Static task
static1
Behavioral task
behavioral1
Sample
2023-08-27_578aa7e63be6c8c3343aec9bfc976852_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-27_578aa7e63be6c8c3343aec9bfc976852_icedid_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-27_578aa7e63be6c8c3343aec9bfc976852_icedid_JC.exe
-
Size
1.5MB
-
MD5
578aa7e63be6c8c3343aec9bfc976852
-
SHA1
1506e5233a7dabe5b2a06ddbfe533257305c49c0
-
SHA256
7dda3e8e328b7e7fc75d0eb16115a7162feae2cb23f5c1b87d5072fa58ca6823
-
SHA512
cbdb1dc6d0d0d42a8657cecd6fc0a0d08eba356636828b7d64021fced07d8187c841aa7cb7c3852c0f76587620b80abb78f1030871529b4095ea9da65d6f2982
-
SSDEEP
24576:LU2qIyGTTLVP+q1pbwJMxa+qwq2sq891O2rInbhj:quyDw4XzAJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-27_578aa7e63be6c8c3343aec9bfc976852_icedid_JC.exe
Files
-
2023-08-27_578aa7e63be6c8c3343aec9bfc976852_icedid_JC.exe.exe windows:4 windows x86
6ac788c4406ca1cd0e018e10038650bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
SizeofResource
CreateFileMappingA
OpenFileMappingA
SetEnvironmentVariableA
GetTimeZoneInformation
GetConsoleOutputCP
WriteConsoleA
GetDriveTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
SetHandleCount
GetConsoleMode
GetConsoleCP
VirtualFree
HeapCreate
HeapDestroy
HeapReAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetACP
LoadLibraryW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FatalAppExitA
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
GetFileType
SetStdHandle
ExitThread
GetProcessHeap
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
IsBadReadPtr
HeapValidate
RaiseException
RtlUnwind
GetDiskFreeSpaceA
GetTempFileNameA
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileIntA
WaitForMultipleObjects
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreA
FindResourceExA
GetCurrentThread
GetLocaleInfoA
ConvertDefaultLocale
EnumResourceLanguagesA
GetOEMCP
GetCPInfo
GlobalFlags
ResetEvent
PulseEvent
GetProfileIntA
VirtualProtect
ResumeThread
GetThreadPriority
SetThreadPriority
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileAttributesA
FreeResource
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
lstrcmpA
SystemTimeToFileTime
FileTimeToSystemTime
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GetModuleFileNameW
GetAtomNameA
GlobalGetAtomNameA
InterlockedIncrement
InterlockedDecrement
FindNextFileA
GetShortPathNameA
GetThreadLocale
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DuplicateHandle
GetHandleInformation
CreateEventA
SuspendThread
GetCurrentThreadId
SetEvent
LoadLibraryA
LocalAlloc
SetErrorMode
GetProcAddress
FreeLibrary
SetLastError
MulDiv
GlobalFree
CopyFileA
GlobalSize
FormatMessageA
LocalFree
WaitForSingleObject
GlobalAlloc
GlobalLock
GlobalUnlock
CreateFileA
GetCurrentProcess
GetFullPathNameA
GetStringTypeExA
lstrlenA
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetVersion
MultiByteToWideChar
InterlockedExchange
GetPrivateProfileStringA
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32First
Process32Next
GetLocalTime
ExitProcess
GetExitCodeThread
TerminateThread
CreateThread
TerminateProcess
Sleep
CreateMutexA
GetLastError
CloseHandle
GetCommandLineA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
OpenEventA
user32
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
OpenIcon
CloseWindow
PostThreadMessageA
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageA
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
FindWindowExA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
SetCapture
GetActiveWindow
DrawCaption
DrawAnimatedRects
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
HiliteMenuItem
GetSystemMenu
DrawMenuBar
SetMenu
GetMenu
DragDetect
GetMenuCheckMarkDimensions
RegisterWindowMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
LoadIconA
SendDlgItemMessageA
GetClientRect
MapWindowPoints
GetFocus
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
IsChild
GetCapture
WinHelpA
CreateDialogIndirectParamA
TrackPopupMenu
SetWindowPlacement
GetDlgItem
DestroyWindow
GetDlgCtrlID
GetClassLongA
GetClassNameA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowTextLengthA
UnhookWindowsHookEx
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
LoadCursorA
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectA
LoadMenuA
SetMenuItemBitmaps
ModifyMenuA
InsertMenuItemA
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
DeleteMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringA
GetTabbedTextExtentA
DrawTextExA
DrawTextA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
LoadBitmapA
GetSysColorBrush
MessageBoxA
EndDialog
MoveWindow
GetSystemMetrics
GetWindowRect
SetLayeredWindowAttributes
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ScreenToClient
CallNextHookEx
GetCursorPos
SetWindowsHookExA
ValidateRect
TabbedTextOutA
MapDialogRect
WaitMessage
PeekMessageA
RemoveMenu
IsMenu
GetMenuItemCount
GetSubMenu
GetMenuState
GetMenuStringA
AppendMenuA
InsertMenuA
GetMenuItemID
mouse_event
VkKeyScanA
GetAsyncKeyState
SetRectEmpty
SetCursor
GetClipboardFormatNameA
UnpackDDElParam
DestroyMenu
LoadAcceleratorsA
TranslateAcceleratorA
ReuseDDElParam
UnregisterClassA
GetDialogBaseUnits
GetKeyNameTextA
MsgWaitForMultipleObjects
DestroyIcon
TrackPopupMenuEx
SetWindowLongA
IsWindowUnicode
GetMessageW
DispatchMessageW
SubtractRect
UnionRect
InflateRect
SetRect
PtInRect
IsRectEmpty
GetWindowLongA
IsWindow
PostQuitMessage
KillTimer
SetTimer
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateDialogParamA
MapVirtualKeyA
PostMessageA
GetTopWindow
FindWindowA
keybd_event
OpenClipboard
IsIconic
AttachThreadInput
GetDC
LoadImageA
CharUpperA
GetKeyboardState
SendMessageA
GetForegroundWindow
ClientToScreen
SetCursorPos
GetDesktopWindow
GetWindow
GetWindowTextA
GetWindowThreadProcessId
GetKeyState
BringWindowToTop
SetForegroundWindow
SetActiveWindow
SetDlgItemTextA
ReleaseCapture
gdi32
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
UnrealizeObject
CreatePenIndirect
CreateBrushIndirect
CreateFontIndirectA
CreateBitmap
CreateBitmapIndirect
SetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
GetBrushOrgEx
EnumObjects
GetNearestColor
RealizePalette
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetGraphicsMode
GetWorldTransform
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
Arc
Polyline
Chord
Ellipse
GetObjectType
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
GetPixel
SetPixel
FloodFill
ExtFloodFill
TextOutA
GetTextExtentPoint32A
GetTextAlign
GetTextFaceA
GetTextMetricsA
GetTextCharacterExtra
GetCharWidthA
GetFontLanguageInfo
GetCharacterPlacementA
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCA
GetOutlineTextMetricsA
GetCharABCWidthsA
GetFontData
GetKerningPairsA
GetGlyphOutlineA
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatA
GetCharWidthFloatA
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
GetDCOrgEx
StretchDIBits
EnumFontFamiliesExA
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ScaleViewportExtEx
ExcludeClipRect
SelectClipRgn
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetWorldTransform
SetGraphicsMode
SetROP2
SetPolyFillMode
OffsetWindowOrgEx
Pie
ModifyWorldTransform
SetViewportOrgEx
SetMapMode
CreateSolidBrush
SetBkMode
SetTextColor
DeleteDC
SetBkColor
SelectPalette
GetStockObject
RestoreDC
SaveDC
ExtTextOutA
CloseEnhMetaFile
CreateEnhMetaFileA
CloseMetaFile
CreateMetaFileA
CopyMetaFileA
CreateICA
CreateDIBSection
CreateFontA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
SetStretchBltMode
SetBrushOrgEx
StretchBlt
GetCurrentObject
GetDIBits
GetObjectA
GetBitmapBits
DeleteObject
AddFontResourceA
CreateDCA
GetDeviceCaps
SetWindowOrgEx
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
SetThreadToken
OpenThreadToken
GetFileSecurityA
SetFileSecurityA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
RegSetValueA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RevertToSelf
shell32
SHGetFileInfoA
DragAcceptFiles
DragFinish
DragQueryFileA
ExtractIconA
ShellExecuteA
shlwapi
PathFindExtensionA
PathFindFileNameA
UrlUnescapeA
PathIsUNCA
PathStripToRootA
PathFileExistsA
PathRemoveExtensionA
ole32
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CreateBindCtx
OleDuplicateData
CoInitialize
CoDisconnectObject
CoCreateInstance
CoReleaseMarshalData
CoMarshalInterface
CreateStreamOnHGlobal
CoUnmarshalInterface
CoRevokeClassObject
CoRegisterClassObject
OleRun
CLSIDFromProgID
StringFromGUID2
CLSIDFromString
oleaut32
SystemTimeToVariantTime
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantCopy
VariantChangeType
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarBstrFromDec
VarDecFromStr
SysAllocStringLen
VarDateFromStr
VarBstrFromDate
VariantInit
SysAllocString
LoadTypeLi
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
VariantClear
ws2_32
bind
getsockopt
setsockopt
getsockname
getpeername
connect
sendto
recvfrom
socket
select
WSAGetLastError
WSAAsyncSelect
ioctlsocket
recv
gethostbyname
closesocket
htonl
inet_addr
htons
accept
ntohs
inet_ntoa
WSASetLastError
WSAStartup
WSACleanup
listen
shutdown
send
wininet
GopherGetLocatorTypeA
InternetGetLastResponseInfoA
GopherFindFirstFileA
InternetFindNextFileA
FtpFindFirstFileA
HttpQueryInfoA
HttpSendRequestExA
HttpEndRequestA
HttpSendRequestA
HttpAddRequestHeadersA
InternetErrorDlg
HttpOpenRequestA
GopherOpenFileA
GopherGetAttributeA
GopherCreateLocatorA
FtpGetFileA
FtpPutFileA
FtpCommandA
FtpOpenFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpRenameFileA
FtpDeleteFileA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetGetCookieA
InternetSetCookieA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionExA
InternetSetStatusCallback
Sections
.text Size: 980KB - Virtual size: 979KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 556KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ