Static task
static1
Behavioral task
behavioral1
Sample
2023-08-25_c490c35ef135ee17da2f9a24bccbf52e_icedid_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2023-08-25_c490c35ef135ee17da2f9a24bccbf52e_icedid_JC.exe
Resource
win10v2004-20230915-en
General
-
Target
2023-08-25_c490c35ef135ee17da2f9a24bccbf52e_icedid_JC.exe
-
Size
11.7MB
-
MD5
c490c35ef135ee17da2f9a24bccbf52e
-
SHA1
f5ae9d5e0ad958359042c66c9326086b73d59574
-
SHA256
9bdf7ecdea77600c9e78d473dcdfdb7ad1964ad3560f06c89a1841cb4117f2d6
-
SHA512
f1892b3cf059ed94f179afe8624cb100e98a5b850cd959a3b9408601d5cbdb7d870bcc5ed33d261a1f5e90c9bc75720d69c731fe2179275991a8c4496a0cc370
-
SSDEEP
196608:gcEGcIt94sMjsAhrv2v7+iHjjEVJzc2x5d3K2Q4FhldmWs/iN1VIrHpolaakxOS:Vp9eiHj9Kdad4Fh/mWs/iNdla5P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2023-08-25_c490c35ef135ee17da2f9a24bccbf52e_icedid_JC.exe
Files
-
2023-08-25_c490c35ef135ee17da2f9a24bccbf52e_icedid_JC.exe.exe windows:4 windows x86
253f13a1f335795d546fb2c0ccb35d84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
CreateFileA
WriteConsoleA
GetConsoleOutputCP
SetConsoleCtrlHandler
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
SetEnvironmentVariableA
GetModuleFileNameA
SetStdHandle
HeapSize
VirtualQuery
VirtualAlloc
SetConsoleMode
ReadConsoleInputA
VirtualProtect
GlobalMemoryStatus
FindFirstFileA
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleW
RaiseException
MulDiv
lstrlenW
SetLastError
GetLastError
LoadLibraryW
lstrcpyW
WinExec
lstrcatW
WideCharToMultiByte
GlobalFree
GlobalReAlloc
GlobalAlloc
QueryPerformanceCounter
GetTickCount
ResumeThread
GetLocaleInfoW
CreateEventW
CloseHandle
Sleep
WaitForSingleObject
SetEvent
FreeLibrary
GlobalUnlock
GlobalLock
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
lstrlenA
GetUserDefaultLCID
EnumResourceNamesW
DuplicateHandle
GetCurrentProcess
SetThreadExecutionState
CreateDirectoryW
MoveFileW
DeleteFileW
GetTimeFormatW
ExitProcess
GetFileType
GetConsoleMode
GetConsoleCP
CreateThread
ExitThread
GetDateFormatA
GetTimeFormatA
IsDebuggerPresent
UnhandledExceptionFilter
HeapReAlloc
GetSystemTimeAsFileTime
RtlUnwind
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
SetErrorMode
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GetTempFileNameW
GetDateFormatW
GetCurrentThreadId
LocalAlloc
FindNextFileW
SuspendThread
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetStringTypeExW
lstrcmpiW
GetSystemDirectoryW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
LoadLibraryExW
CompareStringA
GlobalGetAtomNameW
lstrcmpA
GetPrivateProfileIntW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetVersionExA
GetModuleHandleA
FreeResource
WritePrivateProfileStringW
GetPrivateProfileStringW
GlobalSize
GetThreadLocale
LoadLibraryA
GetSystemInfo
InterlockedExchange
TerminateThread
GetExitCodeThread
GetProcessId
OpenThread
CreateProcessW
OutputDebugStringA
LocalFileTimeToFileTime
SetFileTime
DosDateTimeToFileTime
SetFileAttributesW
SystemTimeToFileTime
GetFileInformationByHandle
FileTimeToDosDateTime
GetTempPathW
ReleaseSemaphore
CreateSemaphoreW
SetThreadPriority
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVersion
GetVersionExW
SetUnhandledExceptionFilter
OpenMutexW
CreateMutexW
WriteConsoleW
AttachConsole
GetStdHandle
GetLocalTime
GetCurrentProcessId
GetCurrentDirectoryW
WaitForMultipleObjects
CreateFileW
GetFileTime
ResetEvent
WriteFile
ReadFile
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
RemoveDirectoryW
GetFileAttributesW
GetModuleFileNameW
GetDiskFreeSpaceW
CopyFileW
GlobalHandle
FormatMessageW
LocalFree
FlushConsoleInputBuffer
user32
ReuseDDElParam
DestroyMenu
LoadAcceleratorsW
InsertMenuItemW
TranslateAcceleratorW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
SendDlgItemMessageA
WinHelpW
GetForegroundWindow
GetLastActivePopup
ScrollWindow
GetClassInfoExW
SetWindowPlacement
SystemParametersInfoA
GetWindowPlacement
EndPaint
BeginPaint
GetWindowTextLengthW
ScrollWindowEx
IsDialogMessageW
SetDlgItemTextW
SendDlgItemMessageW
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
InvalidateRgn
CharLowerW
GetDialogBaseUnits
GetUpdateRect
AdjustWindowRectEx
DestroyCaret
CreateCaret
SetCaretPos
EnableScrollBar
SubtractRect
PostQuitMessage
GetTopWindow
GetMenuStringW
EmptyClipboard
ShowCaret
GetDesktopWindow
SetClipboardData
IsClipboardFormatAvailable
GetOpenClipboardWindow
ShowScrollBar
InvertRect
DrawEdge
UnregisterClassW
RegisterClipboardFormatW
IsIconic
MsgWaitForMultipleObjectsEx
OpenClipboard
GetClipboardData
CloseClipboard
PrintWindow
GetSysColorBrush
InsertMenuW
DestroyWindow
MoveWindow
ShowWindow
EnableMenuItem
CreateWindowExW
SetMenuContextHelpId
SetWindowsHookExW
CallNextHookEx
GetWindowThreadProcessId
UnhookWindowsHookEx
SetMenu
RegisterWindowMessageW
SetActiveWindow
FindWindowW
SetForegroundWindow
TrackPopupMenu
SetMenuDefaultItem
DestroyIcon
UnpackDDElParam
MessageBoxW
SwitchToThisWindow
PostThreadMessageW
SetFocus
SetWindowTextW
SetCursorPos
GetWindowTextW
SetWindowContextHelpId
BringWindowToTop
LoadIconW
DrawIcon
ValidateRect
HideCaret
DefWindowProcW
ClipCursor
LockWindowUpdate
UnionRect
PeekMessageW
GrayStringW
DrawTextExW
TabbedTextOutW
FrameRect
GetKeyboardLayout
GetClassLongW
IsWindowEnabled
SetLayeredWindowAttributes
LoadMenuW
DestroyCursor
GetScrollRange
GetScrollPos
SetScrollRange
SetScrollInfo
SetScrollPos
GetScrollInfo
GetCursor
KillTimer
SetTimer
DrawFrameControl
GetMenu
AdjustWindowRect
MapWindowPoints
RemovePropW
RemoveMenu
GetMenuContextHelpId
GetMenuItemID
IsWindowVisible
wsprintfW
GetDCEx
GetSysColor
GetSystemMetrics
GetWindowRect
IsZoomed
InflateRect
MessageBoxA
ModifyMenuW
GetMenuState
GetMenuItemInfoW
SetMenuItemInfoW
MessageBeep
SetWindowRgn
GetWindowDC
DrawTextW
SetWindowPos
LoadBitmapW
TranslateMessage
GetMessagePos
SetRect
IntersectRect
IsWindow
GetMessageTime
SetCursor
GetMenuItemCount
GetSubMenu
CreatePopupMenu
CopyIcon
UpdateWindow
GetSystemMenu
DeleteMenu
AppendMenuW
GetDlgCtrlID
GetMessageW
CountClipboardFormats
CharUpperW
GetTabbedTextExtentA
CharNextW
ShowOwnedPopups
MapDialogRect
CreateMenu
GetNextDlgGroupItem
CopyAcceleratorTableW
SendNotifyMessageW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
MsgWaitForMultipleObjects
GetProcessWindowStation
GetUserObjectInformationW
UnregisterClassA
GetClientRect
OffsetRect
GetWindowRgn
ReleaseCapture
SetCapture
GetCapture
PtInRect
GetKeyState
WindowFromPoint
GetCursorPos
SendMessageW
PostMessageW
GetMonitorInfoW
MonitorFromWindow
SystemParametersInfoW
MonitorFromRect
RegisterClassW
GetClassInfoW
SetClassLongW
ReleaseDC
GetDC
EndDeferWindowPos
DeferWindowPos
GetDlgItem
BeginDeferWindowPos
GetWindowLongW
EqualRect
GetClassNameW
CallWindowProcW
SetWindowLongW
GetWindow
GetPropW
SetPropW
GetParent
FillRect
EnableWindow
ScreenToClient
InvalidateRect
DrawFocusRect
CopyRect
IsChild
GetFocus
SetRectEmpty
IsRectEmpty
SetParent
LoadCursorW
ClientToScreen
RedrawWindow
DispatchMessageW
gdi32
CreatePolygonRgn
BitBlt
CreateCompatibleBitmap
PlayEnhMetaFileRecord
DeleteEnhMetaFile
EnumEnhMetaFile
CloseEnhMetaFile
CreateEnhMetaFileW
DeleteObject
SetViewportOrgEx
PtInRegion
CreateBitmap
CreateRoundRectRgn
GetTextAlign
GetMapMode
DPtoLP
LPtoDP
GetBkMode
GetWindowOrgEx
Ellipse
Pie
RoundRect
PtVisible
RectVisible
TextOutW
Escape
GetTextExtentExPointW
GetViewportExtEx
GetRandomRgn
GetGlyphIndicesW
SetViewportExtEx
SetWindowExtEx
SetMapMode
GetCurrentPositionEx
FillPath
EndPath
BeginPath
StretchDIBits
SetBrushOrgEx
CreatePenIndirect
ExtCreatePen
CreateBrushIndirect
DeleteDC
EnumFontFamiliesExW
CreateICW
GetWindowExtEx
FillRgn
GetTextExtentPointW
CreateFontW
RectInRegion
PaintRgn
CopyMetaFileW
CreateDCW
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
PathToRegion
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
SelectClipRgn
GetPixel
StartDocW
OffsetViewportOrgEx
ScaleViewportExtEx
SetWindowOrgEx
ScaleWindowExtEx
PolyBezierTo
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
SetRectRgn
CreateEllipticRgn
CloseMetaFile
DeleteMetaFile
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetCharWidthW
GetNearestColor
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextFaceW
GetTextExtentPoint32A
GetRgnBox
GetStockObject
OffsetRgn
CombineRgn
GetTextMetricsW
Rectangle
RealizePalette
CreatePalette
SetBkColor
CreateRectRgnIndirect
CreatePen
GetBkColor
PatBlt
GetDeviceCaps
GetObjectW
CreateFontIndirectW
ExtTextOutW
CreateCompatibleDC
EnumFontFamiliesW
Polygon
SetPixel
GetTextColor
CreateSolidBrush
SetTextColor
GetViewportOrgEx
GetTextExtentPoint32W
SelectObject
CreateRectRgn
FrameRgn
SetStretchBltMode
StretchBlt
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
GetJobW
EnumPrintersW
ord204
DocumentPropertiesW
OpenPrinterW
advapi32
ReportEventA
GetFileSecurityW
RegisterEventSourceA
SetFileSecurityW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExA
CryptDecrypt
CryptEncrypt
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptSetKeyParam
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext
RegCreateKeyW
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegQueryValueW
RegCloseKey
DeregisterEventSource
shell32
SHGetFileInfoW
ShellExecuteExW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
Shell_NotifyIconW
DragAcceptFiles
ExtractIconW
ShellExecuteW
DragFinish
DragQueryFileW
shlwapi
PathCompactPathW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
oledlg
OleUIInsertObjectW
OleUIPasteSpecialW
OleUIBusyW
OleUIObjectPropertiesW
ole32
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleQueryCreateFromData
CreateStreamOnHGlobal
CLSIDFromString
CoInitializeEx
CoUninitialize
CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CoTreatAsClass
OleDuplicateData
OleIsCurrentClipboard
OleFlushClipboard
CoDisconnectObject
CLSIDFromProgID
CoGetClassObject
CoInitialize
CreateFileMoniker
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleSave
WriteClassStm
OleSaveToStream
OleLockRunning
OleCreateFromData
CoRegisterMessageFilter
CoRevokeClassObject
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
OleGetClipboard
OleSetMenuDescriptor
CreateGenericComposite
OleCreateStaticFromData
OleCreateLinkFromData
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
OleLoad
OleCreate
CreateItemMoniker
oleaut32
VarUdateFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromStr
VariantClear
VariantCopy
VariantInit
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysAllocString
VariantChangeType
VarBstrFromDate
SysStringLen
SysAllocStringLen
OleCreateFontIndirect
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayCreate
SafeArrayDestroy
GetErrorInfo
SafeArrayGetDim
ws2_32
getnameinfo
getaddrinfo
freeaddrinfo
accept
sendto
WSARecvFrom
WSARecv
recvfrom
bind
listen
setsockopt
WSASetLastError
getsockname
getsockopt
ntohs
getservbyname
ioctlsocket
WSAGetLastError
connect
htons
gethostbyname
inet_addr
socket
closesocket
shutdown
send
recv
gethostname
WSACleanup
WSAStartup
inet_ntoa
getpeername
__WSAFDIsSet
select
gdiplus
GdipFillEllipseI
GdipDrawImageI
GdipDrawImageRectI
GdipDrawImagePointRectI
GdipBitmapSetPixel
GdipSetCompositingMode
GdipDrawImageRectRect
GdipCreateBitmapFromStream
GdipFillRectangleI
GdipGetPathWorldBoundsI
GdipSetClipRectI
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipSetImageAttributesColorKeys
GdiplusShutdown
GdiplusStartup
GdipReleaseDC
GdipGetDC
GdipCreateLineBrushFromRectWithAngleI
GdipDrawEllipseI
GdipCreateBitmapFromStreamICM
GdipDeleteGraphics
GdipDeleteBrush
GdipCreateLineBrushI
GdipCreateFromHDC
GdipAlloc
GdipCloneBrush
GdipFree
GdipCreateSolidFill
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipDisposeImage
GdipCloneImage
GdipDeletePath
GdipClosePathFigure
GdipCreatePath
GdipDeletePen
GdipCreatePen1
GdipDeleteRegion
GdipGetRegionHRgn
GdipCreateRegionPath
GdipDeleteStringFormat
GdipDeleteFont
GdipMeasureString
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipDrawRectangleI
GdipSetStringFormatTrimming
GdipCreateStringFormat
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipDrawString
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipFillEllipse
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipDeleteMatrix
GdipSetWorldTransform
GdipCreateMatrix2
GdipDrawArcI
GdipDrawPieI
GdipFillPieI
GdipAddPathLineI
GdipDrawPolygonI
GdipFillPolygonI
GdipAddPathArcI
GdipDrawPath
GdipFillPath
GdipFillRegion
GdipCombineRegionPath
GdipResetWorldTransform
GdipSetPathGradientCenterPointI
GdipSetPathGradientCenterColor
GdipTransformPath
GdipTranslateMatrix
GdipCreateMatrix
GdipResetClip
GdipSetClipRegion
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipSetLineBlend
GdipDrawImageRectRectI
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateImageAttributes
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImageWidth
GdipGetImageHeight
GdipClonePath
GdipAddPathBezierI
GdipAddPathRectangleI
GdipAddPathEllipseI
GdipCreatePathGradientFromPath
GdipSetPathGradientSurroundColorsWithCount
GdipGetPathGradientPointCount
GdipSetStringFormatFlags
wininet
InternetSetFilePointer
InternetSetOptionExW
InternetQueryDataAvailable
HttpOpenRequestW
InternetConnectW
HttpSendRequestExW
HttpEndRequestW
InternetReadFile
InternetWriteFile
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
HttpAddRequestHeadersW
Sections
.text Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1016KB - Virtual size: 1013KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ