ScrollWindowEx
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
EnableWindow
GetWindow
LoadBitmapA
DrawIcon
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
UnpackDDElParam
SetTimer
KillTimer
PostThreadMessageA
GetKeyNameTextA
MapVirtualKeyA
SetParent
UnionRect
GetDCEx
LockWindowUpdate
GetWindowDC
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetWindowRect
GetClientRect
InvalidateRect
DrawTextA
GetSysColor
GetSystemMetrics
MessageBoxA
wsprintfA
AppendMenuA
SendMessageA
GetSystemMenu
IsIconic
UpdateWindow
RedrawWindow
LoadIconA
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuA
GetMenuItemID
GetMenuStringA
GetMenuState
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongA
GetWindowLongA
GetMenu
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
SetWindowPlacement
PtInRect
CopyRect
SetScrollInfo
GetScrollInfo
AdjustWindowRectEx
GetParent
ScreenToClient
EqualRect
DeferWindowPos
GetWindowThreadProcessId

gdi32

CreateCompatibleBitmap
StretchDIBits
GetCharWidthA
GetTextMetricsA
GetRgnBox
GetTextExtentPoint32A
DPtoLP
PatBlt
GetMapMode
CreateCompatibleDC
BitBlt
GetDeviceCaps
CopyMetaFileA
CreateDCA
SetRectRgn
CreateRectRgnIndirect
CreateFontIndirectA
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetTextColor
GetBkColor
GetStockObject
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateFontA
GetObjectA
CombineRgn

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegDeleteValueA
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegSetValueA
RegCloseKey

shell32

SHGetFileInfoA
DragFinish
DragQueryFileA
ExtractIconA

shlwapi

PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW

odbc32

ord5
ord51
ord50
ord45
ord44
ord68
ord43
ord59
ord13
ord18
ord46
ord12
ord19
ord11
ord49
ord48
ord8
ord20
ord14
ord72
ord9
ord15
ord23
ord1
ord2
ord16
ord3
ord61
ord10
ord41
ord17
ord4

oledlg

ord8

ole32

OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CoInitializeEx
CoUninitialize
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
StringFromGUID2
CLSIDFromString
OleIsCurrentClipboard
CoCreateInstance
OleRun
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
CLSIDFromProgID

oleaut32

VariantClear
VariantChangeType
SysFreeString
SysStringLen
SysAllocString
SysAllocStringByteLen
SysStringByteLen
VariantInit
SysAllocStringLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
VarBstrFromDate

Exports

Exports

CheckHardWare
CloseAISINODiskDevice
CloseJsp
DiskBspID
DiskQuanXian
DiskReadID
DiskReadKpjNum
DiskReadNameVer
IC_CommandInit
JspCallCmd
JspCallCmdQiYe
JspCloseAISINODiskDevice
JspFormReport
JspJUMP_BA
JspOpenAISINODiskDevice
JspReadATR
JspReadCardCapacity
JspReadFirstDF
JspReadInvoiceMachineId
JspReadInvoiceMachineState
JspReadIsClockStopped
JspReadIsFlashProblem
JspReadIsHardwareProblem
JspReadIsRegisteredBSP
JspReadNumA
JspReadSecondDF
JspReadTaxpayerID
JspReadTimeA
OpenAISINODiskDevice
OpenJsp
PowerTest_QiYe
ReadJspVer
ReadRealTaxNo
SearchDevice

Sections

.text
Size: 603KB - Virtual size: 602KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

104de1aeb97e70fa0048dca3bab42565

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

odbc32

oledlg

ole32

oleaut32

Exports

Exports

Sections

.text Size: 603KB - Virtual size: 602KB

.rdata Size: 134KB - Virtual size: 133KB

.data Size: 14KB - Virtual size: 29KB

.rsrc Size: 266KB - Virtual size: 266KB

.text
Size: 603KB - Virtual size: 602KB

.rdata
Size: 134KB - Virtual size: 133KB

.data
Size: 14KB - Virtual size: 29KB

.rsrc
Size: 266KB - Virtual size: 266KB