Static task
static1
Behavioral task
behavioral1
Sample
2023-08-22_4f0cb1027b5ee96deaba09d96138dd60_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-22_4f0cb1027b5ee96deaba09d96138dd60_icedid_JC.exe
Resource
win10v2004-20230831-en
General
-
Target
2023-08-22_4f0cb1027b5ee96deaba09d96138dd60_icedid_JC.exe
-
Size
236KB
-
MD5
4f0cb1027b5ee96deaba09d96138dd60
-
SHA1
f04adc5ff91d8a0b2d6756b738171cc743c2d5ce
-
SHA256
95e5db9cb44862643154636e05371b32eb952dafe18d5582b37213c8c9bc939f
-
SHA512
ca777170ef0a0e233e2499c0270b80b11f68d9ed3eeb59cbc8aa1c93c2849f2cb713aa21f3f117e8c9ebbad82d5697df4969cee816950ba8e2a61d6bbadbe3aa
-
SSDEEP
3072:KmRNXYNEcsLhxPF9keJ3A0/jHaqknZQt7K66IhZp9JDuCqtshx0faTgI://XLhxt9dpZaqknKd6cvLCy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-22_4f0cb1027b5ee96deaba09d96138dd60_icedid_JC.exe
Files
-
2023-08-22_4f0cb1027b5ee96deaba09d96138dd60_icedid_JC.exe.exe windows x86
263011c1226505188c342a03ec7ec6e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
GetProcessHeap
GetStartupInfoA
RaiseException
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
LCMapStringA
LCMapStringW
Sleep
CreateFileA
HeapDestroy
HeapCreate
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringA
GetThreadLocale
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
CloseHandle
GetCurrentThread
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
MulDiv
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
LoadLibraryA
GlobalGetAtomNameA
GlobalAddAtomA
SetLastError
lstrlenA
CompareStringA
GetVersion
GetLastError
MultiByteToWideChar
InterlockedExchange
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
CreateProcessA
GetCommandLineA
VirtualFree
GetLogicalDriveStringsA
user32
BeginPaint
EndPaint
GetSysColorBrush
ShowOwnedPopups
GetMessageA
TranslateMessage
ValidateRect
GetMenuItemInfoA
InflateRect
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetWindowDC
GetMessagePos
MapWindowPoints
GetClientRect
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
PtInRect
CallWindowProcA
GetWindowPlacement
GetWindowRect
GetSystemMetrics
RegisterWindowMessageA
UnpackDDElParam
ReuseDDElParam
DestroyMenu
GetClassNameA
GetSysColor
WinHelpA
SetWindowPos
SetFocus
GetWindowThreadProcessId
GetActiveWindow
IsWindowEnabled
GetFocus
EqualRect
GetDlgItem
SetWindowLongA
GetKeyState
GetDlgCtrlID
GetMenu
SetCursor
PostQuitMessage
GetMenuItemID
GetSubMenu
ModifyMenuA
LoadMenuA
SendMessageA
PeekMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
GetParent
SetActiveWindow
IsWindowVisible
InvalidateRect
IsIconic
InsertMenuItemA
GetMenuItemCount
CreatePopupMenu
GetClassInfoA
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
ClientToScreen
CreateDialogIndirectParamA
GetNextDlgTabItem
GetMessageTime
EndDialog
SetTimer
SystemParametersInfoA
TrackPopupMenu
SetForegroundWindow
GetCursorPos
SetMenuDefaultItem
UpdateWindow
FindWindowA
LoadCursorA
LoadIconA
UnregisterClassA
DefWindowProcA
PostMessageA
GetDesktopWindow
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
GetLastActivePopup
BringWindowToTop
SetMenu
GetWindow
ShowWindow
GetWindowLongA
IsWindow
EnableWindow
TranslateAcceleratorA
gdi32
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreatePatternBrush
GetStockObject
SetViewportOrgEx
CreateSolidBrush
SelectObject
Escape
TextOutA
RectVisible
PtVisible
GetPixel
CreateCompatibleBitmap
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteObject
GetTextExtentPoint32A
ExtTextOutA
BitBlt
CreateFontIndirectA
GetDeviceCaps
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateCompatibleDC
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
shell32
DragFinish
DragQueryFileA
Shell_NotifyIconA
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ