Static task
static1
Behavioral task
behavioral1
Sample
2023-08-26_9efd67c328c1fdc7a261db422b6621ce_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_9efd67c328c1fdc7a261db422b6621ce_icedid_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-26_9efd67c328c1fdc7a261db422b6621ce_icedid_JC.exe
-
Size
2.2MB
-
MD5
9efd67c328c1fdc7a261db422b6621ce
-
SHA1
a275e15d6c2dc09e070fb00c34e9e6945a7810fe
-
SHA256
d589a7a8e1b4940aa9e486d2cb72d4a2608b013c0fd5e350320f7020873916fb
-
SHA512
8ae7eef5459ab33372d61c9707a444ca52d1cb24b51cd9ae48940240ca79207e582be9dde33d007c110c0d4f4245a1591a7bde3db0cd9816c67cb6b659ab179a
-
SSDEEP
49152:mGMKvFAxd4NxmhjVvygDTFrgmR6vWxK6KwOtxy/5OxEoUeto/CT5+JlXf7XRa:9FvFAxd4NsVvygDFgmReWxwDtxy/5Oxd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-26_9efd67c328c1fdc7a261db422b6621ce_icedid_JC.exe
Files
-
2023-08-26_9efd67c328c1fdc7a261db422b6621ce_icedid_JC.exe.exe windows:5 windows x86
ee7c184ab0ebb37bace2cb4182b6351b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
netapi32
Netbios
kernel32
HeapCreate
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetHandleCount
GetStdHandle
GetConsoleCP
GetConsoleMode
IsProcessorFeaturePresent
GetTimeZoneInformation
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
IsValidCodePage
VirtualQuery
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeW
CompareStringW
WriteConsoleW
GetDriveTypeW
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
GetSystemInfo
VirtualAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
EncodePointer
GetSystemTimeAsFileTime
FindNextFileA
HeapReAlloc
DecodePointer
ExitProcess
RaiseException
RtlUnwind
FindFirstFileExA
GetDriveTypeA
HeapAlloc
HeapFree
FindResourceExW
VirtualProtect
SearchPathA
GetFileType
InitializeCriticalSectionAndSpinCount
GetTempPathA
GetNumberFormatA
GetWindowsDirectoryA
GetSystemDirectoryW
GetFileTime
GetFileSizeEx
GetFileAttributesA
FileTimeToLocalFileTime
GetFileAttributesExA
FindFirstFileA
CloseHandle
Process32Next
GetACP
GetOEMCP
GetCPInfo
GetUserDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
GlobalFlags
GetFullPathNameA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
FindResourceA
FreeResource
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryW
lstrcmpW
FileTimeToSystemTime
lstrcmpA
GlobalGetAtomNameA
InterlockedIncrement
GetModuleHandleW
SetStdHandle
HeapQueryInformation
GetProfileIntA
HeapSize
CompareStringA
WaitForSingleObject
ResumeThread
SetThreadPriority
GlobalSize
lstrlenW
MultiByteToWideChar
MulDiv
GetCurrentProcessId
GetModuleFileNameA
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedDecrement
GetModuleFileNameW
ActivateActCtx
ReleaseActCtx
DeactivateActCtx
TlsFree
GlobalFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
SetLastError
LocalLock
LocalUnlock
LocalAlloc
LocalFree
GetCurrentThreadId
lstrlenA
GetStartupInfoA
CreateProcessA
lstrcmpiA
InitializeCriticalSection
lstrcpyA
DeleteCriticalSection
DebugBreakProcess
_lclose
GetVolumeInformationA
Beep
GetTempFileNameA
CopyFileA
GetCurrentThread
TerminateThread
GetCurrentProcess
GetVersionExA
GlobalAlloc
GlobalLock
GlobalUnlock
CreateFileA
WriteFile
DeleteFileA
FindClose
GetTickCount
GetModuleHandleA
FreeLibrary
CreateThread
GetProcAddress
GetCurrentDirectoryA
LoadLibraryA
ExitThread
EnterCriticalSection
LeaveCriticalSection
DebugActiveProcess
WaitForDebugEvent
DebugActiveProcessStop
Sleep
ContinueDebugEvent
WriteProcessMemory
FlushInstructionCache
ReadProcessMemory
GetLastError
FormatMessageA
CreateToolhelp32Snapshot
Process32First
user32
GetWindowRgn
PostThreadMessageA
IsMenu
MonitorFromPoint
UpdateLayeredWindow
UnionRect
MapVirtualKeyExA
IsCharLowerA
LoadImageW
GetKeyNameTextA
LockWindowUpdate
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
DrawFrameControl
DrawEdge
DrawStateA
GetSystemMenu
LoadMenuW
SetClassLongA
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
WindowFromPoint
SetRect
UnpackDDElParam
ReuseDDElParam
LoadMenuA
InsertMenuItemA
CreateDialogIndirectParamA
DrawIconEx
GetNextDlgGroupItem
CopyImage
GetIconInfo
OffsetRect
GetNextDlgTabItem
MessageBeep
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
ReleaseCapture
GetAsyncKeyState
SetCapture
MapVirtualKeyA
IsRectEmpty
CreatePopupMenu
GetMenuDefaultItem
RedrawWindow
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
DeleteMenu
ShowOwnedPopups
SetCursor
IntersectRect
SetRectEmpty
GrayStringA
DrawTextExA
DrawTextA
DestroyMenu
GetMenuItemInfoA
InflateRect
RealChildWindowFromPoint
ClientToScreen
CharUpperA
DestroyIcon
IsDialogMessageA
CheckDlgButton
LoadIconW
WinHelpA
IsChild
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
TrackPopupMenu
SetMenu
GetScrollPos
ShowScrollBar
GetClassInfoExA
GetClassInfoA
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcA
SetWindowPos
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
EnableMenuItem
CheckMenuItem
GetWindowTextLengthA
GetSysColorBrush
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
ValidateRect
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetSubMenu
RemoveMenu
GetLastActivePopup
IsWindowEnabled
wsprintfA
BeginPaint
EndPaint
SetScrollRange
GetScrollRange
ScrollWindow
SetScrollPos
InvalidateRect
UpdateWindow
GetSysColor
TabbedTextOutA
FillRect
CreateDialogParamA
TranslateAcceleratorA
GetMenuState
GetMenuItemCount
EnableWindow
RegisterHotKey
LoadAcceleratorsA
LoadCursorA
LoadIconA
SetWindowTextA
MoveWindow
DestroyWindow
UnregisterHotKey
SetTimer
GetWindowDC
DialogBoxParamA
SystemParametersInfoA
EnumDisplaySettingsA
ChangeDisplaySettingsA
DestroyCursor
DrawIcon
MapDialogRect
SubtractRect
GetDoubleClickTime
CharUpperBuffA
CopyIcon
RegisterClipboardFormatA
GetUpdateRect
FrameRect
IsClipboardFormatAvailable
SetMenuDefaultItem
CreateMenu
VkKeyScanA
OpenClipboard
EmptyClipboard
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
GetCapture
WaitMessage
SetClipboardData
CloseClipboard
KillTimer
SetCursorPos
GetGUIThreadInfo
GetCursorPos
SendInput
SetFocus
keybd_event
IsIconic
SetForegroundWindow
BringWindowToTop
EnumWindows
GetDesktopWindow
GetWindow
EnumChildWindows
CallNextHookEx
GetClientRect
GetWindowRect
SetWindowPlacement
LoadImageA
LoadStringA
GetWindowTextA
GetClassNameA
wvsprintfA
MessageBoxA
GetWindowPlacement
GetSystemMetrics
RegisterWindowMessageA
SendMessageTimeoutA
RegisterClassA
SetWindowsHookExA
UnhookWindowsHookEx
DefWindowProcA
CreateWindowExA
IsWindow
DispatchMessageA
GetMessageA
TranslateMessage
GetMenu
ModifyMenuA
DrawMenuBar
ShowWindow
GetDlgItem
SendMessageA
EndDialog
GetParent
GetWindowLongA
SetWindowLongA
GetWindowThreadProcessId
PostMessageA
PostQuitMessage
GetDC
ReleaseDC
SendDlgItemMessageA
gdi32
CreatePen
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
PatBlt
DPtoLP
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetBkColor
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateRoundRectRgn
CreatePolygonRgn
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
Rectangle
GetRgnBox
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceA
SetLayout
StretchBlt
GetObjectType
SelectPalette
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
GetLayout
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
OffsetRgn
GetPixel
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetTextExtentPoint32A
ExtTextOutA
CreateBitmap
CreateDCA
CopyMetaFileA
GetTextMetricsA
SetTextColor
SetBkColor
CreateSolidBrush
GetTextExtentPointA
GetDeviceCaps
SetPixel
CreateCompatibleBitmap
CreateDIBSection
BitBlt
CreateCompatibleDC
SelectObject
DeleteDC
DeleteObject
GetStockObject
GetObjectA
CreateFontIndirectA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
comdlg32
ChooseFontA
GetFileTitleA
advapi32
RegEnumKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
shell32
SHGetFileInfoA
SHGetDesktopFolder
SHGetPathFromIDListA
SHAppBarMessage
SHBrowseForFolderA
SHGetSpecialFolderPathA
DragQueryFileA
DragFinish
ShellExecuteA
SHGetSpecialFolderLocation
ole32
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
CoUninitialize
CoCreateInstance
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CoInitialize
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CreateStreamOnHGlobal
oleaut32
SysFreeString
SysAllocString
VariantInit
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
VariantChangeType
VariantClear
SysStringLen
msimg32
AlphaBlend
TransparentBlt
comctl32
ImageList_GetIconSize
shlwapi
PathRemoveFileSpecW
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
gdiplus
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ