2024-09-08_bb6eb48ed3711809daa299b9e32322ec_hijackloader_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-09-08_bb6eb48ed3711809daa299b9e32322ec_hijackloader_icedid
Size

25.1MB
MD5

bb6eb48ed3711809daa299b9e32322ec
SHA1

f8082718a3c2763ed4f23e7b1f4572a819a6da1f
SHA256

8c6e1a77b5c58504934858acc0210ae3ade6208c51e9124d1febd5a6660d1827
SHA512

3f4729f1ff991cc21fb89dcae4791ec38b0831c1ad2f952f4f2fe3d51d3b2bcc5ab71bd655bcfb428a40886bb8978c97b3d6a525f0e93ea9fea553b08796e4d4
SSDEEP

196608:gCbfBnUNS7Q2OkZ4Z+r/nUNS7Q2OkZ4Z+r/nUNS7Q2OkZ4Z+r/nUNS7Q2OkZ4Z+j:gR2zGr2zGr2zGr2zGr2zG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-09-08_bb6eb48ed3711809daa299b9e32322ec_hijackloader_icedid

Files

2024-09-08_bb6eb48ed3711809daa299b9e32322ec_hijackloader_icedid
.exe windows:4 windows x86 arch:x86

98d5b8bc834c840409a769f3246367f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
RaiseException
HeapReAlloc
HeapSize
GetACP
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapFree
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
ExitProcess
GetProfileStringA
InterlockedExchange
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapAlloc
RtlUnwind
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
GetOEMCP
GetCPInfo
GetThreadLocale
SizeofResource
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetLastError
FormatMessageA
LocalFree
lstrcpynA
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalFree
LockResource
FindResourceA
LoadResource
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
GetModuleFileNameA
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
TerminateThread
WaitForSingleObject
GetTickCount
CreateThread
GetFileSize
ReadFile
CreateFileMappingA
MapViewOfFile
VirtualProtect
UnmapViewOfFile
CreateFileA
WriteFile
GetFileType
CloseHandle

user32

CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
MapDialogRect
GetWindow
SetWindowContextHelpId
SetWindowPos
WindowFromPoint
EndDialog
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
GetMenuCheckMarkDimensions
GetNextDlgGroupItem
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
PostQuitMessage
GrayStringA
TabbedTextOutA
LoadCursorA
CopyIcon
GetWindowRect
GetDC
ReleaseDC
InflateRect
IsWindow
RedrawWindow
SetCursor
MessageBeep
SetRect
GetWindowLongA
SetWindowLongA
GetActiveWindow
LoadBitmapA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
LoadIconA
GetParent
GetCapture
GetClientRect
PtInRect
CopyRect
GetSysColor
FillRect
OffsetRect
DrawIcon
EnableWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CopyAcceleratorTableA
CharNextA
GetSysColorBrush
GetMenuState
CloseClipboard
FlashWindow
PostMessageA
LoadMenuA
ClientToScreen
GetSubMenu
ReleaseCapture
InvalidateRect
UpdateWindow
SetCapture
GetSystemMenu
AppendMenuA
SendMessageA
GetDesktopWindow
DestroyMenu
LoadStringA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
WinHelpA
GetTopWindow
DrawTextA
GetClassNameA
GetNextDlgTabItem
IsChild

gdi32

SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
MoveToEx
LineTo
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PatBlt
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
SetBkMode
SetBkColor
RestoreDC
SaveDC
DeleteDC
CreateBitmap
CreatePen
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateCompatibleBitmap
GetTextExtentPoint32A
GetStockObject
CreateFontIndirectA
CreateSolidBrush
CreateCompatibleDC
BitBlt
SelectObject
CreateDIBitmap
GetTextExtentPointA
GetObjectA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

comctl32

ImageList_Draw
_TrackMouseEvent
ImageList_Destroy
ImageList_LoadImageA
ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
SysFreeString

urlmon

URLDownloadToFileA

Sections

.text
Size: 228KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24.8MB - Virtual size: 24.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98d5b8bc834c840409a769f3246367f8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

urlmon

Sections

.text Size: 228KB - Virtual size: 225KB

.rdata Size: 52KB - Virtual size: 50KB

.data Size: 24KB - Virtual size: 39KB

.rsrc Size: 24.8MB - Virtual size: 24.8MB

.text
Size: 228KB - Virtual size: 225KB

.rdata
Size: 52KB - Virtual size: 50KB

.data
Size: 24KB - Virtual size: 39KB

.rsrc
Size: 24.8MB - Virtual size: 24.8MB