Static task
static1
Behavioral task
behavioral1
Sample
2023-08-25_ae7451d1ea67b0cd141577b8727a2c18_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-25_ae7451d1ea67b0cd141577b8727a2c18_icedid_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-25_ae7451d1ea67b0cd141577b8727a2c18_icedid_JC.exe
-
Size
2.0MB
-
MD5
ae7451d1ea67b0cd141577b8727a2c18
-
SHA1
0dea7ea7fd413a1b07e37115f012ff59b45c21cb
-
SHA256
899635a4fd5b55656d3d77f5d312977e07e25df0a8f6441d52037002f60c2b8c
-
SHA512
b016fadef990cacc782f1ef3dc89d98eb10dcdf8e7d95bcd7606b0f08cde6ea04b62b76f7560a29a32516a192e0a8da46b0042958571693982f3125d3758fb43
-
SSDEEP
49152:udqFlIEcTdw1VQpLLSw6D1vD2ivqq4zEO0d+yobBi/adGdf9iqgj:NFlIEcC1VYyw6D1vD2ivqq4AOE9IGdfU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-25_ae7451d1ea67b0cd141577b8727a2c18_icedid_JC.exe
Files
-
2023-08-25_ae7451d1ea67b0cd141577b8727a2c18_icedid_JC.exe.exe windows:5 windows x86
7962de8e4d8feaa9242ec16633ab916f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleMode
GetCurrentDirectoryW
GetConsoleCP
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
GetDriveTypeW
GetTimeZoneInformation
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetStringTypeW
CompareStringW
IsProcessorFeaturePresent
HeapCreate
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
IsValidCodePage
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
HeapSize
HeapQueryInformation
HeapReAlloc
CreateThread
ExitThread
ExitProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
RaiseException
DecodePointer
EncodePointer
RtlUnwind
HeapFree
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetTickCount
InitializeCriticalSectionAndSpinCount
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
GetOEMCP
GetCPInfo
GetFileTime
GetFileSizeEx
GetFileAttributesExA
SetErrorMode
GetACP
lstrcpyA
GlobalFlags
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalGetAtomNameA
GlobalFindAtomA
GetVersionExA
LoadLibraryW
lstrcmpW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiA
FreeResource
GlobalAddAtomA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleA
SetEvent
SetThreadPriority
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
CompareStringA
lstrcmpA
GetModuleHandleW
InterlockedDecrement
GetModuleFileNameW
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
lstrlenA
SetLastError
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
CreateProcessA
GetCurrentProcess
SetPriorityClass
FindFirstFileA
FindNextFileA
FindClose
WriteFile
GetCurrentDirectoryA
ReadFile
CreateFileA
SetFilePointer
WaitForSingleObject
SuspendThread
ResumeThread
MultiByteToWideChar
GetProcAddress
GetShortPathNameA
RemoveDirectoryA
DeleteFileA
Sleep
GetFileAttributesA
SetFileAttributesA
FindResourceA
LoadLibraryA
OpenEventA
CloseHandle
FreeLibrary
CreateDirectoryA
GetModuleFileNameA
CopyFileA
GetCurrentProcessId
lstrlenW
WideCharToMultiByte
GetEnvironmentVariableA
CreateEventA
FindResourceW
LoadResource
LockResource
SizeofResource
GetLastError
user32
MessageBeep
IsClipboardFormatAvailable
DestroyMenu
GetMenuItemInfoA
DestroyIcon
IsIconic
WaitMessage
ReleaseCapture
WindowFromPoint
SetCapture
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoA
RealChildWindowFromPoint
DeleteMenu
UnregisterClassA
GetSysColorBrush
MapVirtualKeyA
GetKeyNameTextA
IntersectRect
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
GetWindow
CharUpperA
CharUpperBuffA
SetActiveWindow
SetRect
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GetDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
ShowOwnedPopups
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
PostQuitMessage
UnhookWindowsHookEx
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetSystemMetrics
CopyIcon
RegisterClipboardFormatA
LoadImageW
ReleaseDC
GetWindowDC
GetWindowTextA
GetWindowTextLengthA
GetClassNameA
TranslateMDISysAccel
GetWindowThreadProcessId
SetWindowRgn
PtInRect
SetRectEmpty
LoadIconW
LoadBitmapW
GetSysColor
LoadCursorA
SetCursor
KillTimer
SetTimer
RedrawWindow
UpdateWindow
GetClientRect
FillRect
EnableWindow
GetParent
InvalidateRect
GetWindowRect
IsRectEmpty
IsZoomed
SetParent
DestroyAcceleratorTable
CreatePopupMenu
NotifyWinEvent
GetAsyncKeyState
SetClassLongA
LoadMenuW
GetSystemMenu
GetWindowRgn
OffsetRect
InflateRect
DrawStateA
PostThreadMessageA
PostMessageA
RegisterWindowMessageA
IsWindow
SendMessageA
FindWindowA
EnumWindows
DestroyCursor
DrawIcon
MapDialogRect
SubtractRect
MapVirtualKeyExA
IsCharLowerA
CreateDialogIndirectParamA
GetDoubleClickTime
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetUpdateRect
FrameRect
SetMenuDefaultItem
CreateMenu
IsMenu
UpdateLayeredWindow
UnionRect
MonitorFromPoint
DrawIconEx
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetNextDlgGroupItem
CopyImage
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadImageA
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
DrawFocusRect
DrawFrameControl
GetDesktopWindow
DrawEdge
gdi32
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateRectRgnIndirect
SetTextColor
CombineRgn
PatBlt
DPtoLP
CreateDIBitmap
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
CreatePolygonRgn
GetBkColor
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
GetRgnBox
SetPixel
EnumFontFamiliesExA
LPtoDP
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetTextFaceA
SetPixelV
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
CreateDCA
CopyMetaFileA
GetDeviceCaps
CreateRoundRectRgn
CreateDIBSection
GetDIBColorTable
SetDIBColorTable
SelectObject
DeleteDC
CreateFontA
GetViewportOrgEx
SetViewportOrgEx
GetStockObject
DeleteObject
CreateSolidBrush
BitBlt
Rectangle
CreateCompatibleBitmap
CreateFontIndirectA
GetTextExtentPoint32A
StretchBlt
SetRectRgn
GetObjectA
CreateCompatibleDC
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
InitializeSecurityDescriptor
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyExA
RegEnumValueA
SetSecurityDescriptorDacl
RegQueryValueA
RegEnumKeyA
shell32
SHGetSpecialFolderLocation
SHFileOperationA
SHGetSpecialFolderPathA
SHGetFileInfoA
DragFinish
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteA
SHGetPathFromIDListA
SHGetDesktopFolder
DragQueryFileA
comctl32
_TrackMouseEvent
ImageList_GetIconSize
shlwapi
PathIsDirectoryA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFileExistsA
PathRemoveFileSpecW
ole32
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CreateStreamOnHGlobal
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoCreateInstance
CoInitialize
CoCreateGuid
CoUninitialize
oleaut32
SysStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
SysAllocString
VariantInit
VariantChangeType
VariantClear
SysFreeString
SysAllocStringLen
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundA
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 274KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 622KB - Virtual size: 621KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ