Static task
static1
Behavioral task
behavioral1
Sample
2024-01-11_5e06981d2cebcf108ce827ccef4d434d_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-11_5e06981d2cebcf108ce827ccef4d434d_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-11_5e06981d2cebcf108ce827ccef4d434d_icedid
-
Size
1.2MB
-
MD5
5e06981d2cebcf108ce827ccef4d434d
-
SHA1
a1edfdd18d7d59638a8ea3e15cb037c7d6584947
-
SHA256
879dbe1401d3dd7cf79672f8dc942d4d52595a82fb6cb959a5418d3cda7b899b
-
SHA512
727bcc178d93bee80dd1b997925b0a6db3fd6a1c33e68a82b001f0dfa17fadc72b5e46e66fbf4fd0dc6b12073a5fd1a2e7791d179923c1ea583df6f15eba6fdb
-
SSDEEP
24576:6kaQHfk5OL2D1GEyY+Ce1rAQkmCAEEgQC:vHhL2D15Ze1rA1AEEg5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-11_5e06981d2cebcf108ce827ccef4d434d_icedid
Files
-
2024-01-11_5e06981d2cebcf108ce827ccef4d434d_icedid.exe windows:4 windows x86 arch:x86
eff993921a8fe7f2f57c426072649639
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
transdll
DS_GetMediaTime
DS_Run
DS_HandleGraphEvent
FI_Convert
DS_MovieConvert
DS_GetMediaFormat
DS_Uninitialize
DS_CheckSoundDriver
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
kernel32
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
InterlockedIncrement
lstrlenA
SetErrorMode
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetDriveTypeW
RtlUnwind
HeapReAlloc
RaiseException
HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
TlsSetValue
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetCurrentDirectoryA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetDriveTypeA
CreateFileA
SetEnvironmentVariableA
TlsAlloc
InitializeCriticalSection
GlobalHandle
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
FindResourceExW
GlobalGetAtomNameW
InterlockedDecrement
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
GetVersionExW
GetModuleHandleA
GetCurrentProcessId
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetThreadLocale
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
FormatMessageW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetVersionExA
VirtualProtect
LoadLibraryA
lstrlenW
lstrcpyW
FreeLibrary
GetProcAddress
GetModuleHandleW
LoadLibraryW
SetLastError
FileTimeToSystemTime
SystemTimeToFileTime
GetLocalTime
lstrcpynW
ReadFile
GetFileSize
GlobalReAlloc
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
WritePrivateProfileStringW
GetFullPathNameW
MulDiv
WideCharToMultiByte
MultiByteToWideChar
DeleteFileW
CreateFileW
LocalFree
LocalAlloc
GetSystemDirectoryW
Sleep
GetDiskFreeSpaceExW
SetCurrentDirectoryW
CloseHandle
GetLastError
CreateSemaphoreW
GetUserDefaultLangID
FindClose
FindNextFileW
GetPrivateProfileStringW
GetPrivateProfileIntW
FindFirstFileW
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
SizeofResource
FreeEnvironmentStringsA
user32
CharNextW
CopyAcceleratorTableW
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassW
RegisterClipboardFormatW
PostThreadMessageW
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
BringWindowToTop
SetMenu
TranslateAcceleratorW
SetRectEmpty
SystemParametersInfoW
DestroyMenu
InflateRect
EndPaint
BeginPaint
GetWindowDC
FillRect
ShowOwnedPopups
SetCursor
GetWindowThreadProcessId
GetMessageW
TranslateMessage
ValidateRect
CharUpperW
SetWindowContextHelpId
PostQuitMessage
MoveWindow
IsDialogMessageW
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
GetWindowTextLengthW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetScrollRange
GetScrollPos
GetMenu
GetMenuItemID
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
GetScrollInfo
DefWindowProcW
CallWindowProcW
SetWindowLongW
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetActiveWindow
MapDialogRect
SetWindowPos
GetAsyncKeyState
GetFocus
SetFocus
GetWindowLongW
GetDlgItem
IsWindowEnabled
SetWindowTextW
GetDlgCtrlID
GetMenuItemCount
SetMenuItemInfoW
GetMenuItemInfoW
EnumChildWindows
CheckMenuRadioItem
GetMenuStringW
GetKeyState
OffsetRect
DestroyIcon
GetSysColor
GetIconInfo
GetSysColorBrush
EqualRect
IsWindowVisible
LoadCursorW
UpdateWindow
TabbedTextOutW
DrawTextExW
GrayStringW
LoadBitmapW
ReleaseDC
LoadImageW
CopyRect
SetRect
SetWindowRgn
PtInRect
ReleaseCapture
WindowFromPoint
ClientToScreen
SetCapture
GetCapture
GetParent
GetActiveWindow
DrawTextW
InvalidateRect
GetDC
GetSubMenu
LoadMenuW
GetCursorPos
RemovePropW
SetPropW
KillTimer
SetTimer
GetWindowRect
EnableMenuItem
DrawIcon
GetClientRect
GetSystemMetrics
GetSystemMenu
LoadIconW
GetLastActivePopup
SetForegroundWindow
GetWindowTextW
ShowWindow
IsIconic
GetPropW
IsWindow
GetDesktopWindow
GetWindow
MessageBoxW
PostMessageW
EnableWindow
SendMessageW
DeferWindowPos
UnregisterClassA
gdi32
ExtSelectClipRgn
CreatePatternBrush
CreatePen
CreateSolidBrush
ScaleViewportExtEx
GetMapMode
EnumFontFamiliesExW
GetBkColor
GetRgnBox
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
CombineRgn
ExtCreateRegion
DeleteObject
GetDeviceCaps
CreateCompatibleBitmap
CreateDIBSection
BitBlt
SelectObject
CreateCompatibleDC
GetTextExtentPoint32W
MoveToEx
LineTo
CreateFontIndirectW
GetStockObject
GetTextColor
GetObjectW
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateICW
CreateDIBitmap
GetBitmapBits
SetPixel
CreateBitmapIndirect
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
StretchBlt
GetPixel
DeleteDC
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
advapi32
RegEnumKeyW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyExW
RegDeleteKeyW
RegOpenKeyW
RegOpenKeyExA
RegQueryValueExA
shell32
SHCreateDirectoryExW
DragQueryFileW
DragFinish
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderW
SHGetPathFromIDListW
ExtractIconW
comctl32
InitializeFlatSB
InitCommonControlsEx
FlatSB_EnableScrollBar
shlwapi
PathIsUNCW
PathFindFileNameW
PathStripToRootW
PathFindExtensionW
oledlg
OleUIBusyW
ole32
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
oleaut32
SysAllocString
OleCreateFontIndirect
VariantClear
SysStringLen
OleLoadPicture
SysAllocStringLen
VariantChangeType
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantInit
VariantCopy
Sections
.text Size: 472KB - Virtual size: 470KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 640KB - Virtual size: 639KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ