Static task
static1
Behavioral task
behavioral1
Sample
2024-01-01_1f4abae9a25618430c0c8e34e1dbfd5f_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-01_1f4abae9a25618430c0c8e34e1dbfd5f_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-01_1f4abae9a25618430c0c8e34e1dbfd5f_icedid
-
Size
1.2MB
-
MD5
1f4abae9a25618430c0c8e34e1dbfd5f
-
SHA1
7569bd3e25276159c91bb9be862d6c7dcc89648a
-
SHA256
902ca5cad39c1737ce7117b70db1e2685df7cd4a0235c6a15ef04ea1ababf2ee
-
SHA512
a8ab544d3bfc401f3000297dceff54b41fdc89d836f05c4642d36cae034304c9a924f8fb81fc0917e0738f6cba71b5697843e7e43273d1f37dd165184162b123
-
SSDEEP
12288:BDWQZSLWJq6qwuGBxNdZgt5cRVpuwbQoxp/SLbJ1mBcD/zQvV:BD9ZPJq6qKBsPcRVpu6QoDBcDLQv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-01_1f4abae9a25618430c0c8e34e1dbfd5f_icedid
Files
-
2024-01-01_1f4abae9a25618430c0c8e34e1dbfd5f_icedid.exe windows:4 windows x86 arch:x86
8c1d81f418fccf06e075d633dad976a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
stdfu
STDFU_Open
STDFU_GetDeviceDescriptor
STDFU_Close
STDFU_GetDFUDescriptor
stdfufiles
STDFUFILES_DestroyImage
STDFUFILES_DuplicateImage
STDFUFILES_CloseDFUFile
STDFUFILES_GetImageName
STDFUFILES_GetImageAlternate
STDFUFILES_ReadImageFromDFUFile
STDFUFILES_OpenExistingDFUFile
STDFUFILES_GetImageElement
STDFUFILES_GetImageNbElement
STDFUFILES_AppendImageToDFUFile
STDFUFILES_CreateNewDFUFile
STDFUFILES_FilterImageForOperation
stdfuprt
STDFUPRT_DestroyMapping
STDFUPRT_GetOperationStatus
STDFUPRT_LaunchOperation
STDFUPRT_CreateMappingFromDevice
STDFUPRT_StopOperation
kernel32
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
CreateFileA
GetFileAttributesA
GetFileTime
SetErrorMode
HeapAlloc
SetEndOfFile
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
TerminateProcess
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
FindFirstFileA
FindClose
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
InterlockedIncrement
RaiseException
InterlockedDecrement
GetTickCount
WritePrivateProfileStringA
WaitForSingleObject
CloseHandle
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
SetLastError
MulDiv
FormatMessageA
lstrcpynA
LocalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
lstrcpyA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
HeapFree
user32
ValidateRect
SetCursor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
PostQuitMessage
wsprintfA
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetDesktopWindow
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
SetFocus
IsChild
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
MessageBoxA
GetKeyState
SetForegroundWindow
UpdateWindow
GetMenu
AdjustWindowRectEx
GetParent
ScreenToClient
EqualRect
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
CopyRect
PtInRect
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetSysColor
IsWindow
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetClientRect
GetDC
ReleaseDC
IsWindowVisible
SetWindowRgn
ReleaseCapture
SetCapture
DestroyMenu
RegisterDeviceNotificationA
LoadIconA
KillTimer
SetTimer
InvalidateRect
PostMessageA
LoadBitmapA
SetRect
SendMessageA
EnableWindow
CharUpperA
LoadCursorA
GetSysColorBrush
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
IsRectEmpty
CharNextA
WindowFromPoint
GetMessageA
TranslateMessage
GetCursorPos
gdi32
CreateRectRgnIndirect
SaveDC
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetStockObject
CreateBitmap
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
SetMapMode
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateDIBSection
SelectObject
DeleteDC
DeleteObject
CombineRgn
ExtCreateRegion
CreateRectRgn
StretchBlt
BitBlt
CreateCompatibleDC
PtInRegion
CreateEllipticRgnIndirect
GetObjectA
RestoreDC
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
comctl32
ord17
ImageList_Destroy
shlwapi
PathFindFileNameA
PathFindExtensionA
UrlUnescapeA
PathStripToRootA
PathIsUNCA
oledlg
ord8
ole32
CoFreeUnusedLibraries
CoRevokeClassObject
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
oleaut32
OleCreateFontIndirect
SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantClear
VariantCopy
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
wininet
InternetOpenUrlA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
InternetQueryDataAvailable
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetSetOptionExA
Sections
.text Size: 180KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ