Static task
static1
Behavioral task
behavioral1
Sample
2024-01-11_52c22f8ba4d18f10d40bcf72b5b0b32f_icedid.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-11_52c22f8ba4d18f10d40bcf72b5b0b32f_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-11_52c22f8ba4d18f10d40bcf72b5b0b32f_icedid
-
Size
384KB
-
MD5
52c22f8ba4d18f10d40bcf72b5b0b32f
-
SHA1
1164d837f7bb3b7069c584e65c5e33c9899530a5
-
SHA256
ceafcbd9c254eec5babb1d80212b6e11d2645e4be642edca91c7e6932bc8c4fd
-
SHA512
35e27f3244ad2aeed4cdffcd88ee634f68f28db98d0bf3a5783edaecaa20f9120bb862c1962b3041d25fc5770f238686bf3852580b8ec81e50910064d48e97bb
-
SSDEEP
6144:YZRQvVvinOyv7pIoq4gbzVaOQe+g4+Y8qI9BgTBhZHKuM5P:FvVve5NIag/VHQlLmWTrZHKuM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-11_52c22f8ba4d18f10d40bcf72b5b0b32f_icedid
Files
-
2024-01-11_52c22f8ba4d18f10d40bcf72b5b0b32f_icedid.exe windows:4 windows x86 arch:x86
c2df0504fd31c6f6afd83f91d8ef8e1c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
SetStdHandle
GetFileType
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapSize
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
IsBadWritePtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetOEMCP
GetCPInfo
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
IsBadReadPtr
RtlUnwind
GetStartupInfoW
GetFileTime
GetFileAttributesW
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetCurrentDirectoryW
WritePrivateProfileStringW
GlobalFlags
InterlockedDecrement
GlobalGetAtomNameW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
CloseHandle
GlobalAddAtomW
GlobalFindAtomW
lstrlenA
GetModuleHandleA
LoadLibraryA
lstrcatW
GetVersionExA
SetLastError
MulDiv
FormatMessageW
lstrcpynW
LocalFree
lstrlenW
GetCurrentThread
GetCurrentThreadId
lstrcmpW
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
WideCharToMultiByte
lstrcmpA
lstrcmpiA
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcpyW
LoadLibraryW
GetLocaleInfoW
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
DeleteFileW
GetTempPathW
CreateDirectoryW
GetLastError
MultiByteToWideChar
Beep
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
LCMapStringW
InterlockedExchange
user32
GetMenuItemInfoW
InflateRect
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
FillRect
GetDC
ReleaseDC
IsZoomed
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
LoadMenuW
DestroyMenu
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
CharUpperW
wsprintfW
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
ShowOwnedPopups
SetCursor
SetMenuItemBitmaps
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
ShowWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
GetFocus
SetFocus
IsChild
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconW
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
SetScrollInfo
GetClassInfoW
RegisterClassW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
GetMenuState
LockWindowUpdate
GetDCEx
WindowFromPoint
AppendMenuW
GetMenuItemID
GetMenuItemCount
GetSubMenu
PostMessageW
PostQuitMessage
GetDesktopWindow
GetActiveWindow
SetActiveWindow
GetPropW
SystemParametersInfoW
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
SendMessageW
EndDialog
UnregisterClassW
GetClientRect
DrawTextW
SetRect
MessageBoxW
ReleaseCapture
LoadCursorW
SetCapture
KillTimer
SetTimer
InvalidateRect
EnableWindow
UpdateWindow
GetWindowTextW
gdi32
ExtSelectClipRgn
CreatePatternBrush
GetStockObject
MoveToEx
CreateFontIndirectW
PatBlt
SetRectRgn
CombineRgn
GetBkColor
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateFontW
GetCharWidthW
DeleteObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
SelectClipRgn
DPtoLP
StretchDIBits
DeleteDC
GetTextMetricsW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateSolidBrush
CreatePen
GetTextExtentPoint32W
GetClipRgn
SelectObject
CreateRectRgnIndirect
CreateRectRgn
ExtTextOutW
Rectangle
comdlg32
GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
shell32
DragFinish
DragQueryFileW
comctl32
ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy
shlwapi
PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
oleaut32
VariantChangeType
SysAllocString
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
Sections
.text Size: 264KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ