2024-05-22_4689654b8a567fe6c1938d946ad7f67b_icedid_nymaim

Sharing

Copy URL

Twitter E-mail

General

Target

2024-05-22_4689654b8a567fe6c1938d946ad7f67b_icedid_nymaim
Size

680KB
MD5

4689654b8a567fe6c1938d946ad7f67b
SHA1

9074bbbfc83ababd2dfadf375b3f70d43b45b3ba
SHA256

ee7c771757dc4bb999d98671be9ba52e2a60e5e20d5b9347d615a6f89d35f3d3
SHA512

970b48cfcb922389967a6ddcf91ca125bda1aec5768c8fefe92af82608391931c1208e3c6600a3ce1bff21e6687822a3d51a04e2168e594f70620144d3f982fd
SSDEEP

12288:vjipaoRP0Lphc45R3O894cEn7I811Wn9UisSiy9PrzafGGs0:vjipRcLphc45hO8947R1Wn9UvSiy9Pr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-22_4689654b8a567fe6c1938d946ad7f67b_icedid_nymaim

Files

2024-05-22_4689654b8a567fe6c1938d946ad7f67b_icedid_nymaim
.exe windows:4 windows x86 arch:x86

2082f18201c41052381005705e6b8849

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadWritePtr
Sleep
LCMapStringA
HeapDestroy
VirtualAlloc
VirtualFree
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapCreate
LCMapStringW
SetStdHandle
GetEnvironmentStringsW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetUnhandledExceptionFilter
HeapReAlloc
HeapSize
LeaveCriticalSection
LocalFree
GetFileAttributesA
FindFirstFileA
FindNextFileA
FindClose
GetEnvironmentVariableA
CreateProcessA
GetFullPathNameA
CreateMutexA
GetLastError
DeleteFileA
ExpandEnvironmentStringsA
MultiByteToWideChar
SearchPathA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
GetProfileStringA
OpenMutexA
CloseHandle
GetModuleFileNameA
WaitForSingleObject
GetExitCodeProcess
GlobalAlloc
GlobalLock
GlobalUnlock
FindResourceA
LoadResource
LockResource
GetCPInfo
lstrlenW
lstrlenA
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
GetFileType
PeekNamedPipe
GetFileInformationByHandle
RtlUnwind
HeapAlloc
HeapFree
SetErrorMode
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetCurrentDirectoryA
SizeofResource
GetOEMCP
TlsGetValue
LocalReAlloc
TlsFree
WideCharToMultiByte
TlsSetValue
GetVersion
InterlockedExchange
GlobalReAlloc
LocalAlloc
GlobalHandle
TlsAlloc
EnterCriticalSection
GetProcessVersion
GlobalFlags
InterlockedDecrement
DeleteCriticalSection
GetVersionExA
InitializeCriticalSection
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalFree
lstrcmpiA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcpyA
GlobalGetAtomNameA
GlobalAddAtomA
lstrcmpA
GetCurrentThreadId
lstrcpynA
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
InterlockedIncrement
FormatMessageA
GetStringTypeA
GetStringTypeW
FreeResource

user32

SetWindowTextA
IsDialogMessageA
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
IsZoomed
SetParent
IsRectEmpty
GetSystemMenu
WindowFromPoint
CreateDialogIndirectParamA
EndDialog
GetMenuCheckMarkDimensions
PostQuitMessage
ShowOwnedPopups
FindWindowA
GetClassNameA
SetTimer
KillTimer
InvertRect
GetDCEx
LockWindowUpdate
CharUpperA
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
LoadStringA
GetTopWindow
RegisterClassA
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
OffsetRect
GetWindowPlacement
GetLastActivePopup
BringWindowToTop
IsIconic
GetFocus
EqualRect
GetDlgItem
wsprintfA
SetWindowPos
GetDlgCtrlID
UnpackDDElParam
ReuseDDElParam
WinHelpA
LoadIconA
GetClassInfoA
LoadMenuA
IsChild
GetWindow
GetCapture
TranslateAcceleratorA
LoadAcceleratorsA
ShowScrollBar
UnhookWindowsHookEx
IsWindow
SetRectEmpty
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
InflateRect
IntersectRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
DestroyMenu
SetMenu
UpdateWindow
GetWindowRect
EnableWindow
GetParent
InvalidateRect
SetCursor
SetWindowLongA
SendMessageA
LoadCursorA
GetClientRect
PtInRect
ReleaseCapture
RedrawWindow
SetCapture
GetMenu
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
DrawMenuBar
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
MessageBoxA
IsMenu
GetSubMenu
GrayStringA
DeleteMenu
TabbedTextOutA
LoadBitmapA
GetSysColorBrush
GetMenuStringA
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
InsertMenuA
MapWindowPoints
SendDlgItemMessageA
GetWindowLongA
AdjustWindowRectEx
GetDesktopWindow
SetFocus
ShowWindow
RegisterWindowMessageA
AppendMenuA
GetSystemMetrics
GetDC
DrawTextA
ReleaseDC
DrawIconEx
DestroyIcon
CopyRect
FillRect
DrawEdge
SystemParametersInfoA
SetRect
GetMenuItemInfoA
GetSysColor
PostMessageA
IsWindowEnabled
SetActiveWindow
IsWindowUnicode
CharNextA
HideCaret
ShowCaret
UnregisterClassA
DrawFocusRect
ExcludeUpdateRgn
DefDlgProcA

gdi32

GetBkMode
CreatePen
CreateSolidBrush
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
GetTextExtentPoint32W
GetTextExtentPoint32A
Ellipse
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
PtVisible
RectVisible
PatBlt
TextOutA
ExtTextOutA
Escape
GetObjectA
GetStockObject
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetTextColor
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetWindowOrgEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
CreateRectRgn
CreatePatternBrush
CreateBitmap
SetRectRgn
CombineRgn
CreateRectRgnIndirect
StretchDIBits
GetCharWidthA
CreateFontA
GetTextMetricsA
LPtoDP
CreateDIBitmap
CreateFontIndirectA
GetClipBox
GetDeviceCaps
GetTextExtentPointA

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyA
SetFileSecurityA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegFlushKey
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegEnumValueA
RegEnumKeyExA
RegSaveKeyA
RegLoadKeyA
RegUnLoadKeyA
RegRestoreKeyA
RegQueryValueA
RegEnumKeyA
RegSetValueA
GetFileSecurityA
RegCreateKeyA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetDesktopFolder
ShellExecuteA
ShellExecuteExA
SHGetMalloc
ExtractIconA

comctl32

ImageList_ReplaceIcon
ImageList_Draw
ImageList_GetIcon
ImageList_AddMasked
ord17
ImageList_GetIconSize
ImageList_Destroy
ImageList_Create

ole32

CoCreateInstance
CoInitialize

Sections

.text
Size: 256KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2082f18201c41052381005705e6b8849

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

Sections

.text Size: 256KB - Virtual size: 253KB

.rdata Size: 56KB - Virtual size: 53KB

.data Size: 24KB - Virtual size: 44KB

.rsrc Size: 340KB - Virtual size: 339KB

.text
Size: 256KB - Virtual size: 253KB

.rdata
Size: 56KB - Virtual size: 53KB

.data
Size: 24KB - Virtual size: 44KB

.rsrc
Size: 340KB - Virtual size: 339KB