NEAS[.]2023-09-09_099d5e4dc61c0f0c13af3d67cf6a3c18_icedid_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.2023-09-09_099d5e4dc61c0f0c13af3d67cf6a3c18_icedid_JC.exe
Size

5.5MB
MD5

099d5e4dc61c0f0c13af3d67cf6a3c18
SHA1

597fcdebaa52fca688f93469e331fc1709780cc0
SHA256

42ff1f478da775fcff7f6013394229db14d218e2d3b258ab3b3650a888ac6177
SHA512

3f1db0e4ed6691c74dae674552a72a61621c8a434b6d4c357ecac9baf6aaed37d96ad4cd7380ba471b440a70a118a8a0c9175aa02ea196ba06d302d0e4e642a7
SSDEEP

98304:MmXVjmLBa+wz6q9e4EVmyccCicbCmRAQw+7MmHZ+GCG5xJRyXZaWydk:MmXVjJ+evxhw+7MmHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2023-09-09_099d5e4dc61c0f0c13af3d67cf6a3c18_icedid_JC.exe

Files

NEAS.2023-09-09_099d5e4dc61c0f0c13af3d67cf6a3c18_icedid_JC.exe
.exe windows:6 windows x86

db9f6d7bd69ea8007865b0e67658a0d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleOutputCP
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetStdHandle
QueryPerformanceFrequency
VirtualAlloc
HeapQueryInformation
GetFileType
SetStdHandle
FreeLibraryAndExitThread
GetTimeZoneInformation
GetModuleHandleExW
GetCommandLineA
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringEx
InitializeCriticalSectionEx
OutputDebugStringW
GetStartupInfoW
InitializeSListHead
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetTempFileNameW
SearchPathW
FindResourceExW
SetErrorMode
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
VerifyVersionInfoW
VerSetConditionMask
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalGetAtomNameW
GetProfileIntW
GetThreadLocale
lstrcmpiW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
GetSystemTimeAsFileTime
GetLocalTime
FileTimeToLocalFileTime
FileTimeToSystemTime
ResetEvent
Sleep
GetExitCodeProcess
GenerateConsoleCtrlEvent
VirtualQuery
CopyFileW
CreateProcessW
ReadConsoleW
GetCurrentDirectoryW
GlobalFlags
GetFileAttributesExW
GetVersionExW
GetFileAttributesW
FindClose
PeekNamedPipe
CreatePipe
RemoveDirectoryW
GetCurrentProcess
FindNextFileW
FreeEnvironmentStringsW
SetLastError
FindFirstFileW
ReadFile
CreateDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryW
GetUserDefaultLCID
FreeResource
GlobalReAlloc
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
GetCurrentProcessId
TerminateThread
GetModuleHandleW
GetModuleHandleA
OpenEventW
GetCurrentThreadId
lstrcpyW
SetWaitableTimer
CreateWaitableTimerW
IsDebuggerPresent
ResumeThread
GetVolumeInformationW
GetModuleFileNameW
GetTempPathW
GetSystemDirectoryW
GetWindowsDirectoryW
SetEnvironmentVariableW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetTickCount
GlobalFree
FindResourceW
LoadResource
LockResource
SizeofResource
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
DeleteFileW
MoveFileW
SetEndOfFile
LockFile
GetFullPathNameW
GetFileSize
FlushFileBuffers
CreateFileW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetCurrentThread
FormatMessageW
LocalFree
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
EncodePointer
OutputDebugStringA
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetConsoleMode
SetCurrentDirectoryW
GetEnvironmentStringsW
TryEnterCriticalSection
ReleaseSemaphore
PostQueuedCompletionStatus
CreateEventW
CreateIoCompletionPort
GetSystemInfo
CreateThread
GetQueuedCompletionStatus
SetEvent
HeapFree
SetThreadPriority
WaitForSingleObject
CloseHandle
CreateSemaphoreW
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
WriteConsoleW
GetCommandLineW
ExitThread

user32

GetScrollPos
InvalidateRect
EnableWindow
GetScrollRange
SetScrollRange
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
SendMessageW
SetScrollPos
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetDoubleClickTime
TabbedTextOutW
GrayStringW
DrawTextExW
IsClipboardFormatAvailable
SystemParametersInfoW
DrawTextW
GetMessagePos
InvertRect
ChildWindowFromPointEx
IsZoomed
GetSystemMenu
GetWindow
ScreenToClient
MessageBeep
DrawIcon
ShowWindow
RedrawWindow
IsChild
GetTopWindow
IsWindowEnabled
SetMenu
WinHelpW
LoadBitmapW
IsIconic
DeleteMenu
CreatePopupMenu
TrackPopupMenu
GetSubMenu
DestroyAcceleratorTable
CreateAcceleratorTableW
DestroyMenu
TranslateAcceleratorW
InsertMenuW
AppendMenuW
CreateMenu
InflateRect
OffsetRect
DrawStateW
FrameRect
DrawFocusRect
GetNextDlgTabItem
CopyRect
ClientToScreen
UpdateWindow
GetCapture
PtInRect
FillRect
IsRectEmpty
IntersectRect
SetRect
wsprintfW
MonitorFromWindow
SetActiveWindow
WaitForInputIdle
OpenClipboard
GetMonitorInfoW
CloseClipboard
EmptyClipboard
MoveWindow
SetClipboardData
EnumDisplaySettingsW
SetForegroundWindow
CopyImage
GetWindowLongW
DefWindowProcW
GetPropW
RemovePropW
LoadStringW
GetActiveWindow
GetClassInfoW
RegisterClassW
SetPropW
MapWindowPoints
CheckDlgButton
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
GetMessageTime
GetClassInfoExW
IsMenu
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetMenu
GetMenuItemID
GetMenuItemCount
BeginPaint
EndPaint
ValidateRect
ScrollWindow
ShowScrollBar
GetDlgItem
GetClassLongW
GetLastActivePopup
SetScrollInfo
GetScrollInfo
GetMenuStringW
GetMenuState
RemoveMenu
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadMenuW
GetKeyNameTextW
MapVirtualKeyW
NotifyWinEvent
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
ShowOwnedPopups
CharUpperW
CharNextW
CreateDialogIndirectParamW
EndDialog
SendDlgItemMessageA
SetRectEmpty
GetMenuItemInfoW
MonitorFromPoint
GetSysColorBrush
RealChildWindowFromPoint
GetAsyncKeyState
BringWindowToTop
LoadAcceleratorsW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
SetLayeredWindowAttributes
EnumDisplayMonitors
TrackMouseEvent
ModifyMenuW
PostThreadMessageW
WaitMessage
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CopyAcceleratorTableW
EnumChildWindows
LockWindowUpdate
SetClassLongW
InvalidateRgn
GetNextDlgGroupItem
DrawEdge
DrawFrameControl
DrawIconEx
UnionRect
GetIconInfo
CharUpperBuffW
UpdateLayeredWindow
EnableScrollBar
GetMenuDefaultItem
SetMenuDefaultItem
CopyIcon
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
HideCaret
GetComboBoxInfo
GetWindowRgn
LoadIconW
GetDesktopWindow
LoadImageW
GetDC
GetSystemMetrics
GetWindowDC
ReleaseDC
CallWindowProcW
SetWindowLongW
ReleaseCapture
SetCapture
DestroyWindow
GetClientRect
GetDlgCtrlID
CreateWindowExW
SetTimer
KillTimer
GetWindowInfo
GetWindowTextW
GetWindowTextLengthW
GetClassNameW
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
GetAncestor
SetWindowRgn
EnumWindows
WindowFromPoint
MsgWaitForMultipleObjects
PostMessageW
DestroyCursor
DestroyIcon
AdjustWindowRectEx
SetCursor
GetKeyState
SetParent
SetWindowPos
EqualRect
SetFocus
IsWindow
MessageBoxW
GetFocus
GetParent
GetWindowRect
SetCursorPos
GetCursorPos
LoadCursorW
IsWindowVisible
GetSysColor

gdi32

GetTextFaceW
PtInRegion
GetBoundsRect
GetBkColor
RectVisible
TextOutW
Escape
PtVisible
ExtTextOutW
CreateDCW
SetPixelV
Polygon
LPtoDP
DPtoLP
GetWindowExtEx
SetPixel
CreateBrushIndirect
CreateHatchBrush
GetWindowOrgEx
CreatePatternBrush
ExtCreateRegion
GetViewportOrgEx
GetTextMetricsW
Rectangle
Ellipse
CreateEllipticRgn
GetPixel
SetTextColor
CreatePen
SetBkColor
CreateBitmap
RoundRect
PatBlt
GetCurrentObject
CreateRectRgn
CreateSolidBrush
CombineRgn
FillRgn
GetTextExtentPoint32W
BitBlt
CreateCompatibleBitmap
SelectObject
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
GdiAlphaBlend
StretchBlt
RealizePalette
GetStockObject
GetDIBits
GetDeviceCaps
GetSystemPaletteEntries
SelectPalette
CreatePalette
SetStretchBltMode
CreateRoundRectRgn
GetObjectW
CreateFontIndirectW
DeleteObject
DeleteDC
FrameRgn
CopyMetaFileW
SetPaletteEntries
ExtFloodFill
GetPaletteEntries
GetNearestPaletteIndex
EnumFontFamiliesExW
Polyline
CreatePolygonRgn
OffsetRgn
GetRgnBox
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetTextColor
SetRectRgn
GetMapMode
CreateRectRgnIndirect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
LineTo
IntersectClipRect
GetViewportExtEx
GetObjectType
GetClipBox
ExcludeClipRect

advapi32

RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegDeleteValueW
RegQueryValueExW
OpenProcessToken
RegQueryValueW
AdjustTokenPrivileges
RegEnumValueW
RegEnumKeyW
LookupPrivilegeValueW
RegOpenKeyExW

shell32

DragQueryFileW
DragFinish
SHGetSpecialFolderPathW
Shell_NotifyIconW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
SHAppBarMessage
SHGetFileInfoW
ShellExecuteW

ole32

ReleaseStgMedium
CoFreeUnusedLibraries
CoCreateGuid
OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoDisconnectObject
CoGetClassObject
CoRevokeClassObject
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoTaskMemFree
CoTaskMemAlloc
OleDuplicateData
CoInitializeEx
CoUninitialize
CoSetProxyBlanket
OleInitialize
OleUninitialize
CLSIDFromString
OleRun
CLSIDFromProgID
CoCreateInstance
CreateStreamOnHGlobal
CoInitialize
CreateILockBytesOnHGlobal

oleaut32

SysAllocStringLen
VarBstrFromDate
OleLoadPicture
VariantTimeToSystemTime
LHashValOfNameSys
VariantInit
LoadTypeLi
SysStringLen
SafeArrayDestroy
VariantClear
VariantChangeType
VarCmp
SystemTimeToVariantTime
VariantCopy
SysAllocString
RegisterTypeLi
OleCreateFontIndirect
VariantCopyInd
SysFreeString

comctl32

_TrackMouseEvent
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
InitCommonControlsEx

hpsocket_u

HP_Create_TcpPackClient
HP_Destroy_TcpPackClient

gdiplus

GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdiplusShutdown
GdipCreateBitmapFromScan0
GdiplusStartup
GdipGetImageHeight
GdipGetImagePaletteSize
GdipCloneImage
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipAlloc
GdipDrawImageRectI
GdipDisposeImage
GdipGetImagePixelFormat
GdipFree
GdipCreateBitmapFromFile
GdipGetImageWidth
GdipSetCompositingMode
GdipGetImagePalette
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipBitmapLockBits
GdipSetInterpolationMode

urlmon

URLDownloadToFileW

wininet

DeleteUrlCacheEntryW

winmm

timeSetEvent
PlaySoundW
timeKillEvent

msimg32

TransparentBlt
AlphaBlend

shlwapi

PathFindFileNameW
PathFindExtensionW
PathStripToRootW
StrFormatKBSizeW
PathIsUNCW
PathRemoveFileSpecW

uxtheme

OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsAppThemed
GetWindowTheme
DrawThemeText
DrawThemeParentBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor

oledlg

OleUIBusyW

ws2_32

WSACleanup

iphlpapi

GetAdaptersInfo

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

Exports

Exports

?active_implementation@simdutf@@3V?$atomic_ptr@$$CBVimplementation@simdutf@@@internal@1@A
?available_implementations@simdutf@@3Vavailable_implementation_list@internal@1@B

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 596KB - Virtual size: 595KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db9f6d7bd69ea8007865b0e67658a0d9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

hpsocket_u

gdiplus

urlmon

wininet

winmm

msimg32

shlwapi

uxtheme

oledlg

ws2_32

iphlpapi

oleacc

imm32

winspool.drv

Exports

Exports

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rdata Size: 596KB - Virtual size: 595KB

.data Size: 33KB - Virtual size: 55KB

.rsrc Size: 2.2MB - Virtual size: 2.2MB

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 596KB - Virtual size: 595KB

.data
Size: 33KB - Virtual size: 55KB

.rsrc
Size: 2.2MB - Virtual size: 2.2MB