Static task
static1
Behavioral task
behavioral1
Sample
2023-08-25_a4c64995dac0f45d295be3f79a9ef586_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-25_a4c64995dac0f45d295be3f79a9ef586_icedid_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-25_a4c64995dac0f45d295be3f79a9ef586_icedid_JC.exe
-
Size
2.2MB
-
MD5
a4c64995dac0f45d295be3f79a9ef586
-
SHA1
d480fd6f480ec592cafef7fe8db96be648f7ad48
-
SHA256
5c01d9a560992171e299188e3b5dcafb61d39c52aac279cc8a30fa8eb37e639c
-
SHA512
2162addd624977d68b047c6ace9cb54de03ec703a1b3abe9997cafff205ffaca37ed30dbde5058f0924730c16faa58a448355285f0943abe10f2eebad4009606
-
SSDEEP
49152:j9x7SGzsBmdg1JQ95+gwegu1MK2rEHrE6:f2GzJg1JQXHGu2LrEHrE6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-25_a4c64995dac0f45d295be3f79a9ef586_icedid_JC.exe
Files
-
2023-08-25_a4c64995dac0f45d295be3f79a9ef586_icedid_JC.exe.exe windows:4 windows x86
06686950fff0b8278b42f72812f4f9a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
SetEndOfFile
MulDiv
LocalFree
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GetACP
FreeResource
lstrcmpA
EnumResourceLanguagesA
ConvertDefaultLocale
GlobalReAlloc
GlobalHandle
LocalReAlloc
GlobalFlags
GetThreadLocale
WritePrivateProfileStringA
GetCPInfo
HeapSize
SetConsoleMode
ReadConsoleInputA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSection
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStdHandle
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapCreate
HeapDestroy
RaiseException
RtlUnwind
VirtualQuery
HeapReAlloc
GetStartupInfoA
GetProcessHeap
GetCommandLineA
HeapAlloc
HeapFree
LocalAlloc
InterlockedDecrement
GetWindowsDirectoryA
GetVolumeInformationA
ResumeThread
ExitThread
TerminateThread
TlsGetValue
TlsSetValue
TlsAlloc
GetTickCount
CreateSemaphoreA
ReleaseSemaphore
CreateMutexA
CreateEventA
CreateThread
WaitForSingleObject
SetEvent
WaitForMultipleObjects
ReleaseMutex
GetModuleHandleA
GetSystemTime
SetErrorMode
LoadLibraryA
GetProcAddress
FreeLibrary
QueryDosDeviceA
lstrlenA
CompareStringA
OpenFile
SetFileAttributesA
DeleteFileA
GetCurrentThread
SetThreadPriority
ExitProcess
VirtualAlloc
VirtualFree
DeviceIoControl
Sleep
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
WriteFile
GetVersionExA
GetDriveTypeA
GetModuleFileNameA
CreateFileA
SetFilePointer
ReadFile
GlobalGetAtomNameA
CloseHandle
user32
DestroyMenu
ClientToScreen
GetSysColorBrush
GetWindowThreadProcessId
SetCursor
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
IsWindowEnabled
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
TabbedTextOutA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetTopWindow
UnhookWindowsHookEx
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
PostMessageA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
GetParent
CreateIconFromResourceEx
SendMessageA
GetDlgItem
SetWindowTextA
SetDlgItemTextA
EndDialog
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
GetMenuState
DrawTextA
DrawTextExA
GrayStringA
UnregisterClassA
GetWindowTextA
DestroyIcon
DialogBoxParamA
MessageBoxA
EnableWindow
GetDC
wsprintfA
RegisterClassExA
LoadCursorA
UpdateWindow
ShowWindow
SetWindowPos
SetWindowLongA
CreateWindowExA
AdjustWindowRectEx
DestroyWindow
DispatchMessageA
GetMessageA
GetWindowLongA
GetWindowRect
GetClientRect
GetMenuItemID
GetMenuItemCount
GetSubMenu
FillRect
PostThreadMessageA
DefWindowProcA
BeginPaint
EndPaint
GetKeyboardState
ToAscii
ReleaseDC
GetMessageTime
gdi32
SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
GetStockObject
CreateDIBitmap
SetMapMode
RestoreDC
SaveDC
ExtTextOutA
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
StretchBlt
BitBlt
CreateSolidBrush
GetPixel
SetPixel
DeleteDC
DeleteObject
CreateCompatibleDC
CreateDIBSection
SelectObject
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
OpenSCManagerA
OpenServiceA
CloseServiceHandle
ControlService
StartServiceA
ole32
CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx
StgCreateDocfile
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
SysFreeString
SysAllocStringLen
SysStringLen
VariantClear
SysAllocString
VariantChangeType
VariantInit
Sections
.text Size: 244KB - Virtual size: 243KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ