Static task
static1
Behavioral task
behavioral1
Sample
2024-01-11_9e2df75b580c3c3c392c4cc53260ab6b_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-11_9e2df75b580c3c3c392c4cc53260ab6b_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-11_9e2df75b580c3c3c392c4cc53260ab6b_icedid
-
Size
2.3MB
-
MD5
9e2df75b580c3c3c392c4cc53260ab6b
-
SHA1
9a0a095a7335470ba8b594d519f42490b9a4a356
-
SHA256
677b783b851c0f1ada35468fb9c458f0b4b0a293474c1c5d21c0990d2ee41dc9
-
SHA512
3c8549e6b08c503c8d63e9e502a46e501933393c2bc10a5d9af3baef92811442b0301247bcdd360de8ebd786fe9c08d0ebf01d0af0be2281e0b44ada9025ff4d
-
SSDEEP
49152:1MfnjeFAVEpq8Ndy3yXpVYXk6PoTJqYiuQ6F9BD:KfjDqpqu83yXpVYXk6PoTJqYJQ6F9B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-11_9e2df75b580c3c3c392c4cc53260ab6b_icedid
Files
-
2024-01-11_9e2df75b580c3c3c392c4cc53260ab6b_icedid.exe windows:6 windows x86 arch:x86
f74b6ed17f85331009d86522f0637c8e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
usp10
ScriptGetCMap
kernel32
LCMapStringW
ExitProcess
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
VirtualQuery
GetTimeZoneInformation
GetSystemInfo
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
GetConsoleCP
GetConsoleMode
VirtualAlloc
WriteConsoleW
LoadResource
LockResource
SizeofResource
FindResourceW
GetThreadLocale
CloseHandle
GetLastError
WaitForSingleObject
SetFilePointerEx
GetExitCodeProcess
MulDiv
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
OutputDebugStringW
CreateMutexW
GetModuleFileNameW
LoadLibraryA
LocalFree
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
SetThreadLocale
SetThreadUILanguage
CreateFileW
GetFileSize
ReadFile
WriteFile
GlobalAlloc
GlobalUnlock
GlobalLock
GetModuleHandleW
GetProcAddress
GetUserDefaultLangID
GetSystemDirectoryW
CompareStringW
Sleep
GetCurrentThreadId
OpenProcess
LoadLibraryW
DecodePointer
RaiseException
HeapAlloc
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
HeapReAlloc
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
HeapFree
HeapSize
GetProcessHeap
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SearchPathW
GetProfileIntW
GetTempPathW
SetErrorMode
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
SystemTimeToTzSpecificLocalTime
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
GetStringTypeExW
MoveFileW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetShortPathNameW
FlushFileBuffers
DeleteFileW
GetCurrentDirectoryW
lstrcpyW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
FileTimeToSystemTime
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
VirtualProtect
lstrcmpiW
LocalUnlock
LocalLock
LocalAlloc
GetTickCount
SystemTimeToFileTime
ReplaceFileW
SetFileTime
GetTempFileNameW
GetFullPathNameW
GetFileTime
GetDiskFreeSpaceW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
GetVersionExW
GetCurrentThread
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
SetEvent
GlobalGetAtomNameW
GetCurrentProcessId
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleA
FreeResource
FreeLibrary
EncodePointer
OutputDebugStringA
CopyFileW
GlobalFree
GlobalSize
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
user32
EnableScrollBar
GetIconInfo
DrawIconEx
DrawFocusRect
GetMenuDefaultItem
LockWindowUpdate
GetDCEx
GetNextDlgGroupItem
PostThreadMessageW
CharUpperW
TrackMouseEvent
UnionRect
InvalidateRgn
CopyAcceleratorTableW
RealChildWindowFromPoint
CopyImage
GetSysColorBrush
SetCursorPos
IsZoomed
SetParent
DeleteMenu
GetSystemMenu
MapVirtualKeyW
GetKeyNameTextW
IsRectEmpty
SetWindowRgn
DrawIcon
DestroyCursor
MessageBeep
GetTabbedTextExtentW
SystemParametersInfoW
GetSystemMetrics
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatW
ShowOwnedPopups
PostQuitMessage
GetMessageW
SendDlgItemMessageA
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
FillRect
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
WindowFromPoint
ReuseDDElParam
UnpackDDElParam
DestroyMenu
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
GetActiveWindow
BringWindowToTop
IntersectRect
HideCaret
SetWindowTextW
IsWindowEnabled
CheckDlgButton
SetDlgItemTextW
MoveWindow
OffsetRect
CharNextW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
GetWindowLongW
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
RemovePropW
GetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
IsMenu
GetClassInfoExW
RegisterWindowMessageW
SetTimer
KillTimer
RedrawWindow
ValidateRect
EndPaint
BeginPaint
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetFocus
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
InvertRect
NotifyWinEvent
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongW
DrawStateW
DrawEdge
DrawFrameControl
CopyIcon
WaitMessage
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
GetDoubleClickTime
ModifyMenuW
CharUpperBuffW
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
GetWindowRgn
IsDialogMessageW
GetClientRect
GetParent
EnableWindow
TranslateMessage
DispatchMessageW
PeekMessageW
SendMessageW
ShowWindow
IsWindowVisible
GetDlgItem
IsWindow
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
SetCursor
ClientToScreen
PtInRect
LoadCursorW
DestroyIcon
LoadImageW
GetDC
ReleaseDC
PostMessageW
UpdateWindow
MessageBoxW
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetSubMenu
GetCaretPos
SetCapture
ReleaseCapture
InvalidateRect
GetSysColor
SetRect
SetRectEmpty
SendDlgItemMessageW
SetForegroundWindow
FrameRect
InflateRect
GetDesktopWindow
IsChild
FindWindowW
ActivateKeyboardLayout
GetKeyboardLayoutList
AttachThreadInput
WaitForInputIdle
IsIconic
GetKeyState
GetAsyncKeyState
keybd_event
LoadMenuW
CreateMenu
CheckMenuItem
EnableMenuItem
GetMenuItemID
GetMenuItemCount
InsertMenuW
RemoveMenu
InsertMenuItemW
GetMenuItemInfoW
SetMenuDefaultItem
SetActiveWindow
GetForegroundWindow
SetPropW
GetCursorPos
GetWindowThreadProcessId
LoadBitmapW
LoadIconW
UnregisterClassW
GetMenuStringW
GetMenuState
AppendMenuW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoW
CreateWindowExW
gdi32
ExtTextOutW
CreateDIBSection
CopyMetaFileW
CreateDCW
SetTextColor
GetTextColor
CreateBitmap
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
Escape
ExcludeClipRect
GetClipBox
GetCurrentPositionEx
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
StartDocW
MoveToEx
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetBkColor
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetCharWidthW
GetTextMetricsW
CombineRgn
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetViewportOrgEx
Rectangle
CreateEllipticRgn
Ellipse
LPtoDP
CreateFontW
StretchDIBits
GetRgnBox
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetWindowOrgEx
GetTextFaceW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetBkColor
CreateCompatibleBitmap
BitBlt
SetLayout
SelectObject
GetTextExtentPointI
GetTextExtentPoint32W
GetCurrentObject
DeleteDC
CreateCompatibleDC
RemoveFontResourceW
AddFontResourceW
CreateFontIndirectW
DeleteObject
GetStockObject
GetObjectW
GetDeviceCaps
SetWindowExtEx
GetCharacterPlacementW
DPtoLP
msimg32
TransparentBlt
AlphaBlend
winspool.drv
DocumentPropertiesW
ClosePrinter
GetJobW
OpenPrinterW
advapi32
RegEnumKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
RegEnumValueW
SetFileSecurityW
GetFileSecurityW
RegQueryValueW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegSetValueW
RegSetValueExW
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
Shell_NotifyIconW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
DragQueryFileW
DragFinish
SHAddToRecentDocs
ExtractIconW
SHGetFileInfoW
SHGetSpecialFolderLocation
ShellExecuteW
SHAppBarMessage
ShellExecuteExW
comctl32
ImageList_AddMasked
ImageList_GetIconSize
ord17
shlwapi
StrCpyNW
PathAppendW
PathFindFileNameW
PathIsDirectoryW
PathIsRootW
PathMatchSpecW
PathRemoveExtensionW
PathFileExistsW
PathAddBackslashW
PathCanonicalizeW
PathFindExtensionW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
StrCpyW
uxtheme
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
GetThemeColor
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed
ole32
RevokeDragDrop
CreateStreamOnHGlobal
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
OleInitialize
CoLockObjectExternal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitializeEx
OleUninitialize
CoFreeUnusedLibraries
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
OleRun
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleLockRunning
DoDragDrop
RegisterDragDrop
oleaut32
VariantInit
VariantClear
VariantCopy
VariantChangeType
OleCreateFontIndirect
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VarBstrFromDate
SysAllocStringLen
SysAllocString
SysFreeString
GetErrorInfo
oledlg
OleUIBusyW
urlmon
CoInternetSetFeatureEnabled
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundW
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 388KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ