2023-08-25_4d4fbc169c42481d9e6c1660298d8459_icedid_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2023-08-25_4d4fbc169c42481d9e6c1660298d8459_icedid_JC.exe
Size

1020KB
MD5

4d4fbc169c42481d9e6c1660298d8459
SHA1

0738aaa6b3030ab2e28b36e1e58e9562684e4b3a
SHA256

7b73005779a235b2f4647e6a48deb7bfedcb9cbbf4bb2cd5a76cc8916815cbbe
SHA512

e1d589ce45d0ddd60af5983aab7e54a315f14e318009f6c044dafe294ed5e232bd4f688236062dc2570f369e551d836fbed19b4bcde6ce978856fcbc932a425e
SSDEEP

24576:3MYfDthHB1dKDNwh9j2DGQ0Wu3VWzEUUCbbcAJE18b:cY5hHkY1AEUUCbbcCEib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2023-08-25_4d4fbc169c42481d9e6c1660298d8459_icedid_JC.exe

Files

2023-08-25_4d4fbc169c42481d9e6c1660298d8459_icedid_JC.exe
.exe windows:5 windows x86

1168d45d0a02a24e8106601f071fa25a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetEnvironmentVariableA
CompareStringW
InterlockedIncrement
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
HeapReAlloc
HeapSize
VirtualFree
HeapFree
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetTimeZoneInformation
IsValidCodePage
GetACP
LoadLibraryW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
ExitProcess
ExitThread
GetFileType
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
RaiseException
RtlUnwind
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
GetDateFormatA
GetTimeFormatA
GetFullPathNameA
GetVolumeInformationA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
FindFirstFileA
FindClose
GetFileTime
GetFileSizeEx
GetFileAttributesA
GetOEMCP
GetCPInfo
VirtualProtect
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetModuleHandleW
SetErrorMode
GetThreadLocale
FileTimeToSystemTime
WritePrivateProfileStringA
InterlockedExchange
GetCurrentThread
GetLocaleInfoA
ConvertDefaultLocale
EnumResourceLanguagesA
WaitForSingleObject
lstrcmpA
GetAtomNameA
GetProfileIntA
GetModuleFileNameW
CompareStringA
FreeResource
lstrcmpW
FreeLibrary
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SuspendThread
ResumeThread
SetThreadPriority
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetCurrentProcessId
SetLastError
GlobalFree
lstrlenW
CopyFileA
GlobalAlloc
MultiByteToWideChar
GetTickCount
TerminateThread
GetModuleFileNameA
CreateThread
SetupComm
CreateMutexA
ReadFile
GetOverlappedResult
WriteFile
LocalFree
GetCommMask
WaitForMultipleObjects
ClearCommError
GetLastError
WaitCommEvent
PurgeComm
SetCommState
BuildCommDCBA
GetCommState
SetCommMask
SetCommTimeouts
LeaveCriticalSection
CreateFileA
EnterCriticalSection
InitializeCriticalSection
CreateEventA
ResetEvent
Sleep
DeleteCriticalSection
CloseHandle
SetEvent
MulDiv
GlobalUnlock
GlobalLock
GlobalSize
GlobalReAlloc
QueryPerformanceCounter
GetVersionExA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
HeapAlloc
lstrlenA
FormatMessageA
GetProcessHeap
InterlockedDecrement
OpenEventA

user32

UnpackDDElParam
ReuseDDElParam
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
GetMessageA
TranslateMessage
GetMenuCheckMarkDimensions
EndDialog
CreateDialogIndirectParamA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterClipboardFormatA
RegisterWindowMessageA
CreateWindowExA
GetClassInfoExA
RegisterClassA
SendDlgItemMessageA
DispatchMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
GetScrollInfo
SetScrollInfo
WinHelpA
TrackPopupMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
DestroyWindow
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
SetMenu
GetMenu
GetMessageTime
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
GetWindowPlacement
LoadIconA
PostThreadMessageA
GetScrollPos
MapDialogRect
SetWindowContextHelpId
GetForegroundWindow
SetForegroundWindow
WindowFromPoint
IsChild
GetWindow
GetTopWindow
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
GetDesktopWindow
GetFocus
SetCapture
GetCapture
SetActiveWindow
GetActiveWindow
KillTimer
SetTimer
ShowOwnedPopups
IsWindowVisible
ValidateRect
InvalidateRgn
InvalidateRect
UpdateWindow
MapWindowPoints
GetClientRect
GetWindowRect
BringWindowToTop
IsZoomed
IsIconic
PostMessageA
EndPaint
BeginPaint
SystemParametersInfoA
GetDC
ReleaseDC
GetSysColor
DrawTextA
GetWindowDC
ClientToScreen
ScreenToClient
LoadMenuA
SetMenuItemBitmaps
ModifyMenuA
InsertMenuItemA
GetMenuItemInfoA
GetClipboardFormatNameA
UnregisterClassA
CharUpperA
CopyAcceleratorTableA
EnableMenuItem
CheckMenuItem
CharNextA
MessageBeep
IsRectEmpty
SetCursor
IsWindow
GetClassInfoA
DefWindowProcA
InflateRect
SetRect
PtInRect
GetKeyState
GetCursorPos
IsClipboardFormatAvailable
GetSystemMetrics
GetMessagePos
ClipCursor
ReleaseCapture
SendMessageA
MessageBoxA
PostQuitMessage
LoadCursorA
GetDoubleClickTime
GetMenuItemID
GetMenuState
GetSubMenu
GetMenuItemCount
IsMenu
PeekMessageA
GetWindowThreadProcessId
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetParent
GetWindowLongA
GetSysColorBrush
LoadBitmapA
FillRect
FrameRect
InvertRect
DrawIcon
DrawEdge
TabbedTextOutA
DrawTextExA
GrayStringA
CreatePopupMenu

gdi32

GetWindowExtEx
PtVisible
RectVisible
PatBlt
BitBlt
GetPixel
TextOutA
ExtTextOutA
GetTextExtentPoint32A
GetTextMetricsA
Escape
GetCurrentObject
DeleteDC
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
DeleteObject
ExtSelectClipRgn
GetViewportExtEx
GetMapMode
GetTextColor
GetBkColor
SelectObject
GetRgnBox
GetObjectA
CopyMetaFileA
GetDeviceCaps
GetStockObject
GetObjectType
CreatePen
CreateCompatibleDC
CreateSolidBrush
CreatePatternBrush
CreateRectRgnIndirect
CreateCompatibleBitmap
CreateBitmap
CreateFontA
CreateFontIndirectA

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

SetThreadToken
OpenThreadToken
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RevertToSelf

shell32

DragFinish
DragQueryFileA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathIsUNCA
PathFindExtensionA
PathStripToRootA

oledlg

ord8

ole32

StringFromGUID2
CLSIDFromString
CLSIDFromProgID
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
CoRevokeClassObject
StgCreateDocfileOnILockBytes
DoDragDrop
OleGetClipboard
OleFlushClipboard
OleSetClipboard
OleIsCurrentClipboard
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
OleDuplicateData
CoUninitialize
CoInitialize
OleRun
CoCreateInstance
CoGetClassObject
CoRegisterMessageFilter
CreateILockBytesOnHGlobal

oleaut32

SystemTimeToVariantTime
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantInit
VariantCopy
VariantClear
VariantChangeType
VarUdateFromDate
SysStringLen
SysAllocStringLen
SafeArrayDestroy
OleCreateFontIndirect
GetErrorInfo
VariantTimeToSystemTime

Sections

.text
Size: 778KB - Virtual size: 777KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1168d45d0a02a24e8106601f071fa25a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 778KB - Virtual size: 777KB

.rdata Size: 189KB - Virtual size: 189KB

.data Size: 12KB - Virtual size: 28KB

.rsrc Size: 39KB - Virtual size: 40KB

.text
Size: 778KB - Virtual size: 777KB

.rdata
Size: 189KB - Virtual size: 189KB

.data
Size: 12KB - Virtual size: 28KB

.rsrc
Size: 39KB - Virtual size: 40KB