Static task
static1
Behavioral task
behavioral1
Sample
2024-01-01_87768343eb8c09a5fd958168e64394c7_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-01_87768343eb8c09a5fd958168e64394c7_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-01_87768343eb8c09a5fd958168e64394c7_icedid
-
Size
258KB
-
MD5
87768343eb8c09a5fd958168e64394c7
-
SHA1
5160d165fa4275934458f154154a9297a70b42bf
-
SHA256
d40369f09a4921af793e8e97ed67458b6814abf4cadaf45ec1917d55052c7fe6
-
SHA512
e15335d4ab434f1927cbc71c9e205cfe478bace5baafaad308f81ee9cfc30ca46b81e21d6c95745d90a2ce1bdb19cd877d07bbe718fb1e017d69847f789f4562
-
SSDEEP
6144:jP+qglKXo7ZuYwNDv2vHao9083x0NmavuR:aqg/UWHao90wCNmTR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-01_87768343eb8c09a5fd958168e64394c7_icedid
Files
-
2024-01-01_87768343eb8c09a5fd958168e64394c7_icedid.exe windows:5 windows x86 arch:x86
0ca0ced5701b0c252895c7161835dc72
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
FlushFileBuffers
GetCurrentProcess
GetVersionExA
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
LocalFileTimeToFileTime
GetModuleHandleA
RtlUnwind
HeapFree
GetCommandLineA
GetStartupInfoA
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
Sleep
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetFilePointerEx
OutputDebugStringW
GetSystemTime
CreateMutexW
GetProcessHeap
OpenThread
AddAtomW
ReleaseMutex
FindAtomW
DeleteAtom
GlobalAddAtomW
GlobalFlags
lstrcmpW
WaitForSingleObject
GetCurrentThreadId
SystemTimeToFileTime
lstrlenA
lstrcmpA
GetAtomNameW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
WideCharToMultiByte
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
GetLastError
SetLastError
GetVersionExW
InterlockedDecrement
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
GetModuleHandleW
GetModuleFileNameW
LoadLibraryW
GetCurrentProcessId
DeviceIoControl
FindResourceW
LoadResource
LockResource
SizeofResource
CreateFileW
CloseHandle
ReadFile
GetFileSizeEx
SetFilePointer
advapi32
RegEnumKeyExW
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shell32
ShellExecuteExW
ole32
CoInitializeSecurity
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VariantChangeType
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
VariantClear
SysFreeString
SysAllocString
VariantInit
shlwapi
PathAppendW
PathFileExistsW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
DestroyMenu
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DefWindowProcW
CallWindowProcW
CopyRect
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetWindowPos
SetWindowLongW
IsWindow
GetDlgItem
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
SetWindowsHookExW
CallNextHookEx
DispatchMessageW
GetKeyState
PeekMessageW
GrayStringW
DrawTextExW
ValidateRect
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageW
GetParent
DrawTextW
TabbedTextOutW
PostQuitMessage
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
MessageBoxW
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
gdi32
DeleteDC
DeleteObject
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetMapMode
GetStockObject
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
GetDeviceCaps
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ