Static task
static1
Behavioral task
behavioral1
Sample
2023-08-26_07c63cc195c03f9423f235f511ee15de_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-26_07c63cc195c03f9423f235f511ee15de_icedid_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-26_07c63cc195c03f9423f235f511ee15de_icedid_JC.exe
-
Size
732KB
-
MD5
07c63cc195c03f9423f235f511ee15de
-
SHA1
816127e6f07c30cc03117c7e341382ac29e48ffd
-
SHA256
12d139fbefc78add0d8cdfacddd34cd73ce1c1d699e0916f95c47a831bdfc58d
-
SHA512
ba2f1a41f1f6fa58723295affb4fd03839bb32782bf16a9540aa1ff910395c965df9edb3faa5b68a7fd7150c6d7af4abd2ed8a0cab33ccbd0ddb03bd14d71d1d
-
SSDEEP
12288:YvBXJyACC7QcYwgVL8aLsidKOimAnWDVxEVjFWFEPpESvBXJyAC7:mkvoKAWDVxcFx8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-26_07c63cc195c03f9423f235f511ee15de_icedid_JC.exe
Files
-
2023-08-26_07c63cc195c03f9423f235f511ee15de_icedid_JC.exe.exe windows:4 windows x86
7fdc381729417ed7d0585fc1e695080c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitProcess
RtlUnwind
RaiseException
HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
SetErrorMode
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetCurrentDirectoryA
GetDriveTypeA
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
FindResourceExW
GlobalFlags
FileTimeToSystemTime
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetVersionExW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
InterlockedDecrement
VirtualProtect
GetTickCount
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
CloseHandle
GetModuleHandleA
lstrlenA
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GetLastError
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
lstrlenW
SetCurrentDirectoryW
GetVersion
GetPrivateProfileIntW
GetModuleFileNameW
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
GetModuleHandleW
GetCurrentDirectoryW
SetThreadLocale
OutputDebugStringW
GetProcAddress
LoadLibraryW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
HeapDestroy
user32
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassW
DestroyMenu
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
GetWindowThreadProcessId
PostQuitMessage
SetCursor
GetMessageW
TranslateMessage
GetActiveWindow
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
UnregisterClassA
SetDlgItemTextW
SetRect
ReleaseDC
GetDC
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
GetFocus
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
GetKeyState
SetForegroundWindow
UpdateWindow
GetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
PtInRect
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowPos
IsRectEmpty
CopyAcceleratorTableW
CharNextW
PostThreadMessageW
ReleaseCapture
IntersectRect
SystemParametersInfoA
SetCapture
LoadCursorW
GetSysColorBrush
CharUpperW
GetWindowPlacement
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
InvalidateRect
PostMessageW
GetDlgCtrlID
DrawIcon
IsWindowVisible
GetClientRect
GetSystemMetrics
IsIconic
AppendMenuW
GetSystemMenu
GetWindowRect
LoadIconW
SendMessageW
GetParent
GetAsyncKeyState
ScreenToClient
OffsetRect
EnableWindow
GetCursorPos
CopyRect
GetSysColor
RemovePropW
gdi32
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
GetStockObject
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
EnumFontFamiliesExW
GetWindowExtEx
GetViewportExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
GetDeviceCaps
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetObjectW
SetBkColor
SetTextColor
GetClipBox
PtVisible
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
StrToIntExW
PathIsUNCW
oledlg
OleUIBusyW
ole32
CoRevokeClassObject
CoGetClassObject
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
oleaut32
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysAllocString
VariantCopy
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
OleCreateFontIndirect
LoadTypeLi
SysStringLen
Sections
.text Size: 500KB - Virtual size: 499KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ