Static task
static1
Behavioral task
behavioral1
Sample
icedid_out.exe
Resource
win7-20221111-en
General
-
Target
icedid_out.exe
-
Size
253KB
-
MD5
80bcfac75ef0abc457a7d98b6840d352
-
SHA1
26ddbf4dea509016744824d1ed23ba34e5f1fb0b
-
SHA256
891d5ee90719b686d0481344b180179eef36796b7f520fe024a6fa7fb416c614
-
SHA512
570bca30801a135477b60f57241bfb20738582b385fd67e4e64826b9ba9dd20042daa077a2bae012c0e8befc3551cb6ca857637dddd8b2e0f7ea6b1e4f755e2c
-
SSDEEP
3072:SHamxv9ROlxf81bwdtkNFDHqkZOqrFQKCVvRuYLiPb0/yklUrSlhPJal:ea0VR18diGkZOO6LVvWQ/yEUrSK
Malware Config
Signatures
Files
-
icedid_out.exe.exe windows x64
15cba4fc4e4b1ecfcaea326b4330c631
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
glu32
gluLookAt
gluPerspective
gluBuild2DMipmaps
opengl32
wglDeleteContext
wglMakeCurrent
wglCreateContext
glFlush
glDisable
glTexEnvi
glTexParameteri
glEnable
glGenTextures
glDeleteTextures
glEnd
glVertex3f
glTexCoord2f
glBegin
glCallLists
glListBase
glGetString
wglGetCurrentDC
wglGetProcAddress
glViewport
glLoadIdentity
glMatrixMode
glPopMatrix
glColor4f
glRotatef
glTranslatef
glScalef
glPushMatrix
glBlendFunc
glDeleteLists
wglUseFontOutlinesA
glClearColor
glClear
glHint
glCullFace
glColor3fv
glVertex3fv
glBindTexture
kernel32
GetCommandLineA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
HeapReAlloc
InitializeCriticalSection
GetLocaleInfoA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
HeapSize
Sleep
GetSystemTimeAsFileTime
GetCurrentProcessId
LockResource
LoadResource
FindResourceA
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
HeapCreate
HeapSetInformation
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
GetModuleFileNameA
GetStdHandle
WriteFile
FlsAlloc
GetCurrentThreadId
SetLastError
FlsFree
TlsFree
FlsSetValue
FlsGetValue
GetModuleHandleA
GetProcAddress
GetLastError
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
user32
PostQuitMessage
MessageBoxW
MessageBoxA
DestroyWindow
DispatchMessageA
TranslateMessage
PeekMessageA
SetWindowLongA
SetWindowTextA
ReleaseDC
GetDC
CreateWindowExA
GetClientRect
GetWindowLongA
EndPaint
BeginPaint
DefWindowProcA
RegisterClassExA
LoadCursorA
GetClassInfoExA
CallWindowProcA
gdi32
ChoosePixelFormat
SwapBuffers
DeleteObject
SelectObject
CreateFontA
SetPixelFormat
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 150KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ