2024-06-02_588c977bd5f06fc50b775c06b21fef3b_icedid_nymaim

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-02_588c977bd5f06fc50b775c06b21fef3b_icedid_nymaim
Size

1.1MB
MD5

588c977bd5f06fc50b775c06b21fef3b
SHA1

b407875ce0ca82d3c87c5fda3a118d74ca6d8ff8
SHA256

b58e991db829401053af971a42613939e926e5495c090ee9870f79e2d96f4337
SHA512

b13662c6777f8dd3e9b86d6e9fe5012e870cf30354242903a85382f2dfbcea9a6c30d3f012a82fe5375d5f39527066d17393c8a13e735d2e64906fd02dbf4774
SSDEEP

24576:EQqkfxcICrc4bG7uehDG/4MoS3eMN04mY/:hfBu54DFMDT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-02_588c977bd5f06fc50b775c06b21fef3b_icedid_nymaim

Files

2024-06-02_588c977bd5f06fc50b775c06b21fef3b_icedid_nymaim
.exe windows:4 windows x86 arch:x86

1d8a90e8ad48a1586707c9a8873da260

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetStdHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LCMapStringA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
PeekNamedPipe
GetFileInformationByHandle
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapSize
RaiseException
SetConsoleCtrlHandler
GetSystemTimeAsFileTime
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetCommandLineA
GetStartupInfoA
HeapReAlloc
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
RtlUnwind
SetErrorMode
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDiskFreeSpaceA
GetFileTime
SetFileTime
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
GetCurrentThread
lstrcmpA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
lstrcpynA
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
MulDiv
SetLastError
LocalFree
InterlockedDecrement
InterlockedIncrement
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FindResourceA
GetStdHandle
FlushConsoleInputBuffer
TerminateThread
ExitThread
Sleep
WaitForSingleObject
ReleaseMutex
GetVersion
GetProfileStringA
WriteProfileStringA
lstrcpyA
lstrcatA
GlobalUnlock
GlobalFree
GlobalLock
lstrlenW
GetCurrentThreadId
LockResource
GetUserDefaultLangID
FindResourceExA
LoadResource
WideCharToMultiByte
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
lstrlenA
GetACP
MultiByteToWideChar
GlobalAlloc
GetModuleHandleA
GetModuleFileNameA
GetLastError
SetCurrentDirectoryA
GetCurrentDirectoryA
GetProfileIntA
GetProcAddress
FreeLibrary
LoadLibraryA
CreateThread
CloseHandle
RemoveDirectoryA
GetTempPathA
GetVolumeInformationA
GetTempFileNameA
FindFirstFileA
FindNextFileA
FindClose
GetFileAttributesA
CreateDirectoryA
GetDriveTypeA
CreateMutexA

user32

GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
CheckMenuItem
EnableMenuItem
MoveWindow
IsDialogMessageA
SetDlgItemTextA
MapWindowPoints
PeekMessageA
GetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
wsprintfA
RegisterClassA
GetMenuItemID
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
CreateDialogIndirectParamA
IsWindowEnabled
LoadMenuA
GetCursorPos
GetSubMenu
SetMenuDefaultItem
KillTimer
DestroyCursor
SetFocus
GetActiveWindow
GetMessageA
TranslateMessage
DispatchMessageA
SendDlgItemMessageA
SetWindowTextA
GetWindowTextA
PostThreadMessageA
EndDialog
DialogBoxIndirectParamA
SetRect
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetMenu
InsertMenuA
DrawMenuBar
SetActiveWindow
RemovePropA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode
SetWindowLongA
CallWindowProcA
GetPropA
SetCursor
SystemParametersInfoA
LoadBitmapA
DrawEdge
CopyRect
OffsetRect
GetDesktopWindow
GetSysColor
FillRect
GetClassInfoA
GetSystemMetrics
GetMenuItemCount
GetMenuItemInfoA
IsWindow
RedrawWindow
PostMessageA
MessageBoxA
FindWindowA
IsIconic
ShowWindow
SetForegroundWindow
LoadIconA
UpdateWindow
wvsprintfA
ReleaseDC
GetDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
PostQuitMessage
ShowOwnedPopups
DestroyWindow
ValidateRect
GetClientRect
EnableWindow
GetDlgItem
GetParent
SetPropA
GetWindowLongA
GetCapture
SendMessageA
InvalidateRect
SetCapture
GetWindowRect
LoadCursorA
ReleaseCapture
PtInRect
ClientToScreen
LoadStringA
SetRectEmpty
SetParent
LockWindowUpdate
GetDCEx
GetTabbedTextExtentA
DestroyIcon
GetMenuStringA
DeleteMenu
GetSysColorBrush
GetClassNameA
UnionRect
IsRectEmpty
SetCursorPos
IsZoomed
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
TranslateAcceleratorA
LoadAcceleratorsA
GetWindowThreadProcessId
WaitMessage
InflateRect
WindowFromPoint
SetTimer
DestroyMenu
SetMenuItemBitmaps

gdi32

ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
CreateRectRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
CreateSolidBrush
SetViewportExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
Rectangle
DPtoLP
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
StretchDIBits
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
SetRectRgn
CombineRgn
GetTextExtentPoint32A
GetTextMetricsA
LPtoDP
GetBkColor
GetNearestColor
GetTextColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
GetStockObject
RestoreDC
SaveDC
StartDocA
CreateRectRgnIndirect
PatBlt
SetBkColor
GetClipBox
SetPixel
GetPixel
DeleteDC
BitBlt
CreateBitmap
ExtFloodFill
FloodFill
CreateCompatibleDC
SelectObject
StretchBlt
CreatePatternBrush
GetObjectA
CreateFontIndirectA
DeleteObject
CreateDIBitmap
GetTextExtentPointA
SetTextColor

comdlg32

PrintDlgA
CommDlgExtendedError
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
CryptDestroyHash
CryptSignHashA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
CryptCreateHash
CryptSetHashParam

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
Shell_NotifyIconA
SHGetDesktopFolder
SHGetPathFromIDListW
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
ExtractIconA

comctl32

_TrackMouseEvent
ord17
ImageList_Destroy

oleaut32

SysAllocStringLen

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 776KB - Virtual size: 773KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d8a90e8ad48a1586707c9a8873da260

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oleaut32

version

Sections

.text Size: 776KB - Virtual size: 773KB

.rdata Size: 184KB - Virtual size: 181KB

.data Size: 80KB - Virtual size: 157KB

.rsrc Size: 68KB - Virtual size: 65KB

.text
Size: 776KB - Virtual size: 773KB

.rdata
Size: 184KB - Virtual size: 181KB

.data
Size: 80KB - Virtual size: 157KB

.rsrc
Size: 68KB - Virtual size: 65KB