Static task
static1
Behavioral task
behavioral1
Sample
2024-01-09_02ad750bf61e2490797ae6dd3821c1a8_icedid.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-09_02ad750bf61e2490797ae6dd3821c1a8_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-09_02ad750bf61e2490797ae6dd3821c1a8_icedid
-
Size
1.4MB
-
MD5
02ad750bf61e2490797ae6dd3821c1a8
-
SHA1
8475a0ea57a030184bf01ac76aefead8e20e9b48
-
SHA256
cbd954dae3529ea9bc61f591762d183e2266aa4e8869e3a9888e74fa73507966
-
SHA512
c91558c9e39fbba69f3f870c0df71292fe863869315583d21c6939ac7253a14d66ae5eb783dc1fd02e1b62683539495ffe5167919fbcb33251884717c17d2dbc
-
SSDEEP
24576:/9L+M/NM6no4+rdoPQY1tySsOMVI5kZicz+p:QMFhn+oPz1tySsOpkZbS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-09_02ad750bf61e2490797ae6dd3821c1a8_icedid
Files
-
2024-01-09_02ad750bf61e2490797ae6dd3821c1a8_icedid.exe windows:4 windows x86 arch:x86
357bf2c6d3d9391a568d08fa3a63070a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
bmaframe
CreateBMAFramework
CreateXmlConfigParse
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
VirtualAlloc
FreeEnvironmentStringsA
GetStringTypeA
GetStringTypeW
GetCPInfo
CompareStringA
CompareStringW
GetDriveTypeA
GetACP
GetOEMCP
SetEnvironmentVariableA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
TerminateProcess
GetFileType
SetStdHandle
HeapFree
HeapAlloc
RaiseException
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RtlUnwind
ExitProcess
GetStartupInfoW
GetCurrentDirectoryW
FindResourceExW
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalFlags
SizeofResource
GlobalGetAtomNameW
GetDiskFreeSpaceW
InterlockedExchange
GetProfileStringA
GlobalAddAtomA
FindResourceA
SetFileTime
GetTempFileNameW
lstrcmpW
GlobalAlloc
lstrcmpA
lstrcmpiA
GetCurrentThread
MulDiv
GetShortPathNameW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
GetVolumeInformationW
LoadLibraryW
MoveFileW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
SetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageW
LocalFree
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetModuleHandleW
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceW
LoadResource
lstrcpynW
lstrcpyW
lstrcatW
IsBadReadPtr
IsBadWritePtr
GetModuleFileNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetFileTime
lstrlenA
FindNextFileW
CreateEventW
EnterCriticalSection
LeaveCriticalSection
ResetEvent
MultiByteToWideChar
Sleep
CreateThread
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
GetPrivateProfileSectionW
FindFirstFileW
FindClose
lstrlenW
SetEvent
GetVersion
GetPrivateProfileStringW
GetFileAttributesW
SetFileAttributesW
WritePrivateProfileStringW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
DeleteFileW
RemoveDirectoryW
GetTickCount
GetTempPathW
CreateDirectoryW
GetLastError
WriteFile
GetFileSize
ReadFile
CreateFileW
CloseHandle
GetModuleFileNameW
GetPrivateProfileIntW
IsBadCodePtr
user32
DestroyIcon
GetMenuStringW
DeleteMenu
InsertMenuW
LockWindowUpdate
GetDCEx
GetSysColorBrush
LoadCursorW
IsZoomed
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
TranslateAcceleratorW
LoadAcceleratorsW
LoadStringW
SetWindowContextHelpId
SetCursor
ShowOwnedPopups
PostQuitMessage
GetMessageW
ValidateRect
GetCursorPos
WindowFromPoint
SetRectEmpty
GrayStringW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
MapDialogRect
GetAsyncKeyState
CharUpperW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CharNextW
EnableMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
IsWindowVisible
GetTopWindow
MessageBoxW
IsChild
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
GetWindowTextLengthW
GetDlgCtrlID
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SetWindowLongW
SetWindowPos
RegisterWindowMessageW
CopyAcceleratorTableW
GetNextDlgGroupItem
SetParent
RegisterClipboardFormatW
CheckMenuItem
IntersectRect
SystemParametersInfoW
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
DrawIcon
GetDesktopWindow
PtInRect
GetMessagePos
ScreenToClient
GetCapture
ReleaseCapture
MapWindowPoints
OffsetRect
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
SetCapture
GetSystemMetrics
DrawFrameControl
DrawFocusRect
GetDC
ReleaseDC
GetWindow
GetClassNameW
LoadImageW
FrameRect
IsRectEmpty
GetWindowTextW
EnumWindows
PeekMessageW
SetMenu
GetKeyState
MessageBeep
TranslateMessage
DispatchMessageW
SetRect
GetCaretPos
keybd_event
UnregisterClassW
PostThreadMessageW
KillTimer
SetTimer
GetSysColor
CopyRect
InflateRect
UpdateWindow
PostMessageW
GetFocus
FillRect
GetClientRect
GetParent
DrawTextW
LoadBitmapW
GetWindowRect
EnableWindow
InvalidateRect
LoadIconW
SendMessageW
EndDeferWindowPos
gdi32
GetCharWidthW
GetMapMode
SetRectRgn
CombineRgn
DPtoLP
StretchDIBits
GetTextColor
GetBkColor
LPtoDP
GetTextExtentPointA
ExtTextOutA
CreateRectRgnIndirect
PatBlt
Escape
TextOutW
RectVisible
PtVisible
SelectClipRgn
CreatePatternBrush
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
CreateRectRgn
LineTo
MoveToEx
IntersectClipRect
CreateDIBitmap
GetObjectW
BitBlt
EnumFontFamiliesExW
CreateFontIndirectW
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetStockObject
RestoreDC
SaveDC
CreateBitmap
SetBkColor
GetClipBox
CreateFontW
CreateDIBSection
Rectangle
ExtTextOutW
CreatePen
GetTextMetricsW
CreateCompatibleBitmap
DeleteDC
GetTextExtentPoint32W
SetBkMode
SelectObject
SetTextColor
DeleteObject
CreateSolidBrush
CreateCompatibleDC
ExcludeClipRect
comdlg32
GetOpenFileNameW
GetFileTitleW
GetSaveFileNameW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegCloseKey
RegOpenKeyExW
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
RegQueryValueExW
RegOpenKeyW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
SetFileSecurityW
GetFileSecurityW
RegCreateKeyW
RegSetValueW
RegEnumValueW
shell32
DragQueryFileW
DragFinish
SHGetFileInfoW
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
ExtractIconW
comctl32
ImageList_Draw
ImageList_GetIconSize
ImageList_AddMasked
ImageList_DragLeave
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_EndDrag
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_Destroy
ImageList_Create
ImageList_BeginDrag
ord17
ImageList_DragMove
ImageList_LoadImageW
ImageList_DrawEx
oledlg
OleUIBusyW
ole32
CoFreeUnusedLibraries
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
OleFlushClipboard
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoUninitialize
OleUninitialize
OleInitialize
CoInitialize
CoCreateInstance
OleRun
OleIsCurrentClipboard
CoRegisterMessageFilter
CoRevokeClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
olepro32
ord253
oleaut32
SysStringLen
VariantInit
VariantClear
SysAllocString
SysFreeString
VariantChangeType
VariantCopy
SysAllocStringLen
VariantTimeToSystemTime
GetErrorInfo
Sections
.text Size: 432KB - Virtual size: 430KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 208KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 744KB - Virtual size: 781KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ