Static task
static1
Behavioral task
behavioral1
Sample
2023-08-26_de19b8527426d2b51e4e4e3596d070aa_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_de19b8527426d2b51e4e4e3596d070aa_icedid_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-26_de19b8527426d2b51e4e4e3596d070aa_icedid_JC.exe
-
Size
432KB
-
MD5
de19b8527426d2b51e4e4e3596d070aa
-
SHA1
199c9e336bc91f6f4aca412337dea3615823dad7
-
SHA256
3f13d164576fd85c657b581582ea33571d339b0e2d7d2e050a05b6af0f8ea817
-
SHA512
df35931bbcd31d9d9eb1f0f67917d05ca1aa22af165e99cc12ffd342b2e3c7a038ba518018da3ca2ceae53fd86d1edcbe34091b40d300bc41788a105d5d28e8f
-
SSDEEP
12288:tzI1FdpwZNs0ZqI0YuMcnT9d2/8d0VNEP:5Izdo20ZreMcnT9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-26_de19b8527426d2b51e4e4e3596d070aa_icedid_JC.exe
Files
-
2023-08-26_de19b8527426d2b51e4e4e3596d070aa_icedid_JC.exe.exe windows:4 windows x86
1a842c09264f0280de7bdfc5e28945bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
InterlockedExchange
GetACP
GetLocaleInfoA
GetSystemTimeAsFileTime
GetThreadLocale
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
OutputDebugStringA
MultiByteToWideChar
GetLastError
GetVersion
lstrcmpiA
lstrlenA
CompareStringA
CompareStringW
GetStringTypeExA
GetCurrentProcessId
QueryPerformanceCounter
HeapSize
TerminateProcess
HeapReAlloc
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetOEMCP
GetCPInfo
GetCurrentDirectoryA
GlobalFlags
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
LocalFree
lstrcpynA
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
GlobalFree
SetLastError
RaiseException
InitializeCriticalSection
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
InterlockedIncrement
LocalAlloc
LocalLock
LocalUnlock
InterlockedDecrement
GetDiskFreeSpaceA
GetTempFileNameA
GetTickCount
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
FreeLibrary
GlobalDeleteAtom
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
FreeResource
GetFileTime
GetFileAttributesA
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
DeleteCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetShortPathNameA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
lstrcmpA
user32
GetDCEx
LockWindowUpdate
InvalidateRgn
CopyAcceleratorTableA
CharNextA
GetMenuItemInfoA
InflateRect
DestroyIcon
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetSysColorBrush
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
IsZoomed
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
SetMenu
RedrawWindow
TranslateAcceleratorA
TranslateMDISysAccel
BringWindowToTop
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetTabbedTextExtentA
MessageBeep
IsClipboardFormatAvailable
FillRect
GetDC
ReleaseDC
LoadCursorA
DestroyCursor
InvalidateRect
SetRect
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
LoadMenuA
LoadAcceleratorsA
DestroyMenu
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassInfoExA
GetClassNameA
SetPropA
WindowFromPoint
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetClientRect
GetMenu
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
CreateMenu
KillTimer
SetTimer
SetWindowRgn
GetLastActivePopup
ShowOwnedPopups
SetCursor
PostMessageA
PostQuitMessage
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
DrawIcon
FindWindowA
PostThreadMessageA
GetNextDlgGroupItem
GetPropA
SetCapture
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
wsprintfA
GetSystemMetrics
UnregisterClassA
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
CharUpperA
SendMessageA
EnableWindow
UpdateWindow
MessageBoxA
GetClassLongA
gdi32
GetTextExtentPoint32A
StretchDIBits
DeleteObject
CreateFontA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SelectObject
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
CreateSolidBrush
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
CreateEllipticRgn
LPtoDP
Ellipse
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetWindowOrgEx
SetRectRgn
CombineRgn
GetMapMode
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectA
GetCharWidthA
GetTextMetricsA
DeleteDC
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocA
GetStockObject
PatBlt
Rectangle
DPtoLP
GetViewportOrgEx
CreatePen
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
CreateDCA
GetDeviceCaps
comdlg32
PrintDlgA
GetOpenFileNameA
GetSaveFileNameA
FindTextA
ReplaceTextA
CommDlgExtendedError
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
GetJobA
advapi32
GetFileSecurityA
RegSetValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
RegCloseKey
SetFileSecurityA
shell32
SHGetFileInfoA
DragFinish
DragQueryFileA
ExtractIconA
DragAcceptFiles
comctl32
ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy
shlwapi
PathIsUNCA
PathFindExtensionA
PathRemoveExtensionA
PathStripToRootA
PathFindFileNameA
oledlg
ord8
ole32
StgOpenStorageOnILockBytes
CoGetClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
oleaut32
SysFreeString
OleCreateFontIndirect
SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
SysAllocStringLen
VariantInit
VariantChangeType
SysAllocStringByteLen
SysStringLen
VariantClear
Sections
.text Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ