Static task
static1
Behavioral task
behavioral1
Sample
2024-01-08_72d34157a25a406eb31f694497c8634f_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-08_72d34157a25a406eb31f694497c8634f_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-08_72d34157a25a406eb31f694497c8634f_icedid
-
Size
240KB
-
MD5
72d34157a25a406eb31f694497c8634f
-
SHA1
88fb417b48bc2f691553a3762bce2cefb1f48ee7
-
SHA256
8080be2c51eb88c92479fb67a215d5b11dd851fe46f4a39864ad7c6916544c07
-
SHA512
617495b54dce306c9dfcc15c424e9debbd736a8aac25f646ba73fab269e1d06af8e124fb329045b37e36845941c7ff17b173a4c0dacb48df32ec70bd80acebe0
-
SSDEEP
3072:ks+7sczYjHP0z22z0v9HmE26XlwWSDRl8kfFyvbUDfXT/KA7TGu2TtTJq:kLNzV0vHtWWSDnJfFyv4n/KHzq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-08_72d34157a25a406eb31f694497c8634f_icedid
Files
-
2024-01-08_72d34157a25a406eb31f694497c8634f_icedid.exe windows:4 windows x86 arch:x86
b7d01cd8218ce2c115da2f3dc4966277
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
connect
htons
socket
gethostbyname
recv
WSACleanup
setsockopt
WSAStartup
accept
listen
bind
send
WSAGetLastError
closesocket
kernel32
ReleaseSemaphore
CreateSemaphoreA
TerminateThread
SetLastError
GlobalUnlock
GlobalLock
GlobalSize
GlobalFree
LoadLibraryA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
GetThreadLocale
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
OutputDebugStringA
GetFullPathNameA
CreateFileA
GetProcAddress
GlobalReAlloc
lstrcmpA
lstrcmpW
lstrcpyW
lstrcpyA
GetCurrentProcessId
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetModuleHandleA
InterlockedDecrement
FreeLibrary
InterlockedIncrement
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
GlobalGetAtomNameA
GlobalFlags
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GetCPInfo
GetOEMCP
GetLocaleInfoA
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
VirtualAlloc
GetSystemTimeAsFileTime
ExitProcess
GetLocalTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCommandLineA
GetProcessHeap
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetACP
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetEvent
CreateEventA
CreateThread
SetConsoleCtrlHandler
FormatMessageA
LocalFree
FindResourceA
LoadResource
LockResource
SizeofResource
GetSystemDirectoryA
GetPrivateProfileIntA
CreateMutexA
WaitForSingleObject
GetTimeZoneInformation
GlobalAlloc
GetPrivateProfileStringA
WritePrivateProfileStringA
ReleaseMutex
CloseHandle
GetCurrentThreadId
lstrlenA
CompareStringW
CompareStringA
lstrlenW
Sleep
GetModuleFileNameA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
GetVolumeInformationA
user32
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
DestroyMenu
PostQuitMessage
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
ModifyMenuA
GetClientRect
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetFocus
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
UnregisterClassA
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
GetKeyState
PeekMessageA
ValidateRect
GetWindowTextA
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadCursorA
GetDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
GetDesktopWindow
EnableWindow
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
EnableMenuItem
CheckMenuItem
wvsprintfA
wsprintfA
CharUpperA
ReleaseDC
advapi32
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
OpenServiceA
ControlService
QueryServiceStatus
DeleteService
OpenSCManagerA
CreateServiceA
CloseServiceHandle
SetServiceStatus
RegisterEventSourceA
ReportEventA
DeregisterEventSource
shlwapi
PathFindFileNameA
PathStripToRootA
PathIsUNCA
oleacc
CreateStdAccessibleObject
LresultFromObject
odbc32
ord45
ord5
ord51
ord50
ord44
ord68
ord43
ord59
ord72
ord4
ord17
ord41
ord10
ord2
ord1
ord15
ord9
ord14
ord3
ord16
ord20
ord8
ord48
ord49
ord11
ord19
ord12
ord46
ord18
ord13
gdi32
GetClipBox
SetMapMode
GetStockObject
SetTextColor
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
DeleteObject
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreateBitmap
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
comdlg32
GetFileTitleA
oleaut32
VariantChangeType
VariantClear
VariantInit
Sections
.text Size: 176KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ