Static task
static1
Behavioral task
behavioral1
Sample
2024-01-06_53122642bc74f0275bd774823517fee3_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-06_53122642bc74f0275bd774823517fee3_icedid.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-06_53122642bc74f0275bd774823517fee3_icedid
-
Size
920KB
-
MD5
53122642bc74f0275bd774823517fee3
-
SHA1
aacbc5a6e048b342870f563c997bdd476e6ec123
-
SHA256
868e7fbf2d414c31533b50f71919152ed6abc4bbe7a7492f1fddac739de6936b
-
SHA512
66f4d6fe7f4187a2cc823c91a8e7888632e9ed4418992e7a82c00531e5024e0069734fe7237cb29cea0389670fac84268cdb84e3f5b852003a915d4f9b71df44
-
SSDEEP
12288:kdTOV9+fRpPBKGJTwZXngEWmmfXv+7LExt9lG/e0C6TDU+FJ6or:kkkKG1wOEWmmPbxt9lG/BBTDP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-06_53122642bc74f0275bd774823517fee3_icedid
Files
-
2024-01-06_53122642bc74f0275bd774823517fee3_icedid.exe windows:4 windows x86 arch:x86
30945937778127a64e6c9cdfe80dcbe2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetEndOfFile
SetEnvironmentVariableA
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
MulDiv
GlobalAlloc
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetModuleFileNameW
lstrcmpA
EnumResourceLanguagesA
ConvertDefaultLocale
WriteConsoleA
GlobalFlags
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetThreadLocale
WritePrivateProfileStringA
SetErrorMode
GetFileAttributesA
FlushFileBuffers
SetStdHandle
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSection
FreeLibrary
ReadFile
HeapSize
GetModuleFileNameA
HeapCreate
HeapDestroy
VirtualFree
GetCurrentThread
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetConsoleMode
GetConsoleCP
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetProcessHeap
GetCommandLineA
RaiseException
GetSystemTimeAsFileTime
ExitProcess
HeapReAlloc
HeapFree
HeapAlloc
GetModuleHandleA
VirtualAlloc
RtlUnwind
OutputDebugStringA
CreateThread
GetFileTime
LoadLibraryA
GetProcAddress
FormatMessageA
LocalFree
GetVersionExA
GlobalMemoryStatusEx
IsProcessorFeaturePresent
GetTempPathA
LoadResource
LockResource
SizeofResource
FindResourceA
GetCurrentDirectoryA
lstrlenA
WideCharToMultiByte
CompareStringA
CompareStringW
InterlockedExchange
GetVersion
DeviceIoControl
InterlockedDecrement
GetLastError
GetSystemDirectoryA
lstrcatA
GetStartupInfoA
CreateProcessA
WaitForSingleObject
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcess
GetDriveTypeA
Sleep
CreateFileA
SetFilePointer
WriteFile
CloseHandle
GetVolumeInformationA
SetFileAttributesA
DeleteFileA
MoveFileA
CopyFileA
MultiByteToWideChar
user32
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
LoadCursorA
SetCursor
MessageBeep
GetSystemMenu
AppendMenuA
GetClientRect
IsIconic
DrawIcon
GetSystemMetrics
LoadIconA
EnableWindow
SendMessageA
wsprintfA
MessageBoxA
UnregisterClassA
GetSysColorBrush
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
DestroyMenu
GetWindowThreadProcessId
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
ShowWindow
SetWindowTextA
IsDialogMessageA
GetSysColor
WinHelpA
gdi32
DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateFontA
GetDeviceCaps
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegEnumKeyA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA
DeleteService
StartServiceA
OpenSCManagerA
OpenServiceA
ControlService
CloseServiceHandle
CreateServiceA
RegDeleteValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueA
shell32
DragQueryFileA
SHGetPathFromIDListA
ShellExecuteA
SHBrowseForFolderA
SHGetMalloc
SHGetSpecialFolderLocation
ole32
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VariantInit
VariantChangeType
SysFreeString
SysAllocString
VariantClear
shlwapi
PathFindExtensionA
PathFindFileNameA
Sections
.text Size: 224KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 604KB - Virtual size: 601KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ