Static task
static1
Behavioral task
behavioral1
Sample
2024-01-01_b3d2b9bb754f6f52ca55187690a29527_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-01_b3d2b9bb754f6f52ca55187690a29527_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-01_b3d2b9bb754f6f52ca55187690a29527_icedid
-
Size
1.9MB
-
MD5
b3d2b9bb754f6f52ca55187690a29527
-
SHA1
2c79cfccb3c59f73321f134215e5bc6a7a3dc7f7
-
SHA256
eb6d1a5ff9a762f54f069b8779360356639c8cd36ea5ffb34e82a039c2d08d1d
-
SHA512
19ef67af71dcc3607592d2c7be24e16c53c7f3c6aabdc78f24316a678c4f2b4a7a1b25698306f909dafd1f2d04f57e2235cf01a28d51401bfe248ac494419aac
-
SSDEEP
24576:SB2df3pBuQ8fDVP7UdESkkhcSSfHmqUFeHvhVQjYhtHPRSQK:SMFpF8fpP7UmSkkhcSSfHmNFetbH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-01_b3d2b9bb754f6f52ca55187690a29527_icedid
Files
-
2024-01-01_b3d2b9bb754f6f52ca55187690a29527_icedid.exe windows:4 windows x86 arch:x86
24027465234c633835f375830ff3a630
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
hid
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidP_MaxUsageListLength
HidD_GetAttributes
HidD_GetPreparsedData
HidP_GetCaps
HidD_FreePreparsedData
HidD_GetHidGuid
HidD_GetFeature
kernel32
HeapSize
GetCurrentProcessId
GetTimeZoneInformation
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
TerminateProcess
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetDateFormatA
SetStdHandle
SetEnvironmentVariableA
HeapReAlloc
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
GetEnvironmentStringsW
HeapFree
lstrcpynA
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
MultiByteToWideChar
FindResourceA
SizeofResource
LockResource
LoadResource
WideCharToMultiByte
DeleteFileA
GlobalUnlock
GlobalLock
GlobalReAlloc
GlobalAlloc
GlobalFree
CloseHandle
CreateFileA
WriteFile
Sleep
GetTimeFormatA
GetSystemTimeAsFileTime
ExitProcess
RtlUnwind
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SetErrorMode
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
LocalAlloc
GlobalFlags
ReleaseSemaphore
CreateSemaphoreA
lstrcpyW
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
GetTickCount
WritePrivateProfileStringA
WaitForSingleObject
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
SystemTimeToFileTime
FileTimeToSystemTime
GetModuleFileNameA
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
MoveFileA
GlobalSize
FormatMessageA
LocalFree
MulDiv
SetLastError
InterlockedDecrement
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
GetModuleHandleA
GetProcAddress
RaiseException
DeleteCriticalSection
InitializeCriticalSection
lstrcmpiA
GetStringTypeExA
lstrlenW
CompareStringA
CompareStringW
GetVersion
lstrlenA
EnterCriticalSection
LeaveCriticalSection
CopyFileA
CreateThread
CreateMutexA
GetLastError
LoadLibraryA
GetPrivateProfileStringA
GetPrivateProfileIntA
FreeLibrary
QueryPerformanceCounter
QueryPerformanceFrequency
user32
CharNextA
DestroyIcon
SetWindowRgn
DrawIcon
IsRectEmpty
FindWindowA
DestroyCursor
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
ValidateRect
ShowOwnedPopups
PostQuitMessage
IsZoomed
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
GetMessageA
TranslateMessage
ReleaseCapture
DestroyMenu
GetMenuItemInfoA
InflateRect
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
wsprintfA
GetMenuStringA
InsertMenuA
RemoveMenu
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
WindowFromPoint
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
IsWindowEnabled
ShowWindow
MoveWindow
CopyAcceleratorTableA
IsDialogMessageA
SetDlgItemTextA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetDC
GetSysColor
CopyRect
FillRect
TabbedTextOutA
GetTabbedTextExtentA
EnableWindow
SendMessageA
GetClientRect
InvalidateRect
SetFocus
GetFocus
GetSystemMetrics
GetWindowRect
SendDlgItemMessageA
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
SetParent
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
MessageBoxA
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetDCEx
LockWindowUpdate
SetWindowTextA
GetParent
SetCursor
LoadCursorA
IsWindow
SetCapture
PtInRect
SetRect
LoadBitmapA
CreateMenu
AppendMenuA
LoadMenuA
GetSysColorBrush
ClientToScreen
UpdateWindow
HideCaret
RegisterDeviceNotificationA
UnregisterDeviceNotification
SetForegroundWindow
BroadcastSystemMessageA
LoadIconA
RegisterWindowMessageA
GetCursorPos
CreatePopupMenu
GetSubMenu
GetMenu
ScreenToClient
IsWindowVisible
SetTimer
KillTimer
PostMessageA
CharUpperA
UnregisterClassA
SetMenuDefaultItem
ReleaseDC
GetWindow
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongA
GetWindowLongA
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
RegisterClassA
GetClassInfoA
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
AdjustWindowRectEx
GetMenuItemCount
GetMenuItemID
gdi32
ExtSelectClipRgn
CreatePatternBrush
CreateDCA
CreateFontIndirectA
StretchDIBits
GetCharWidthA
GetViewportOrgEx
DPtoLP
StartPage
GetCurrentPositionEx
SetAbortProc
AbortDoc
EndDoc
CreateEllipticRgn
LPtoDP
SetRectRgn
CombineRgn
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetWindowOrgEx
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
ResetDCA
DeleteObject
CreateDIBSection
SetDIBColorTable
EndPage
SelectObject
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
PatBlt
CreateRectRgnIndirect
DeleteDC
GetDeviceCaps
GetStockObject
GetObjectA
CreatePen
CreateSolidBrush
CreateFontA
CreateCompatibleBitmap
CreateCompatibleDC
Arc
BitBlt
GetTextMetricsA
CreateRoundRectRgn
PtInRegion
RectInRegion
Ellipse
Rectangle
SetPixel
GetTextExtentPoint32A
comdlg32
GetSaveFileNameA
PrintDlgA
GetOpenFileNameA
CommDlgExtendedError
GetFileTitleA
winspool.drv
ClosePrinter
GetJobA
OpenPrinterA
DocumentPropertiesA
advapi32
RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
SetFileSecurityA
RegCloseKey
GetFileSecurityA
shell32
Shell_NotifyIconA
SHGetFileInfoA
DragFinish
DragQueryFileA
ExtractIconA
ShellExecuteA
comctl32
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Draw
ImageList_GetImageInfo
shlwapi
PathFindExtensionW
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA
oledlg
ord8
ole32
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleInitialize
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleTranslateAccelerator
oleaut32
SystemTimeToVariantTime
VarUdateFromDate
SysFreeString
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
SysAllocString
OleCreateFontIndirect
VariantTimeToSystemTime
gdiplus
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipAlloc
GdipCloneImage
GdipFree
GdipDisposeImage
GdiplusShutdown
GdipSaveImageToFile
odbc32
ord51
ord50
ord45
ord44
ord68
ord43
ord59
ord13
ord18
ord46
ord12
ord19
ord11
ord49
ord48
ord8
ord20
ord16
ord3
ord14
ord9
ord15
ord1
ord2
ord10
ord41
ord17
ord4
ord72
ord5
Sections
.text Size: 428KB - Virtual size: 427KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ