Static task
static1
Behavioral task
behavioral1
Sample
2024-01-26_5cc83602c6c42d2fde866d4aeacb3de0_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-26_5cc83602c6c42d2fde866d4aeacb3de0_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-26_5cc83602c6c42d2fde866d4aeacb3de0_icedid
-
Size
713KB
-
MD5
5cc83602c6c42d2fde866d4aeacb3de0
-
SHA1
97e83f91f20ed9673c8e4bb35c22b8e5809f63de
-
SHA256
80ec2819ad7b04b9143a21e3393627608160a0e3deec7737783dfec05024afa7
-
SHA512
c220a3fc7f92acb094ba6eb68b2fc096fa65524520521a60c49fd086b7b8d7b1db6c3a2a1644c1767f116aad3e014d393cd4109d1e81e1df6e449b204ea93d8b
-
SSDEEP
6144:+V8Rn99xAxmJ/QEC0LYxaBFekrtXXTQucMaZP6eOxH0r5H8z7Hq50r4du782:+V80EC0L+WrB8ucNKN0r5cfO0rL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-26_5cc83602c6c42d2fde866d4aeacb3de0_icedid
Files
-
2024-01-26_5cc83602c6c42d2fde866d4aeacb3de0_icedid.exe windows:5 windows x86 arch:x86
ed63859f5c8b64a4edbb5e5576c4242b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasEnumConnectionsA
RasHangUpA
kernel32
LoadLibraryW
GetSystemDirectoryW
SetErrorMode
RtlUnwind
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
VirtualAlloc
HeapReAlloc
ExitProcess
HeapSize
GetTimeZoneInformation
GetACP
CreateFileA
SetHandleCount
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetOEMCP
GetCPInfo
GlobalFlags
InterlockedIncrement
GetModuleHandleW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryExA
InterlockedExchange
lstrcmpA
GetCurrentProcessId
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
LoadLibraryA
lstrcmpW
GetVersionExA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MultiByteToWideChar
MulDiv
lstrlenA
FreeLibrary
InterlockedDecrement
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
SetLastError
CloseHandle
WaitForSingleObject
WritePrivateProfileStringA
GetCurrentDirectoryA
DeleteFileA
CreateSemaphoreA
GetLastError
GetPrivateProfileStringA
GetModuleFileNameA
Sleep
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
IsValidCodePage
user32
SetRect
WindowFromPoint
PostQuitMessage
InvalidateRect
SetRectEmpty
ShowWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
IsWindowEnabled
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
GetFocus
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetMessagePos
PeekMessageA
GetKeyState
SetMenu
IsWindowVisible
UpdateWindow
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
GetParent
EqualRect
DeferWindowPos
PtInRect
GetDlgCtrlID
DefWindowProcA
GetMenu
GetWindowLongA
SetWindowPos
OffsetRect
GetWindowPlacement
GetWindowRect
GetWindow
SystemParametersInfoA
DestroyMenu
CopyRect
GetSysColor
EndPaint
BeginPaint
CallWindowProcA
GetPropA
SetWindowLongA
RemovePropA
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetMenuState
GetMenuItemCount
LoadCursorA
GetSysColorBrush
UnregisterClassA
SetCursor
GetMessageA
TranslateMessage
GetMessageTime
ValidateRect
SetPropA
GetMenuItemID
GetSubMenu
LoadMenuA
GetDC
ReleaseDC
SetTimer
KillTimer
GetDesktopWindow
LoadIconA
IsWindow
SetMenuDefaultItem
SendMessageA
PostMessageA
TrackPopupMenu
SetForegroundWindow
GetCursorPos
LoadImageA
GetSystemMetrics
RegisterWindowMessageA
DrawIcon
UnhookWindowsHookEx
EnumWindows
UnregisterHotKey
RegisterHotKey
GetWindowTextA
GetWindowModuleFileNameA
CharLowerA
EnableWindow
GetClientRect
IsIconic
GetSystemMenu
CheckMenuItem
AppendMenuA
MapWindowPoints
gdi32
DeleteDC
GetStockObject
GetCharWidthA
CreateFontA
StretchDIBits
GetBkColor
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
ExtTextOutA
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
TextOutA
RectVisible
PtVisible
GetObjectA
DeleteObject
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
Escape
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA
Shell_NotifyIconA
shlwapi
PathFindExtensionA
PathFindFileNameA
ole32
CLSIDFromProgID
CoCreateInstance
OleRun
CLSIDFromString
CoInitialize
CoUninitialize
oleaut32
SysFreeString
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysAllocString
Sections
.text Size: 230KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 420KB - Virtual size: 420KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ