Static task
static1
Behavioral task
behavioral1
Sample
2024-01-23_1a8f4b8049039594d95589b7cd9075b0_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-23_1a8f4b8049039594d95589b7cd9075b0_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-23_1a8f4b8049039594d95589b7cd9075b0_icedid
-
Size
1.7MB
-
MD5
1a8f4b8049039594d95589b7cd9075b0
-
SHA1
63a27d25bdb06065071f6699b08f1abf5a0672c5
-
SHA256
5bf807f0a2302b848de021d314730bc571e68f71ee1d190ecfd854dd51cabdb7
-
SHA512
494fb90ff1aacc25cea29351bc62148382cc94091d975c5f1cd4ce5f7d875b8f0ff89cb4073b2a6d695034efb11001136d43c02e6e01239ac83d2a758633594b
-
SSDEEP
24576:xdOeWWS1R2JQuUP0DCypK6N/ss2p8S3iRK0qiDsiVI8SP1k8vkoOEHbEOzsh1:hc1R2ua/Nks2XpP1kiHW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-23_1a8f4b8049039594d95589b7cd9075b0_icedid
Files
-
2024-01-23_1a8f4b8049039594d95589b7cd9075b0_icedid.exe windows:5 windows x86 arch:x86
38d414239c83486b99c2849d94dc4e20
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mp_api
_StartTxPacket@52
_Asc2Hex@4
_TransData@4
_QueryEfuseUsage@8
_ReadFCW_92D_EFUSE_TYPE@16
_QueryFlashWlanNum@8
_ReadFCW_96CD@44
_ReadFCW_6dB_13dB@44
_ReadMACAddress_New@16
_ReadRegionDomain@12
_ReadThermalTSSI@12
_WriteFCW_96C@28
_WriteDiff_96C@20
_WriteDiff_96CD_2G_6dB@20
_WriteFCW_96CD_2G_6dB@24
_WriteDiff_96CD@24
_WriteFCW_96CD@32
_WriteFCW_92D_EFUSE_TYPE@16
_WriteThermalTSSI@12
_WriteRegionDomain@12
_WriteMACAddress_New@16
_FlashRead@16
_FlashWrite@16
_ReadXCAP@12
_WriteXCAP@12
_ReadEfuseMACAddress_88e@12
_ReadXCAP_Efuse@12
_ReadThermalTSSI_Efuse@12
_ReadFCW_96C_Efuse_2G@40
_ReadFCW_88E_Efuse@24
_ReadFCW_96C_Efuse_5G@40
_WriteFCW_88E_Efuse@20
_WriteXCAP_Efuse@12
_WriteThermalTSSI_Efuse@12
_WriteEfuseMACAddress@12
_WriteFCW_96C_Efuse_Sync@8
_ReadDiff_AC_D@44
_ReadDiff_AC_D_3SS@64
_ReadFCW_HT40_1S_D@20
_ReadFCW_HT40_1S_D_3SS@24
_ReadPowerCCK@16
_ReadPowerCCK_3SS@20
_ReadXCAP2@12
_ReadThermal2@12
_ReadPAType@12
_RegisterWrite@16
_RegisterRead@16
_EnableTestLog@8
_SetPMacPacketTx@12
_DoLCK@8
_DoIQK@8
_StartDIG@8
_WriteRegBBRF@24
_SetRFEType@12
_SetRegDomain@12
_ReadReg@20
_SetPAType_8881A@12
_SetPAType@12
_ReadTargetPower@12
_WriteTargetPower@12
_SetTRxS@12
_StopDIG@8
_ReadFCW_96C_Efuse@40
_ReadFCW_HT40_1S_Path@20
_ReadDiff_AC_Path@48
_ReadPowerCCK_Path@16
_QueryTHER_D@12
_TxPowerTrack_D@12
_WriteWLAN_XCAP_XCAP_Dynaic@12
_SetBandwidth@16
_ReadHW_ANTDIV_STATUS@12
_SetMode_8881A@12
_SetMode@12
_QueryCurrentStatus_D@24
_QueryRxStatus_MACPHY@24
_ResetPacketCount_D@8
_ResetRxCount_MACPHY@8
_SetTxPower_8814@40
_SetTxPower@32
_SetDataRate@20
_SetChannel@20
_SetAntennaDiv@12
_SetAntenna@24
_StopRxPacket_D@8
_QueryCorrectRxPacket@12
_QueryCorrectRxPacket_D@16
_StartTxPacket_8814@60
_HexToBin@12
_StartRxPacket@36
_StartTxContPacket_8814@56
_StartTxContPacket@48
_StartContinuousTx_8814@52
_StartContinuousTx@44
_StartCarrierSuppressionTx_8814@52
_StartCarrierSuppressionTx@44
_OpenDUT@4
_ReadHW_CHIP@12
_Check_EFUSE_TYPE_Support@4
_SetHW_EFUSE_TYPE@16
_ReadHW_ANTDIV_TYPE@12
_SetHW_RF_MAC@12
_ReadRegBBRF@24
_QueryTxPacket_TSSI@12
_QueryTxPacket_TSSI_D@16
_StopTxPacket_D@8
_ReadHW_RF_D@12
_SetHW_RF_BandSelect@12
_OpenDualIf@8
_QueryMPVersion@8
_TxPowerTrackOFF_D@12
_ReadPowerHT40_1S@16
_QueryRFEType@12
_QueryPAType@12
_QueryPAType_8881A@12
_StopTest@4
_CloseDUT@4
_WriteFCW_92CD_Efuse_Sync@8
_WriteEfuseFCW_HT40_1S_D@20
_WriteEfuseDiff_AC_D@44
_ReadEfuseMACAddress@12
_ReadFCWEfuse_HT40_1S_D@20
_ReadEfuseDiff_AC_D@44
_WritePAType@12
_WriteThermal2@12
_WriteXCAP2@12
_WritePowerCCK_3SS@20
_WritePowerCCK@16
_WriteFCW_HT40_1S_D_3SS@24
_WriteFCW_HT40_1S_D@20
_WriteDiff_AC_D_3SS@64
_WriteDiff_AC_D@44
kernel32
GetFileSize
MoveFileA
DeleteFileA
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
lstrcmpiA
GetShortPathNameA
GetFileAttributesA
GetFileSizeEx
GetFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetCurrentDirectoryA
GetTempFileNameA
GetDiskFreeSpaceA
RtlUnwind
IsDebuggerPresent
RaiseException
DebugBreak
GetCommandLineA
GetStartupInfoA
HeapValidate
IsBadReadPtr
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
ExitProcess
ExitThread
GetStdHandle
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FatalAppExitA
SetConsoleCtrlHandler
LoadLibraryW
GetACP
IsValidCodePage
HeapFree
HeapAlloc
GetProcessHeap
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
VirtualFree
HeapSize
HeapReAlloc
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
GetTimeZoneInformation
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
FileTimeToLocalFileTime
OpenEventA
CreateFileA
GetCurrentProcess
DuplicateHandle
GetHandleInformation
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
GetModuleHandleW
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
GetOEMCP
GetCPInfo
GlobalFlags
GetProfileIntA
SetErrorMode
FindResourceExA
InterlockedDecrement
GetModuleFileNameW
GetAtomNameA
CreateEventA
SetEvent
WaitForSingleObject
InterlockedExchange
lstrcmpA
GetCurrentThread
GetLocaleInfoA
ConvertDefaultLocale
EnumResourceLanguagesA
GetCurrentProcessId
MulDiv
lstrlenW
CopyFileA
GlobalSize
FormatMessageA
LocalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrlenA
CompareStringA
MultiByteToWideChar
lstrcmpW
FreeLibrary
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
FreeResource
SuspendThread
ResumeThread
GetThreadPriority
SetThreadPriority
GetModuleHandleA
LoadLibraryA
GetProcAddress
SetLastError
GlobalAlloc
VirtualProtect
GetLastError
GlobalLock
GlobalUnlock
GlobalFree
GetModuleFileNameA
CreateThread
Sleep
CloseHandle
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
LocalAlloc
user32
DestroyMenu
MapVirtualKeyA
GetKeyNameTextA
GetDialogBaseUnits
SetCursor
GetCursorPos
GetMessageA
TranslateMessage
PostQuitMessage
GetWindowThreadProcessId
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectA
LoadMenuA
ModifyMenuA
InsertMenuItemA
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
DeleteMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringA
GetTabbedTextExtentA
DrawTextExA
DrawTextA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
RemoveMenu
IsMenu
GetMenuItemCount
GetSubMenu
GetMenuState
GetMenuStringA
AppendMenuA
InsertMenuA
GetMenuItemID
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
SetDlgItemInt
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetMenuCheckMarkDimensions
LoadBitmapA
SetMenuItemBitmaps
RegisterWindowMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
SendDlgItemMessageA
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
WinHelpA
TrackPopupMenuEx
SetRectEmpty
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetKeyState
GetDlgCtrlID
CallNextHookEx
GetClassLongA
GetClassNameA
UnhookWindowsHookEx
CallWindowProcA
DefWindowProcA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
EndDialog
CreateDialogIndirectParamA
DestroyWindow
TabbedTextOutA
OpenIcon
CloseWindow
LoadIconA
LoadCursorA
PostThreadMessageA
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
IsChild
GetLastActivePopup
GetWindow
GetTopWindow
FindWindowExA
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
GetSysColor
EnableWindow
GetDlgItem
SetDlgItemTextA
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
GetDesktopWindow
SetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
ReleaseCapture
GetClipboardFormatNameA
UnpackDDElParam
LoadAcceleratorsA
TranslateAcceleratorA
ReuseDDElParam
GetMenuBarInfo
CharUpperA
WaitMessage
DestroyIcon
UnregisterClassA
TrackPopupMenu
GetDlgItemTextA
IsDlgButtonChecked
SetWindowLongA
MsgWaitForMultipleObjects
IsWindowUnicode
GetMessageW
DispatchMessageW
SubtractRect
UnionRect
InflateRect
SetRect
PtInRect
IsRectEmpty
IsWindow
IsWindowEnabled
GetParent
SetFocus
GetFocus
GetWindowLongA
GetAsyncKeyState
RemovePropA
SendMessageA
GetPropA
SetActiveWindow
IsWindowVisible
ValidateRgn
ValidateRect
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ScreenToClient
ClientToScreen
MapWindowPoints
GetClientRect
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
IsIconic
HiliteMenuItem
GetSystemMenu
DrawMenuBar
DragDetect
GetWindowRect
MapDialogRect
SetWindowPos
ShowWindow
PostMessageA
SetPropA
GetCapture
GetActiveWindow
SetWindowsHookExA
gdi32
CreateFontIndirectA
CreateDIBPatternBrushPt
CreatePatternBrush
CreateBrushIndirect
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePenIndirect
CreatePen
GetObjectType
UnrealizeObject
GetStockObject
GetDeviceCaps
CreateDCA
CopyMetaFileA
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
ExtTextOutA
CloseEnhMetaFile
CreateEnhMetaFileA
CloseMetaFile
CreateMetaFileA
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateICA
CreateCompatibleDC
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
SelectObject
GetNearestColor
RealizePalette
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetGraphicsMode
GetWorldTransform
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
CreateFontA
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
FloodFill
ExtFloodFill
TextOutA
GetTextExtentPoint32A
GetTextAlign
GetTextFaceA
SetBitmapBits
GetTextCharacterExtra
GetCharWidthA
GetFontLanguageInfo
GetCharacterPlacementA
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCA
GetOutlineTextMetricsA
GetCharABCWidthsA
GetFontData
GetKerningPairsA
GetGlyphOutlineA
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
DeleteObject
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
EnumFontFamiliesExA
StretchDIBits
GetCurrentPositionEx
CreateBitmapIndirect
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateCompatibleBitmap
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
RestoreDC
SaveDC
DeleteDC
PlayEnhMetaFile
GdiComment
WidenPath
StrokePath
StrokeAndFillPath
SetMiterLimit
ScaleWindowExtEx
GetPath
GetMiterLimit
FlattenPath
FillPath
EndPath
CloseFigure
BeginPath
AbortPath
GetCharWidthFloatA
GetCharABCWidthsFloatA
ExtEscape
DrawEscape
PolyBezier
GetCurrentObject
GetColorAdjustment
CreateEllipticRgnIndirect
GetTextMetricsA
CreatePolygonRgn
PolyPolyline
GetArcDirection
AngleArc
SetPixelV
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
OpenThreadToken
SetThreadToken
GetFileSecurityA
SetFileSecurityA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RevertToSelf
shell32
DragFinish
DragQueryFileA
SHGetFileInfoA
ExtractIconA
DragAcceptFiles
shlwapi
PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathIsUNCA
PathRemoveFileSpecW
PathStripToRootA
ole32
CLSIDFromString
StringFromGUID2
CoDisconnectObject
CoUninitialize
CoInitializeEx
CoCreateInstance
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
CoRegisterClassObject
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemFree
OleDuplicateData
CoReleaseMarshalData
CoMarshalInterface
CreateStreamOnHGlobal
CoUnmarshalInterface
CoRevokeClassObject
CLSIDFromProgID
OleRun
ReadFmtUserTypeStg
oleaut32
VarDateFromUdate
VarUdateFromDate
VariantTimeToSystemTime
DosDateTimeToVariantTime
SysAllocString
VarBstrFromDate
VarDateFromStr
VarDecFromStr
VarBstrFromDec
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SystemTimeToVariantTime
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VariantCopy
SafeArrayCreate
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SafeArrayGetElemsize
SafeArrayGetDim
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 247KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ