NEAS[.]2023-09-28_16d3503451ae608848bd722054c3e7be_icedid[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.2023-09-28_16d3503451ae608848bd722054c3e7be_icedid.exe
Size

531KB
MD5

16d3503451ae608848bd722054c3e7be
SHA1

92b7bec1c7899365858be64bcef92a975207d54a
SHA256

e0f450df2f4a351aa4bb6f871fb37a517f2415876adf8ee47abbfd963d9cc350
SHA512

42facf32b0665f370f2c550f470d18e40668125eca150563c9cd44ad59e7d49322cf0fb28c585331b60ea500790c7cfac33ee5b424f378dff223752e16862110
SSDEEP

6144:Ewq5biTf1t//XKp9MrU9Iy7A780gaB5/QaIRwnrrPbwkYWJVlRshry:EwqQt//XKDMrUOh78PEQuHbjjL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2023-09-28_16d3503451ae608848bd722054c3e7be_icedid.exe

Files

NEAS.2023-09-28_16d3503451ae608848bd722054c3e7be_icedid.exe
.exe windows:4 windows x86

6ac9d54d10cf998f895986a6413582df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Destroy
ImageList_Draw
ord17
ImageList_GetImageInfo

dinput8

DirectInput8Create

kernel32

GetTimeFormatA
GetDateFormatA
ExitProcess
TerminateProcess
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
SetStdHandle
GetFileType
ExitThread
CreateThread
HeapSize
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
RtlUnwind
GetTickCount
MultiByteToWideChar
RaiseException
WritePrivateProfileStringA
SetErrorMode
GetFileTime
GetFileAttributesA
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
InterlockedIncrement
GlobalFlags
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
lstrcpyA
WinExec
lstrlenA
lstrcatA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
GetLocalTime
GetLastError
CreateMutexA
GetModuleFileNameA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
CreateEventA
SuspendThread
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetModuleHandleA
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
InterlockedDecrement
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
MulDiv
FormatMessageA
lstrcpynA
LocalFree
GlobalLock
GlobalUnlock
FreeResource
GlobalAlloc
GlobalFree
GetProcAddress
SetLastError
CompareStringW
CompareStringA
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
LCMapStringA

user32

CopyAcceleratorTableA
InvalidateRgn
SetCapture
GetNextDlgGroupItem
GetDCEx
LockWindowUpdate
RegisterClipboardFormatA
PostThreadMessageA
IsZoomed
GetMenuItemInfoA
DestroyMenu
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
WindowFromPoint
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
IsChild
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
CharNextA
MessageBoxA
IsWindowVisible
GetMenu
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowPos
OffsetRect
IntersectRect
IsIconic
GetWindowPlacement
CopyRect
wsprintfA
GetWindowTextLengthA
GetWindowTextA
GetWindow
SetFocus
GetMenuState
GetMenuItemCount
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetWindowLongA
FindWindowA
EnumChildWindows
GetClassNameA
TrackPopupMenu
SetMenuDefaultItem
LoadImageA
SetParent
SetActiveWindow
RedrawWindow
GetMenuItemID
SystemParametersInfoA
DestroyIcon
UnregisterClassA
CharUpperA
LoadBitmapA
RegisterWindowMessageA
SetWindowsHookExA
RegisterHotKey
SetRect
IsRectEmpty
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
GetMessageA
TranslateMessage
MapWindowPoints
ValidateRect
UpdateWindow
CallNextHookEx
GetKeyState
GetSystemMetrics
PostMessageA
GetCursorPos
LoadIconA
SetForegroundWindow
LoadMenuA
GetSubMenu
SetWindowLongA
CopyIcon
MessageBeep
GetSysColor
IsWindow
GetMessagePos
GetParent
KillTimer
ReleaseDC
GetDC
ScreenToClient
InflateRect
PtInRect
SetCursor
SendMessageA
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetTimer
InvalidateRect
GetWindowRect
FillRect
GetClientRect
LoadCursorA
EnableWindow
EndDeferWindowPos
CreatePopupMenu

gdi32

DeleteObject
SelectClipRgn
CreateRectRgn
GetPixel
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
PatBlt
GetTextColor
GetRgnBox
CreateHatchBrush
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
GetTextMetricsA
GetObjectA
CreateFontIndirectA
GetStockObject
GetTextExtentPoint32A
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontA
CreateSolidBrush
Rectangle

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey

shell32

Shell_NotifyIconA
SHAppBarMessage
DragFinish
DragQueryFileA
ShellExecuteA

shlwapi

PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
UrlUnescapeA

oledlg

ord8

ole32

CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemFree
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes

oleaut32

OleCreateFontIndirect
SysAllocString
SafeArrayDestroy
VariantCopy
SysAllocStringLen
VariantChangeType
VariantClear
SysAllocStringByteLen
SysStringLen
SysFreeString
SystemTimeToVariantTime
VariantInit

ws2_32

WSACleanup
WSAStartup

wininet

InternetOpenUrlA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
InternetQueryDataAvailable
InternetSetOptionExA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA

Sections

.text
Size: 290KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ac9d54d10cf998f895986a6413582df

Headers

File Characteristics

Imports

comctl32

dinput8

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

Sections

.text Size: 290KB - Virtual size: 290KB

.rdata Size: 78KB - Virtual size: 77KB

.data Size: 9KB - Virtual size: 26KB

.rsrc Size: 152KB - Virtual size: 151KB

.text
Size: 290KB - Virtual size: 290KB

.rdata
Size: 78KB - Virtual size: 77KB

.data
Size: 9KB - Virtual size: 26KB

.rsrc
Size: 152KB - Virtual size: 151KB