2023-08-25_78e5315f747764e60dcdd2f048d76c2d_icedid_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

2023-08-25_78e5315f747764e60dcdd2f048d76c2d_icedid_JC.exe
Size

751KB
MD5

78e5315f747764e60dcdd2f048d76c2d
SHA1

74b66d6e16900155221f615ff642d9599c515552
SHA256

25ac11e298f86b0a7afe5186ae98a5855d31f50c7c5ea6c911cd9a4b2d77b66e
SHA512

916f9584d80ad5f19aeeb7d5e9e064bb6be869b6056e28b14588d33d931faeefa167e9536fa9b31dac85250cc555e88263865a2781ca8eed2434df4c6497974c
SSDEEP

12288:QROdaxWidey0OY2hkjDdkJcXpKk/ZNJ3+dXDrr0aAsAm6Zxhu2ow:i7xSeJyKk/Zb3cXPophjow

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-25_78e5315f747764e60dcdd2f048d76c2d_icedid_JC.exe

Files

2023-08-25_78e5315f747764e60dcdd2f048d76c2d_icedid_JC.exe
.exe windows:5 windows x86

f1d1d13073c95fc4e9c68a520a16036d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
CM_Get_Device_IDA
CM_Get_Parent
SetupDiDestroyDeviceInfoList

kernel32

EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
SetErrorMode
GetFileAttributesA
GetFileSizeEx
GetFileTime
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
GetTickCount
RtlUnwind
SetEnvironmentVariableA
SetCurrentDirectoryA
GetSystemTimeAsFileTime
ExitThread
CreateThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCommandLineA
GetStartupInfoA
HeapAlloc
TlsGetValue
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
ExitProcess
SetStdHandle
GetFileType
HeapSize
GetACP
IsValidCodePage
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetTimeZoneInformation
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
LeaveCriticalSection
LocalAlloc
GetModuleHandleW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
InterlockedExchange
lstrcmpA
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
CompareStringA
lstrcmpW
GetProcAddress
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
LoadLibraryA
GetThreadLocale
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GetCurrentThreadId
GetCurrentProcessId
SetLastError
FormatMessageA
LocalFree
MultiByteToWideChar
GetLocaleInfoA
DeleteFileA
GetVersionExA
GetLogicalDrives
GetLogicalDriveStringsA
GetCommTimeouts
lstrlenA
ResetEvent
FreeResource
GlobalAlloc
ResumeThread
GlobalLock
GlobalUnlock
MulDiv
GlobalFree
WideCharToMultiByte
SuspendThread
SetThreadPriority
GetDriveTypeA
GetDiskFreeSpaceExA
FindResourceA
LoadResource
SizeofResource
LockResource
Sleep
GetModuleHandleA
GetModuleFileNameA
SetEvent
WaitCommEvent
ReadFile
WaitForSingleObject
WriteFile
GetLastError
GetOverlappedResult
ClearCommError
CloseHandle
CreateEventA
CreateFileA
SetCommMask
SetupComm
PurgeComm
SetCommTimeouts
GetCommState
SetCommState
GetPrivateProfileStructA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
WritePrivateProfileStructA
WritePrivateProfileStringA
WritePrivateProfileSectionA
lstrcpyA
HeapFree

user32

PostThreadMessageA
ReleaseCapture
SetCapture
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableA
UnregisterClassA
LoadCursorA
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetCursor
PostQuitMessage
CharNextA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemInt
GetDlgItemInt
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetWindowTextA
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
PostMessageA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
CharUpperA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
RegisterClipboardFormatA
MessageBeep
IsWindowVisible
GetKeyState
GetNextDlgGroupItem
GetWindowTextLengthA
PeekMessageA
GetCursorPos
ValidateRect
GetWindowThreadProcessId
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
IsIconic
DrawIcon
GetSystemMetrics
GetSystemMenu
AppendMenuA
LoadIconA
KillTimer
SetTimer
RedrawWindow
GetClientRect
SendMessageA
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
EnableWindow
InvalidateRect
CopyRect
GetSysColor
FillRect
GetDC
ReleaseDC
SetRect
CreateWindowExA

gdi32

ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetStockObject
SetViewportExtEx
SetViewportOrgEx
CreateRectRgnIndirect
GetRgnBox
OffsetViewportOrgEx
SelectClipRgn
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
GetDeviceCaps
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetCurrentObject
Escape
GetTextExtentPoint32A
ExtTextOutA
TextOutA
RectVisible
PtVisible
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetTextColor
GetBkMode
GetBkColor
CreateRectRgn
GetObjectA
CreateFontIndirectA
CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegDeleteKeyA
RegSetValueExA
RegQueryValueA
RegEnumKeyA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA

shell32

ShellExecuteA

comctl32

InitCommonControlsEx

shlwapi

PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecW

oledlg

ord8

ole32

OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CoCreateInstance
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoFreeUnusedLibraries
CoTaskMemFree
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
OleInitialize
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter

oleaut32

VariantCopy
SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantClear
OleCreateFontIndirect
SysAllocStringLen
SysAllocStringByteLen
SysFreeString
SysStringLen
VariantInit
VariantChangeType
VariantTimeToSystemTime
OleLoadPicture

wininet

FtpGetFileA
InternetCloseHandle
InternetOpenA
InternetConnectA

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1d1d13073c95fc4e9c68a520a16036d

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wininet

Sections

.text Size: 404KB - Virtual size: 404KB

.rdata Size: 85KB - Virtual size: 84KB

.data Size: 12KB - Virtual size: 36KB

.rsrc Size: 248KB - Virtual size: 248KB

.text
Size: 404KB - Virtual size: 404KB

.rdata
Size: 85KB - Virtual size: 84KB

.data
Size: 12KB - Virtual size: 36KB

.rsrc
Size: 248KB - Virtual size: 248KB