Static task
static1
Behavioral task
behavioral1
Sample
76652c994463bfd324245ed73412550b_icedid_JC.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
76652c994463bfd324245ed73412550b_icedid_JC.exe
Resource
win10v2004-20230703-en
General
-
Target
76652c994463bfd324245ed73412550b_icedid_JC.exe
-
Size
1.2MB
-
MD5
76652c994463bfd324245ed73412550b
-
SHA1
64176b24b1d83e665ae8e9dbb718e9d6a17e5b91
-
SHA256
47300ec9512d4e7c8d5cda1e57c853493ffe13ec0b9650e8f54c9e789a3a5669
-
SHA512
b1f8fa7d0eff398c1827b04907a6174e03cf711bb0a5031b425568d0b61c531f6793e2c59d1373e9227bfb09514f153d94ec26f9fa35d5a59fd77ff20ff87a91
-
SSDEEP
24576:4HjI8Dw9GbvR+B0dGtRkrk6AHoMA8Nao7f:4H5+B0dVkzbAVC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76652c994463bfd324245ed73412550b_icedid_JC.exe
Files
-
76652c994463bfd324245ed73412550b_icedid_JC.exe.exe windows x86
ec7b9e00d276992daf0995de43d41db2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
ExitProcess
TerminateProcess
HeapReAlloc
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
VirtualQuery
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetLocaleInfoW
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
GetFileTime
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
RaiseException
GetOEMCP
GetCPInfo
InterlockedIncrement
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GetPrivateProfileIntA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
InterlockedDecrement
CloseHandle
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
SetLastError
MulDiv
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
lstrcpynA
GetModuleHandleA
GetProcAddress
GetTempPathA
WritePrivateProfileStringA
GetTickCount
Sleep
GlobalAlloc
GlobalFree
FindResourceA
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
GetFileAttributesA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetUserDefaultLCID
InterlockedExchange
user32
RegisterClipboardFormatA
PostThreadMessageA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GetMenuState
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetKeyState
SetForegroundWindow
GetMenu
GetSubMenu
GetNextDlgGroupItem
GetMenuItemCount
AdjustWindowRectEx
GetParent
EqualRect
RegisterClassA
UnregisterClassA
GetDlgCtrlID
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
GetWindowPlacement
CopyRect
GetWindow
ReleaseCapture
GetClassInfoA
DefWindowProcA
GetFocus
SetCapture
GetCapture
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
InvalidateRect
LoadCursorA
SystemParametersInfoA
PeekMessageA
InvalidateRgn
CopyAcceleratorTableA
IsRectEmpty
CharNextA
GetSysColorBrush
wsprintfA
EndPaint
BeginPaint
GetWindowDC
DestroyMenu
PostQuitMessage
GetSysColor
IsWindow
RedrawWindow
IsWindowVisible
UpdateWindow
ReleaseDC
GetDC
GetWindowRect
SetRect
PtInRect
GetSystemMetrics
LoadIconA
GetClientRect
IsIconic
GetSystemMenu
SendMessageA
AppendMenuA
DrawIcon
MessageBoxA
EnableWindow
PostMessageA
CharUpperA
MessageBeep
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
SetCursor
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
IsWindowEnabled
LoadBitmapA
GetMenuItemID
GetMenuCheckMarkDimensions
gdi32
SetMapMode
DeleteObject
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetStockObject
CreateSolidBrush
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
SetBkMode
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
Rectangle
CreateCompatibleDC
CreateRectRgn
CreateCompatibleBitmap
GetTextExtentPoint32A
CreateFontIndirectA
PatBlt
comdlg32
GetFileTitleA
winspool.drv
StartDocPrinterA
StartPagePrinter
EndPagePrinter
EndDocPrinter
OpenPrinterA
WritePrinter
SetPrinterA
GetPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegCloseKey
comctl32
ord17
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
oleaut32
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect
VariantChangeType
Sections
.text Size: 508KB - Virtual size: 507KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 404KB - Virtual size: 429KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ