2023-08-25_a926155310ecccdd2bbe364fb2537236_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-25_a926155310ecccdd2bbe364fb2537236_icedid_JC.exe
Size

443KB
MD5

a926155310ecccdd2bbe364fb2537236
SHA1

ffa0d91aa205dfe484808a10df349f69bd7e5273
SHA256

4862c262966a52e8a401e69654d8e42b632a04bde2d56f12ccff6d016e0199a0
SHA512

0eb69efcac01cacdb1c20ab792bc5fe99c45ad52251866343c760f5f7245281b9b1b0007e577effb008d8a1e376bda0542c5c9aa06770b10b57cfcbd5f9f7885
SSDEEP

6144:9iQKIr4zsnQWAQYBEVJLdwPlFWV7pRjG1Dk39fPtp:smnQrBEVJHV7pERqNz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-25_a926155310ecccdd2bbe364fb2537236_icedid_JC.exe

Files

2023-08-25_a926155310ecccdd2bbe364fb2537236_icedid_JC.exe
.exe windows:5 windows x86

ccf44264b8929df2516da6a9aaeec12b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shfolder

SHGetFolderPathA

kernel32

GetTickCount
RtlUnwind
RaiseException
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetFileTime
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetFileSizeEx
GetFileAttributesA
SetErrorMode
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetModuleHandleW
FileTimeToLocalFileTime
FileTimeToSystemTime
InterlockedDecrement
GetModuleFileNameW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetThreadLocale
GetCurrentProcessId
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
LoadLibraryA
FreeLibrary
lstrcmpW
GetVersionExA
GetModuleHandleA
GetProcAddress
SetLastError
FormatMessageA
LocalFree
MultiByteToWideChar
MulDiv
GetModuleFileNameA
GetCurrentProcess
CreateMutexA
GetLastError
ReleaseMutex
Sleep
lstrlenA
GetPrivateProfileStructA
WritePrivateProfileStructA
WritePrivateProfileStringA
WriteFile
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
CreateFileA
GetFileSize
ReadFile
CloseHandle
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
GetEnvironmentStringsW

user32

PostThreadMessageA
EndDialog
UnregisterClassA
MessageBeep
GetNextDlgTabItem
GetNextDlgGroupItem
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableA
CharNextA
GetDesktopWindow
LoadCursorA
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
SetCursor
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
CharUpperA
GetWindowThreadProcessId
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
WinHelpA
IsChild
SetWindowsHookExA
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextA
GetForegroundWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
IsWindowVisible
UpdateWindow
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetClientRect
ClientToScreen
RegisterWindowMessageA
GetDC
EqualRect
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
GetSysColor
EndPaint
RegisterClipboardFormatA
CallNextHookEx
CreateDialogIndirectParamA
ReleaseDC
InvalidateRect
GetActiveWindow
SetActiveWindow
GetCapture
SetCapture
GetParent
EnableWindow
GetWindowLongA
SendMessageA
ReleaseCapture
SetRect
PostMessageA
FindWindowA
GetLastActivePopup
SetForegroundWindow
LoadIconA
ShowWindow
IsIconic
DestroyMenu
TrackPopupMenu
GetCursorPos
AppendMenuA
CreatePopupMenu
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
BeginPaint
GetWindowDC

gdi32

ExtSelectClipRgn
CreateBitmap
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
PtVisible
GetWindowExtEx
GetViewportExtEx
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
GetStockObject
GetObjectA
SelectObject
DeleteObject
DeleteDC
RectVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
OpenProcessToken
GetTokenInformation
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegSetValueExA

shell32

ShellExecuteA
Shell_NotifyIconA

shlwapi

PathFindFileNameA
PathFindExtensionA
PathIsUNCA
PathStripToRootA
PathFileExistsA

oledlg

ord8

ole32

CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

SysAllocString
OleCreateFontIndirect
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime

Sections

.text
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ccf44264b8929df2516da6a9aaeec12b

Headers

DLL Characteristics

File Characteristics

Imports

shfolder

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 203KB - Virtual size: 203KB

.rdata Size: 50KB - Virtual size: 50KB

.data Size: 10KB - Virtual size: 25KB

.rsrc Size: 178KB - Virtual size: 177KB

.text
Size: 203KB - Virtual size: 203KB

.rdata
Size: 50KB - Virtual size: 50KB

.data
Size: 10KB - Virtual size: 25KB

.rsrc
Size: 178KB - Virtual size: 177KB