Static task
static1
Behavioral task
behavioral1
Sample
icedid_out.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
icedid_out.exe
Resource
win10v2004-20221111-en
General
-
Target
icedid_out.exe
-
Size
229KB
-
MD5
2e6808a4d0c8cfd1d9a347f8cf80dc6d
-
SHA1
8e91332481b033b4af9c24f65e3d24b10e60234b
-
SHA256
dfb3e5f557a17c8cdebdb5b371cf38c5a7ab491b2aeaad6b4e76459a05b44f28
-
SHA512
f631e6b7396a552486debadd205a1be94975400e34a3628fd542c3587f31ab14b3d6dc780f4f7768b5c143efd7df9ed95bdc20047a8272f22d9355f2e10e65bc
-
SSDEEP
6144:XEwzu35pbRYlB/DZxT+O3whxYVcLX+xf8OB3hceW:XzmolB/rTx3whxYOPWq
Malware Config
Signatures
Files
-
icedid_out.exe.exe windows x64
c1fffd3b9a9ea8dccbd4d69ddba77cc1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
user32
EndPaint
DestroyWindow
TranslateAcceleratorW
SetTimer
GetMessageW
PostQuitMessage
FillRect
KillTimer
DialogBoxParamW
LoadCursorW
BeginPaint
TranslateMessage
LoadAcceleratorsW
RegisterClassExW
LoadIconW
MessageBoxA
InvalidateRect
EndDialog
LoadStringW
ShowWindow
CreateWindowExW
MessageBoxW
SendMessageW
UpdateWindow
DefWindowProcW
DispatchMessageW
GetClientRect
GetDC
ReleaseDC
gdi32
CreateSolidBrush
BitBlt
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Ellipse
kernel32
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeFormatA
GetDateFormatA
WideCharToMultiByte
GetLocaleInfoW
GetLocaleInfoA
HeapReAlloc
GetStringTypeA
GetACP
GetCPInfo
InitializeCriticalSection
LoadLibraryA
FreeLibrary
SetConsoleCtrlHandler
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
HeapSize
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetOEMCP
WriteFile
GetLastError
HeapFree
HeapAlloc
GetVersionExA
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
RtlPcToFileHeader
HeapSetInformation
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleA
ExitProcess
GetStdHandle
GetModuleFileNameA
RtlUnwindEx
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FlsGetValue
TlsAlloc
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
GetCurrentThread
FlsAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
Sections
.text Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ