2023-08-26_6c91d66465279431827757eecd006431_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-26_6c91d66465279431827757eecd006431_icedid_JC.exe
Size

268KB
MD5

6c91d66465279431827757eecd006431
SHA1

fa4ff407384b27b6fafa6f0d51336ac49990cfbb
SHA256

dbd8c375ac962492698cc6a3be8fee1e1f21d347fa4b174580a574b625da3d28
SHA512

34644d96b488befc18e628121c32f9ae2a82692baf043640ad38fa78d8486fca9ffae04e4e33048b03ff571a8f1d8d281362e6136f6b20f10c3e58aa36fc4e56
SSDEEP

6144:0IXjZkAckL+k4Xh410yCp7StLDi1atsDw:0IzZk++h42tpGt4a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-26_6c91d66465279431827757eecd006431_icedid_JC.exe

Files

2023-08-26_6c91d66465279431827757eecd006431_icedid_JC.exe
.exe windows:4 windows x86

75a5f0d1a15ce6a01a1a488699df73af

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
RtlUnwind
ExitProcess
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTimeFormatA
GetDateFormatA
GetDriveTypeA
CreateDirectoryA
GetFileType
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
QueryPerformanceCounter
LCMapStringA
LCMapStringW
GetTimeZoneInformation
SetHandleCount
GetStdHandle
SetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
GlobalFlags
InterlockedIncrement
GetCurrentDirectoryA
WritePrivateProfileStringA
InterlockedDecrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalAddAtomA
RaiseException
GlobalFree
GlobalUnlock
FormatMessageA
LocalFree
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
SetLastError
lstrcpynA
CloseHandle
WaitForSingleObject
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
GetDiskFreeSpaceExA
IsDBCSLeadByte
GetTickCount
GetTempPathA
GetModuleFileNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
DeleteFileA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection

user32

RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetWindowTextA
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
GetSysColor
AdjustWindowRectEx
GetClassInfoA
GetDlgCtrlID
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
GetWindow
WaitMessage
wsprintfA
GetSystemMetrics
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
MessageBoxA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
SetCursor
DestroyMenu
GetSysColorBrush
UnregisterClassA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
PostMessageA
CharUpperA
FindWindowA
RegisterClassA
SendMessageA
DefWindowProcA
IsWindow
EnableWindow
KillTimer
SetTimer
PeekMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
SetRectEmpty
PostThreadMessageA
PtInRect
LoadCursorA
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
SetWindowTextA

gdi32

PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
DeleteObject
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
RegCreateKeyExA

shell32

SHGetSpecialFolderPathA

comctl32

ord17

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

ole32

CoCreateInstance
CoInitialize

oleaut32

VariantClear
SysAllocString
SysFreeString
VariantChangeType
VariantInit

ws2_32

accept
socket
select
htons
inet_addr
bind
WSASetLastError
connect
sendto
closesocket
WSACleanup
WSAStartup
WSAAsyncSelect
send
recvfrom
recv
htonl
ntohl
gethostname
gethostbyname
inet_ntoa
WSAGetLastError
listen
shutdown

wininet

InternetCrackUrlA

Exports

Exports

?CCmdWndWindowProc@@YGJPAUHWND__@@IIJ@Z

Sections

.text
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75a5f0d1a15ce6a01a1a488699df73af

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

ws2_32

wininet

Exports

Exports

Sections

.text Size: 192KB - Virtual size: 189KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 20KB - Virtual size: 19KB

.text
Size: 192KB - Virtual size: 189KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 20KB - Virtual size: 19KB