Static task
static1
Behavioral task
behavioral1
Sample
2023-08-26_b6ab3856b9ffa99bcee68341915ce823_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_b6ab3856b9ffa99bcee68341915ce823_icedid_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-26_b6ab3856b9ffa99bcee68341915ce823_icedid_JC.exe
-
Size
12.1MB
-
MD5
b6ab3856b9ffa99bcee68341915ce823
-
SHA1
97248826536bfa3487187dc6599ca0b82ffe83a5
-
SHA256
bd78f43223facdabfbcb6d5e90b0db531906aaef6dc8304d4c3e910d222d164c
-
SHA512
3b9e5012673413e54ca5fb25cf0d5293f57a233f2770e545304438327b5fa5b21c54ea6ea2edaf518b36228b40b2670fff58b4cc8d91fdc16109c012dfa89df0
-
SSDEEP
393216:VdiBvEEromwc6W2zwJ9yqxMOD92bczubopZ:Lo88VQgzDZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-26_b6ab3856b9ffa99bcee68341915ce823_icedid_JC.exe
Files
-
2023-08-26_b6ab3856b9ffa99bcee68341915ce823_icedid_JC.exe.exe windows:4 windows x86
219becfa9848197bbc09bcf766cbc5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
CreateFileA
WriteConsoleA
GetConsoleOutputCP
SetConsoleCtrlHandler
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
SetEnvironmentVariableA
SetStdHandle
HeapSize
VirtualQuery
SetConsoleMode
ReadConsoleInputA
FlushConsoleInputBuffer
VirtualAlloc
FindFirstFileA
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleW
RaiseException
MulDiv
lstrlenW
SetLastError
GetLastError
LoadLibraryW
lstrcpyW
WinExec
lstrcatW
WideCharToMultiByte
GlobalFree
GlobalReAlloc
GlobalAlloc
QueryPerformanceCounter
GetTickCount
ResumeThread
GetLocaleInfoW
CreateEventW
CloseHandle
Sleep
WaitForSingleObject
SetEvent
FreeLibrary
GlobalUnlock
GlobalLock
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
lstrlenA
GetUserDefaultLCID
EnumResourceNamesW
DuplicateHandle
GetCurrentProcess
SetThreadExecutionState
MoveFileW
CreateDirectoryW
DeleteFileW
GetCurrentThreadId
VirtualProtect
ExitProcess
GetFileType
GetConsoleMode
GetConsoleCP
CreateThread
ExitThread
GetDateFormatA
GetTimeFormatA
IsDebuggerPresent
UnhandledExceptionFilter
HeapReAlloc
GetSystemTimeAsFileTime
RtlUnwind
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
SetErrorMode
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
LocalFree
FormatMessageW
GetTempFileNameW
LocalAlloc
FindNextFileW
SuspendThread
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetStringTypeExW
lstrcmpiW
GetSystemDirectoryW
GlobalGetAtomNameW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
LoadLibraryExW
CompareStringA
lstrcmpA
GetPrivateProfileIntW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetVersionExA
GetModuleHandleA
FreeResource
WritePrivateProfileStringW
GetPrivateProfileStringW
GlobalSize
GetThreadLocale
LoadLibraryA
GetSystemInfo
InterlockedExchange
TerminateThread
GetExitCodeThread
GetProcessId
OpenThread
CreateProcessW
GetDateFormatW
OutputDebugStringA
LocalFileTimeToFileTime
SetFileTime
DosDateTimeToFileTime
SetFileAttributesW
SystemTimeToFileTime
GetFileInformationByHandle
FileTimeToDosDateTime
GetTempPathW
ReleaseSemaphore
CreateSemaphoreW
SetThreadPriority
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVersion
GetVersionExW
SetUnhandledExceptionFilter
OpenMutexW
CreateMutexW
WriteConsoleW
AttachConsole
GetStdHandle
GetLocalTime
GetCurrentProcessId
GetCurrentDirectoryW
WaitForMultipleObjects
CreateFileW
GetFileTime
ResetEvent
GetEnvironmentVariableW
WriteFile
ReadFile
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
RemoveDirectoryW
GetFileAttributesW
GetModuleFileNameW
GetDiskFreeSpaceW
CopyFileW
GlobalHandle
GlobalMemoryStatus
user32
ReuseDDElParam
DestroyMenu
LoadAcceleratorsW
InsertMenuItemW
TranslateAcceleratorW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
SendDlgItemMessageA
WinHelpW
GetForegroundWindow
GetLastActivePopup
ScrollWindow
GetClassInfoExW
SetWindowPlacement
SystemParametersInfoA
GetWindowPlacement
EndPaint
BeginPaint
GetWindowTextLengthW
ScrollWindowEx
IsDialogMessageW
SetDlgItemTextW
SendDlgItemMessageW
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
InvalidateRgn
CharLowerW
GetDialogBaseUnits
GetUpdateRect
AdjustWindowRectEx
DestroyCaret
CreateCaret
SetCaretPos
EnableScrollBar
SubtractRect
PostQuitMessage
GetTopWindow
GetMenuStringW
EmptyClipboard
ShowCaret
GetDesktopWindow
SetClipboardData
IsClipboardFormatAvailable
GetOpenClipboardWindow
ShowScrollBar
InvertRect
DrawEdge
UnregisterClassW
RegisterClipboardFormatW
IsIconic
MsgWaitForMultipleObjectsEx
OpenClipboard
GetClipboardData
CloseClipboard
PrintWindow
GetSysColorBrush
InsertMenuW
DestroyWindow
MoveWindow
ShowWindow
EnableMenuItem
CreateWindowExW
SetMenuContextHelpId
SetWindowsHookExW
CallNextHookEx
GetWindowThreadProcessId
UnhookWindowsHookEx
SetMenu
RegisterWindowMessageW
SetActiveWindow
FindWindowW
SetForegroundWindow
TrackPopupMenu
SetMenuDefaultItem
DestroyIcon
MsgWaitForMultipleObjects
UnpackDDElParam
wsprintfW
SwitchToThisWindow
PostThreadMessageW
SetFocus
SetWindowTextW
SetCursorPos
GetWindowTextW
SetWindowContextHelpId
BringWindowToTop
LoadIconW
DrawIcon
ValidateRect
HideCaret
DefWindowProcW
ClipCursor
LockWindowUpdate
UnionRect
PeekMessageW
GrayStringW
DrawTextExW
TabbedTextOutW
FrameRect
GetKeyboardLayout
GetClassLongW
IsWindowEnabled
SetLayeredWindowAttributes
LoadMenuW
DestroyCursor
GetScrollRange
GetScrollPos
SetScrollRange
SetScrollInfo
SetScrollPos
GetScrollInfo
GetCursor
KillTimer
SetTimer
DrawFrameControl
GetMenu
AdjustWindowRect
MapWindowPoints
RemovePropW
RemoveMenu
GetMenuContextHelpId
GetMenuItemID
ModifyMenuW
PtInRect
GetKeyState
WindowFromPoint
GetCursorPos
SendMessageW
PostMessageW
GetMonitorInfoW
MonitorFromWindow
SystemParametersInfoW
GetMenuState
GetMenuItemInfoW
SetMenuItemInfoW
MessageBeep
SetWindowRgn
GetWindowDC
DrawTextW
SetWindowPos
LoadBitmapW
TranslateMessage
GetMessagePos
SetRect
IsWindowVisible
IntersectRect
IsWindow
GetMessageTime
SetCursor
GetMenuItemCount
GetSubMenu
CreatePopupMenu
CopyIcon
UpdateWindow
GetSystemMenu
DeleteMenu
AppendMenuW
GetDlgCtrlID
GetMessageW
CountClipboardFormats
CharUpperW
GetTabbedTextExtentA
CharNextW
CreateMenu
GetNextDlgGroupItem
CopyAcceleratorTableW
SendNotifyMessageW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
MapDialogRect
MessageBoxW
ShowOwnedPopups
MonitorFromRect
SetRectEmpty
IsRectEmpty
SetParent
LoadCursorW
GetSysColor
GetSystemMetrics
GetWindowRect
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
UnregisterClassA
IsZoomed
InflateRect
GetClientRect
OffsetRect
GetWindowRgn
ReleaseCapture
SetCapture
GetCapture
ClientToScreen
RedrawWindow
GetDCEx
DispatchMessageW
IsChild
CopyRect
DrawFocusRect
InvalidateRect
ScreenToClient
EnableWindow
FillRect
GetParent
SetPropW
GetPropW
GetWindow
SetWindowLongW
CallWindowProcW
GetClassNameW
EqualRect
GetWindowLongW
BeginDeferWindowPos
GetDlgItem
DeferWindowPos
EndDeferWindowPos
GetDC
ReleaseDC
SetClassLongW
GetClassInfoW
RegisterClassW
GetFocus
gdi32
GetRgnBox
PathToRegion
CreatePolygonRgn
BitBlt
CreateCompatibleBitmap
PlayEnhMetaFileRecord
DeleteEnhMetaFile
EnumEnhMetaFile
CloseEnhMetaFile
CreateEnhMetaFileW
DeleteObject
SetViewportOrgEx
PtInRegion
CreateBitmap
CreateRoundRectRgn
GetTextAlign
GetMapMode
DPtoLP
LPtoDP
GetBkMode
GetWindowOrgEx
Ellipse
Pie
RoundRect
PtVisible
RectVisible
TextOutW
Escape
GetGlyphIndicesW
GetTextExtentExPointW
GetViewportExtEx
GetRandomRgn
SetViewportExtEx
SetWindowExtEx
SetMapMode
GetCurrentPositionEx
FillPath
EndPath
BeginPath
StretchDIBits
SetBrushOrgEx
CreatePenIndirect
ExtCreatePen
CreateBrushIndirect
DeleteDC
EnumFontFamiliesExW
CreateICW
GetWindowExtEx
FillRgn
GetTextExtentPointW
CreateFontW
RectInRegion
PaintRgn
CopyMetaFileW
CreateDCW
SaveDC
GetStockObject
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
GetPixel
StartDocW
OffsetViewportOrgEx
ScaleViewportExtEx
SetWindowOrgEx
ScaleWindowExtEx
PolyBezierTo
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
SetRectRgn
CreateEllipticRgn
CloseMetaFile
DeleteMetaFile
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetCharWidthW
GetNearestColor
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextFaceW
GetTextExtentPoint32A
OffsetRgn
CombineRgn
GetTextMetricsW
Rectangle
RealizePalette
CreatePalette
SetBkColor
CreateRectRgnIndirect
CreatePen
GetBkColor
PatBlt
GetDeviceCaps
GetObjectW
CreateFontIndirectW
ExtTextOutW
CreateCompatibleDC
EnumFontFamiliesW
Polygon
SetPixel
GetTextColor
CreateSolidBrush
SetTextColor
GetViewportOrgEx
GetTextExtentPoint32W
SelectObject
CreateRectRgn
RestoreDC
StretchBlt
FrameRgn
comdlg32
GetFileTitleW
winspool.drv
EnumPrintersW
ClosePrinter
DocumentPropertiesW
OpenPrinterW
GetJobW
ord204
advapi32
SetFileSecurityW
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExA
CryptDecrypt
CryptEncrypt
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptSetKeyParam
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
RegCreateKeyW
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegQueryValueW
RegCloseKey
GetFileSecurityW
shell32
DragFinish
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
Shell_NotifyIconW
DragAcceptFiles
ExtractIconW
ShellExecuteW
SHGetFileInfoW
DragQueryFileW
shlwapi
PathCompactPathW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
oledlg
OleUIBusyW
OleUIPasteSpecialW
OleUIInsertObjectW
OleUIObjectPropertiesW
ole32
CoRegisterMessageFilter
CoRevokeClassObject
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleGetClipboard
OleSetMenuDescriptor
CreateGenericComposite
CreateItemMoniker
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
OleLoad
OleCreate
OleCreateLinkFromData
OleCreateFromData
OleLockRunning
OleSaveToStream
WriteClassStm
OleSave
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateFileMoniker
CoInitialize
CoGetClassObject
CLSIDFromProgID
CoDisconnectObject
OleFlushClipboard
OleIsCurrentClipboard
OleDuplicateData
CoTreatAsClass
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CoUninitialize
CoInitializeEx
CLSIDFromString
CreateStreamOnHGlobal
OleQueryCreateFromData
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleCreateStaticFromData
OleGetIconOfClass
oleaut32
VarUdateFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromStr
VariantClear
VariantCopy
VariantInit
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysAllocString
VariantChangeType
VarBstrFromDate
SysStringLen
SysAllocStringLen
OleCreateFontIndirect
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayCreate
SafeArrayDestroy
GetErrorInfo
SafeArrayGetDim
ws2_32
sendto
WSARecvFrom
WSARecv
recvfrom
bind
accept
setsockopt
WSASetLastError
getsockname
getsockopt
ntohs
getservbyname
ioctlsocket
WSAGetLastError
freeaddrinfo
getaddrinfo
getnameinfo
listen
closesocket
select
__WSAFDIsSet
connect
htons
gethostbyname
inet_addr
socket
shutdown
send
recv
gethostname
WSACleanup
WSAStartup
inet_ntoa
getpeername
gdiplus
GdipGetPathGradientPointCount
GdipGetDC
GdipReleaseDC
GdiplusStartup
GdiplusShutdown
GdipSetImageAttributesColorKeys
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipSetClipRectI
GdipGetPathWorldBoundsI
GdipCreateLineBrushFromRectWithAngleI
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipDrawImageRectRect
GdipSetCompositingMode
GdipBitmapSetPixel
GdipDrawImagePointRectI
GdipDrawImageRectI
GdipDrawImageI
GdipFillEllipseI
GdipFillRectangleI
GdipDrawEllipseI
GdipDeleteGraphics
GdipDeleteBrush
GdipCreateLineBrushI
GdipCreateFromHDC
GdipAlloc
GdipCloneBrush
GdipFree
GdipCreateSolidFill
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipDisposeImage
GdipCloneImage
GdipDeletePath
GdipClosePathFigure
GdipCreatePath
GdipDeletePen
GdipCreatePen1
GdipDeleteRegion
GdipGetRegionHRgn
GdipCreateRegionPath
GdipDeleteStringFormat
GdipDeleteFont
GdipMeasureString
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipCreateStringFormat
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipDrawString
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipFillEllipse
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipDeleteMatrix
GdipSetWorldTransform
GdipCreateMatrix2
GdipDrawArcI
GdipDrawPieI
GdipFillPieI
GdipAddPathLineI
GdipDrawPolygonI
GdipFillPolygonI
GdipAddPathArcI
GdipDrawPath
GdipFillPath
GdipFillRegion
GdipCombineRegionPath
GdipResetWorldTransform
GdipSetPathGradientCenterPointI
GdipSetPathGradientCenterColor
GdipTransformPath
GdipTranslateMatrix
GdipCreateMatrix
GdipResetClip
GdipSetClipRegion
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipSetLineBlend
GdipDrawImageRectRectI
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateImageAttributes
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImageWidth
GdipGetImageHeight
GdipClonePath
GdipAddPathBezierI
GdipAddPathRectangleI
GdipAddPathEllipseI
GdipCreatePathGradientFromPath
GdipSetPathGradientSurroundColorsWithCount
GdipDrawRectangleI
wininet
InternetSetOptionExW
HttpAddRequestHeadersW
HttpQueryInfoW
InternetCloseHandle
InternetGetLastResponseInfoW
InternetQueryDataAvailable
InternetSetStatusCallbackW
InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpEndRequestW
HttpSendRequestExW
InternetConnectW
HttpOpenRequestW
InternetOpenW
Sections
.text Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ