2024-07-05_c26bb1390c60e8278dcaec3f2a0599af_icedid_nymaim

Sharing

Copy URL

Twitter E-mail

General

Target

2024-07-05_c26bb1390c60e8278dcaec3f2a0599af_icedid_nymaim
Size

668KB
MD5

c26bb1390c60e8278dcaec3f2a0599af
SHA1

65d9b339536cd37d57f00336ccb1f36ce049918b
SHA256

e1434cc9a082aaecdecaf2823ec26507522b3279c88930f15d6a228524b76d52
SHA512

43648ed2d11dcc5a0576d60d76b253646873278744d3496bcc616418b5e7a5878796cae81f228214f15e293ade5569c0eb129ede6f06013f4854543bb4b6dbf8
SSDEEP

12288:P+SvIx8wRDBybSIAKpHMdj5yKtN5fkKZVF7+rGq:rIxNBybSoShDB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-05_c26bb1390c60e8278dcaec3f2a0599af_icedid_nymaim

Files

2024-07-05_c26bb1390c60e8278dcaec3f2a0599af_icedid_nymaim
.exe windows:4 windows x86 arch:x86

76b99dc37cf3aead08a2d1a078784fca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileA
GetVolumeInformationA
GetStringTypeExA
GetThreadLocale
LocalFileTimeToFileTime
SetEndOfFile
SystemTimeToFileTime
GlobalSize
CopyFileA
SetErrorMode
lstrcpyW
RtlUnwind
HeapFree
GetCommandLineA
HeapAlloc
CreateThread
LockFile
UnlockFile
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
GetACP
TerminateThread
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
ExitThread
DuplicateHandle
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetFilePointer
ExitProcess
GetFullPathNameA
CreateFileA
SetThreadContext
lstrcmpA
GetThreadContext
GetModuleFileNameA
FreeLibrary
LoadLibraryA
LoadLibraryW
LoadLibraryExA
GetProcAddress
LoadLibraryExW
ReadProcessMemory
CreateProcessA
GetLastError
SetEvent
WaitForDebugEvent
ContinueDebugEvent
RaiseException
CreateEventA
ResumeThread
CloseHandle
SetLastError
TerminateProcess
GetCurrentThreadId
WaitForSingleObject
GetProfileStringA
FlushFileBuffers
GetCurrentProcess
GetCurrentDirectoryA
TlsGetValue
GetOEMCP
GetCPInfo
GlobalReAlloc
LocalReAlloc
TlsSetValue
TlsAlloc
TlsFree
GlobalHandle
GetProcessVersion
LocalAlloc
GlobalFlags
GetFileTime
lstrlenW
GetDiskFreeSpaceA
WritePrivateProfileStringA
SetFileTime
GetTempFileNameA
GlobalFree
GetPrivateProfileStringA
GetPrivateProfileIntA
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
SuspendThread
InterlockedIncrement
GetCurrentThread
lstrcmpiA
SetThreadPriority
MulDiv
GetModuleHandleA
GlobalFindAtomA
GlobalDeleteAtom
GlobalGetAtomNameA
lstrcatA
lstrcpynA
lstrcpyA
GlobalAddAtomA
GetVersion
SetEnvironmentVariableA
GetFileInformationByHandle
GetLocalTime
CreateFileMappingA
GetEnvironmentVariableA
GetFileSize
UnmapViewOfFile
MapViewOfFile
ExpandEnvironmentStringsA
LeaveCriticalSection
CompareFileTime
EnterCriticalSection
GlobalUnlock
GlobalAlloc
GlobalLock
InitializeCriticalSection
GetStartupInfoA
DeleteCriticalSection
GetLogicalDrives
DeleteFileA
FindNextFileA
GetFileAttributesA
GetDriveTypeA
GetSystemDirectoryA
FindClose
lstrlenA
FindFirstFileA
LockResource
FindResourceA
LoadResource
GetTempPathA
SizeofResource
GetWindowsDirectoryA
FileTimeToSystemTime
FormatMessageA
LocalFree
GetVersionExA
GetShortPathNameA
GetComputerNameA
GetTimeZoneInformation
GetSystemInfo
GlobalMemoryStatus
WriteProcessMemory
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
WriteFile
VirtualProtectEx
FlushInstructionCache
SetUnhandledExceptionFilter
ReadFile
GetStringTypeA
HeapDestroy
HeapCreate

user32

DestroyIcon
CharUpperA
SetTimer
KillTimer
GetMenuStringA
InvertRect
LockWindowUpdate
RegisterClipboardFormatA
CopyAcceleratorTableA
GetDCEx
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextA
CheckDlgButton
SendDlgItemMessageA
ModifyMenuA
DispatchMessageA
DeferWindowPos
MapWindowPoints
EndDeferWindowPos
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
RegisterClassA
TrackPopupMenu
DefWindowProcA
DestroyWindow
SetWindowsHookExA
CallNextHookEx
GetClassLongA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetForegroundWindow
SetForegroundWindow
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
BeginDeferWindowPos
IsWindowVisible
IsIconic
EqualRect
GetKeyState
GetDlgCtrlID
FillRect
InsertMenuA
SetActiveWindow
SetMenu
LoadIconA
GetClassInfoA
DestroyMenu
ShowWindow
GetDesktopWindow
GetWindow
SetCursor
PeekMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
GetActiveWindow
GetMenuItemID
AdjustWindowRectEx
RedrawWindow
SetWindowPos
GetWindowLongA
SetWindowLongA
DefMDIChildProcA
DrawMenuBar
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
CreateWindowExA
BringWindowToTop
GetMenu
GetMenuItemCount
CopyRect
DrawFocusRect
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetMessagePos
LoadMenuA
GetSubMenu
GetMessageTime
GetDC
DeleteMenu
AppendMenuA
IsRectEmpty
SetParent
WindowFromPoint
GetWindowThreadProcessId
WaitMessage
EndDialog
CreateDialogIndirectParamA
ReleaseDC
PostMessageA
MessageBeep
InvalidateRect
RemoveMenu
EnableMenuItem
GetWindowRect
ScreenToClient
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
GetFocus
IsWindowEnabled
IsWindow
SetFocus
GetParent
FindWindowA
LoadStringA
GetClassNameA
GetSysColorBrush
CountClipboardFormats
IsClipboardFormatAvailable
SetRect
GetSystemMenu
ShowOwnedPopups
GetLastActivePopup
PostQuitMessage
IsZoomed
GetClientRect
GetSystemMetrics
EnableWindow
wsprintfA
GetSysColor
MessageBoxA
WinHelpA
UpdateWindow
SetDebugErrorLevel
SendMessageA
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
LoadCursorA
DestroyCursor
GetMenuState
PtInRect
SetCapture
InflateRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapA
UnpackDDElParam
ReuseDDElParam
SetPropA
SetCursorPos
IsWindowUnicode
CharNextA
ShowCaret
ExcludeUpdateRgn
UnregisterClassA
DefDlgProcA
HideCaret

gdi32

GetTextExtentPointA
GetTextAlign
GetTextExtentPoint32A
SetTextColor
SetBkColor
GetClipBox
CreateBitmap
DeleteDC
GetObjectA
SaveDC
RestoreDC
SetBkMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SetWindowExtEx
IntersectClipRect
ExcludeClipRect
LineTo
SetTextAlign
MoveToEx
GetStockObject
DeleteObject
CreateRectRgn
GetDeviceCaps
GetWindowExtEx
GetViewportExtEx
CreateSolidBrush
PtVisible
CreatePatternBrush
TextOutA
ExtTextOutA
RectVisible
PatBlt
CreateRectRgnIndirect
Escape
StretchDIBits
CreateCompatibleDC
GetTextMetricsA
GetCharWidthA
CreateFontA
CreateCompatibleBitmap
DPtoLP
GetMapMode
CreateDCA
CombineRgn
CreateFontIndirectA
SetRectRgn
BitBlt
CopyMetaFileA
CreateDIBitmap
SelectObject

comdlg32

GetFileTitleA
ReplaceTextA
FindTextA
GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
CommDlgExtendedError

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

SetFileSecurityA
GetUserNameA
RegSetValueA
RegCloseKey
RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegEnumValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
GetFileSecurityA
RegCreateKeyA

shell32

ExtractIconA
DragAcceptFiles
DragQueryFileA
DragFinish
ShellExecuteExA
ShellExecuteA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetFileInfoA

comctl32

ImageList_Draw
ord17
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord4
ord3
ord11

ole32

ReadFmtUserTypeStg
ReadClassStg
CoTaskMemAlloc
WriteFmtUserTypeStg
WriteClassStg
CoTreatAsClass
CreateBindCtx
CreateGenericComposite
SetConvertStg
OleDuplicateData
OleGetClipboard
OleSetMenuDescriptor
CreateItemMoniker
OleSetContainedObject
StringFromCLSID
OleLockRunning
CreateFileMoniker
CoDisconnectObject
OleRegGetUserType
CoTaskMemFree
ReleaseStgMedium
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSave
OleLoad
OleCreate
CreateStreamOnHGlobal
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleSaveToStream
WriteClassStm
OleGetIconOfClass
OleCreateFromData

Sections

.text
Size: 360KB - Virtual size: 358KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

76b99dc37cf3aead08a2d1a078784fca

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

Sections

.text Size: 360KB - Virtual size: 358KB

.rdata Size: 80KB - Virtual size: 77KB

.data Size: 28KB - Virtual size: 45KB

.rsrc Size: 196KB - Virtual size: 212KB

.text
Size: 360KB - Virtual size: 358KB

.rdata
Size: 80KB - Virtual size: 77KB

.data
Size: 28KB - Virtual size: 45KB

.rsrc
Size: 196KB - Virtual size: 212KB