Static task
static1
Behavioral task
behavioral1
Sample
2024-01-09_47c5c181020effd9980093b21ae91c3a_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-09_47c5c181020effd9980093b21ae91c3a_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-09_47c5c181020effd9980093b21ae91c3a_icedid
-
Size
320KB
-
MD5
47c5c181020effd9980093b21ae91c3a
-
SHA1
c2ae34e0b4b09bd2c747bfeae36c634c7554c921
-
SHA256
4d5d8a6b1c7d081c61ebf738b647cbd2b6d1c1aac9723623c31b76f5bb6dc873
-
SHA512
5da76c8509040c3f52a5193020160e71c9f52ffe241d156adb49cf672e6c8ddc79f1156335cd5b2c4079ec32ea6a28dfa6140115091bbe725c0f457e4dfcc022
-
SSDEEP
3072:j1GrHx8gCyzxBw467ZSPqzeh+mLhQkHePuPecC0lem3QO6tBBM0JMMV3eQJW+HxS:W8Vyz167tmL2cemm5XoQOMA5M768zs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-09_47c5c181020effd9980093b21ae91c3a_icedid
Files
-
2024-01-09_47c5c181020effd9980093b21ae91c3a_icedid.exe windows:4 windows x86 arch:x86
e8cef26b5cb0c1832376adb330cc4584
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
HeapSize
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
IsBadWritePtr
GetTimeZoneInformation
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
ExitProcess
RtlUnwind
GetStartupInfoW
GetFileTime
FileTimeToLocalFileTime
SetErrorMode
GetShortPathNameW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringW
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalFlags
EnterCriticalSection
LeaveCriticalSection
GlobalFindAtomW
GetModuleHandleA
LoadLibraryA
lstrcatW
GetVersionExA
GetLastError
SetLastError
MulDiv
GetTickCount
GlobalUnlock
GlobalFree
FreeResource
CloseHandle
GlobalAddAtomW
lstrlenW
GetCurrentThread
GetCurrentThreadId
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
WideCharToMultiByte
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcpyW
lstrcpynW
lstrlenA
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
LoadLibraryW
GetLocaleInfoW
GetFileAttributesW
FormatMessageW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetUnhandledExceptionFilter
LocalFree
user32
DestroyMenu
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
CopyAcceleratorTableW
SetRect
IsRectEmpty
CharNextW
PostThreadMessageW
CharUpperW
ReleaseCapture
SetCapture
DestroyIcon
LoadCursorW
GetSysColorBrush
WindowFromPoint
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageA
IsChild
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
AdjustWindowRectEx
ScreenToClient
EqualRect
GetClassInfoW
RegisterClassW
DefWindowProcW
CallWindowProcW
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindowTextLengthW
GetWindowTextW
SetFocus
ShowWindow
MoveWindow
SetWindowLongW
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBoxW
GetLastActivePopup
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
RegisterClipboardFormatW
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
SetForegroundWindow
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
PostMessageW
UnhookWindowsHookEx
SetMenuItemBitmaps
GetParent
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
UnregisterClassW
wsprintfW
GetDlgCtrlID
GetSystemMetrics
LoadIconW
EnableWindow
GetFocus
GetClientRect
IsIconic
SendMessageW
DrawIcon
LoadBitmapW
GetSysColor
gdi32
CreateSolidBrush
CreateRectRgnIndirect
GetBkColor
GetTextColor
GetRgnBox
GetMapMode
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
Escape
GetStockObject
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateBitmap
SetMapMode
RestoreDC
SaveDC
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
SelectObject
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegQueryValueExW
RegOpenKeyW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyW
RegQueryValueW
RegSetValueW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
shell32
ExtractIconW
ShellExecuteW
comctl32
ord17
ImageList_Destroy
shlwapi
PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW
oledlg
OleUIBusyW
ole32
CoTaskMemAlloc
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
StringFromCLSID
CoTaskMemFree
CoRevokeClassObject
CoRegisterClassObject
CoCreateInstance
CoDisconnectObject
CoGetClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
CLSIDFromString
OleIsCurrentClipboard
oleaut32
OleCreateFontIndirect
LoadTypeLi
SystemTimeToVariantTime
SafeArrayDestroy
SysStringLen
VariantInit
SysAllocString
VariantChangeType
VariantCopy
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
Sections
.text Size: 192KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ