Static task
static1
Behavioral task
behavioral1
Sample
3feaee7c9d67f2b49181905b2aa8115d_icedid_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3feaee7c9d67f2b49181905b2aa8115d_icedid_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
3feaee7c9d67f2b49181905b2aa8115d_icedid_JC.exe
-
Size
1.1MB
-
MD5
3feaee7c9d67f2b49181905b2aa8115d
-
SHA1
5104af70ecea1fce86660e5748e74887e653619b
-
SHA256
ccd0dfb9265fb662a75d19f8b5d8370b792a8e915ae746cffd658a1bbdbfbc7a
-
SHA512
11a96390e11538214aa6b150a9238f335d15193f7e574168155e5f4942ac751fbeb77d5bd41a8f22332db5b50247abe6572a5daab21d899137eb9b062b8add4a
-
SSDEEP
24576:BCAGNjb+poEWJKCbl92lerAa40qyLPSf:BCA+jb+poEWJrl0h0V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3feaee7c9d67f2b49181905b2aa8115d_icedid_JC.exe
Files
-
3feaee7c9d67f2b49181905b2aa8115d_icedid_JC.exe.exe windows x86
e01644975d80afa28f3b8eb7beb11b9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
CM_Locate_DevNodeA
CM_Get_DevNode_Registry_PropertyA
CM_Remove_SubTree
CM_Get_Child
CM_Get_Sibling
CM_Get_Parent
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
newdev
UpdateDriverForPlugAndPlayDevicesA
kernel32
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SizeofResource
SetErrorMode
RtlUnwind
GetTimeZoneInformation
GetSystemTime
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
RaiseException
ExitThread
GetACP
HeapSize
HeapReAlloc
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
CloseHandle
SetCommState
GetCommState
SetCommTimeouts
GetCommTimeouts
CreateFileA
ReadFile
WriteFile
Sleep
SetThreadPriority
CreateThread
CreateEventA
SetPriorityClass
GetCurrentProcess
WaitForSingleObject
SetEvent
OutputDebugStringA
ResetEvent
CopyFileA
CreateDirectoryA
GetFileAttributesA
GetFileSize
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetLastError
DeviceIoControl
GetLocalTime
FindClose
MoveFileA
FindNextFileA
FindFirstFileA
GetFileTime
GetCurrentThread
lstrlenW
SuspendThread
ResumeThread
lstrcmpA
InterlockedDecrement
InterlockedIncrement
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
FindResourceA
LoadResource
LockResource
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
WideCharToMultiByte
GetComputerNameA
GetModuleFileNameA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
LocalAlloc
SetLastError
lstrlenA
GetWindowsDirectoryA
GetCurrentDirectoryA
SetFileAttributesA
FreeLibrary
LoadLibraryA
RemoveDirectoryA
FormatMessageA
LocalFree
FileTimeToLocalFileTime
FileTimeToSystemTime
MultiByteToWideChar
lstrcatA
GetProcAddress
GetTickCount
FlushFileBuffers
GetVersionExA
MulDiv
DeleteFileA
SetCurrentDirectoryA
IsBadReadPtr
user32
SetCursor
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
LoadCursorA
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
PostThreadMessageA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemInt
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
IsWindow
SetFocus
GetScrollPos
PostQuitMessage
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
PeekMessageA
TranslateMessage
DispatchMessageA
CharUpperA
GetClassNameA
FindWindowExA
EnumWindows
DrawEdge
CopyRect
InflateRect
SetClipboardData
ModifyMenuA
GetMenuItemID
GetMenuItemCount
ScreenToClient
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
GetParent
EnableWindow
SendMessageA
GetCursorPos
FindWindowA
EnumChildWindows
GetWindowTextA
IsWindowVisible
IsWindowEnabled
GetMenuState
SetMenu
GetMenu
LoadMenuA
GetSubMenu
EnableMenuItem
CheckMenuItem
GetDC
MessageBoxA
IsClipboardFormatAvailable
DestroyMenu
GetMessageA
ValidateRect
GetTopWindow
LoadStringA
ReleaseDC
LoadBitmapA
OpenClipboard
GetKeyNameTextA
GetClipboardData
CloseClipboard
ShowCaret
SetCaretPos
CreateCaret
SetCapture
GetSysColor
DrawFocusRect
GetWindowRect
GetClientRect
UpdateWindow
InvalidateRect
RedrawWindow
GetFocus
wsprintfA
SetTimer
KillTimer
CallWindowProcA
MessageBeep
SetWindowLongA
GetWindowLongA
PostMessageA
GetWindow
GetSystemMetrics
FillRect
DrawIcon
AppendMenuA
GetSystemMenu
IsIconic
LoadIconA
DestroyCaret
SetScrollPos
DragDetect
EnableScrollBar
SetScrollInfo
ReleaseCapture
GetKeyState
RegisterClipboardFormatA
EmptyClipboard
PtInRect
DrawTextA
AdjustWindowRectEx
gdi32
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
GetViewportExtEx
GetWindowExtEx
CreateHatchBrush
PtVisible
RectVisible
ExtTextOutA
Escape
GetMapMode
DPtoLP
CopyMetaFileA
GetTextColor
GetBkColor
LPtoDP
PatBlt
SetBkColor
SetTextColor
GetClipBox
DeleteObject
DeleteDC
SetBoundsRect
GetTextExtentPointA
GetCharWidthA
GetTextExtentPoint32A
TextOutA
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetDeviceCaps
CreateFontA
GetStockObject
Rectangle
GetObjectA
CreateFontIndirectA
CreateDIBitmap
CreatePen
comdlg32
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegEnumKeyExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
shell32
ShellExecuteA
comctl32
ord17
ImageList_Destroy
oledlg
ord8
ole32
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
CoTaskMemAlloc
OleDuplicateData
CoTaskMemFree
CreateStreamOnHGlobal
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
ReleaseStgMedium
olepro32
ord253
oleaut32
VariantCopy
VariantClear
VariantChangeType
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
SysAllocStringByteLen
VariantTimeToSystemTime
LoadTypeLi
wsock32
WSACleanup
WSAStartup
socket
ioctlsocket
htons
connect
send
recv
closesocket
Sections
.text Size: 828KB - Virtual size: 826KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ