Static task
static1
Behavioral task
behavioral1
Sample
2024-02-01_197121b9d41fb3e502efab27b4ead456_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-01_197121b9d41fb3e502efab27b4ead456_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-01_197121b9d41fb3e502efab27b4ead456_icedid
-
Size
1.7MB
-
MD5
197121b9d41fb3e502efab27b4ead456
-
SHA1
076e21734c41f5ce292d5fdb1d92a14ebc31c057
-
SHA256
1c566014d2e99d04d83a46737d8cb8103d01749d410a4db93102bc98437f0e49
-
SHA512
f4a00ecf514c378bdae8459e7d467b51724038069ccc85513331e882f31de9e71959c2a73688ef68dce96317c19eccc255164473db1adc6d0a7e805d7cd7302b
-
SSDEEP
24576:bHnmlJblvSdFP8THlhqe1kh8eOUvAK6kMU0MG0aw/FODVQLeBtaZMbPS8BehyDlr:TmHz0E8AK6kMfSibPrecW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-01_197121b9d41fb3e502efab27b4ead456_icedid
Files
-
2024-02-01_197121b9d41fb3e502efab27b4ead456_icedid.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 530KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
.data
-
.rdata
-
.rsrc/0/ICON/IDI_ICON2
-
.rsrc/1033/MANIFEST/1.xml
-
.rsrc/2052/BITMAP/0D.bmp
-
.rsrc/2052/BITMAP/0U.bmp
-
.rsrc/2052/BITMAP/1D.bmp
-
.rsrc/2052/BITMAP/1U.bmp
-
.rsrc/2052/BITMAP/2D.bmp
-
.rsrc/2052/BITMAP/2U.bmp
-
.rsrc/2052/BITMAP/30994.bmp
-
.rsrc/2052/BITMAP/30996.bmp
-
.rsrc/2052/BITMAP/3D.bmp
-
.rsrc/2052/BITMAP/3U.bmp
-
.rsrc/2052/BITMAP/4D.bmp
-
.rsrc/2052/BITMAP/4U.bmp
-
.rsrc/2052/BITMAP/5D.bmp
-
.rsrc/2052/BITMAP/5U.bmp
-
.rsrc/2052/BITMAP/6D.bmp
-
.rsrc/2052/BITMAP/6U.bmp
-
.rsrc/2052/BITMAP/7D.bmp
-
.rsrc/2052/BITMAP/7U.bmp
-
.rsrc/2052/BITMAP/8D.bmp
-
.rsrc/2052/BITMAP/8U.bmp
-
.rsrc/2052/BITMAP/9D.bmp
-
.rsrc/2052/BITMAP/9U.bmp
-
.rsrc/2052/BITMAP/ADDD.bmp
-
.rsrc/2052/BITMAP/ADDU.bmp
-
.rsrc/2052/BITMAP/BACKD.bmp
-
.rsrc/2052/BITMAP/BACKU.bmp
-
.rsrc/2052/BITMAP/CD.bmp
-
.rsrc/2052/BITMAP/CED.bmp
-
.rsrc/2052/BITMAP/CEU.bmp
-
.rsrc/2052/BITMAP/CHEND.bmp
-
.rsrc/2052/BITMAP/CHENU.bmp
-
.rsrc/2052/BITMAP/CU.bmp
-
.rsrc/2052/BITMAP/DAOSHUD.bmp
-
.rsrc/2052/BITMAP/DAOSHUU.bmp
-
.rsrc/2052/BITMAP/DIVIDED.bmp
-
.rsrc/2052/BITMAP/DIVIDEU.bmp
-
.rsrc/2052/BITMAP/EQUALD.bmp
-
.rsrc/2052/BITMAP/EQUALU.bmp
-
.rsrc/2052/BITMAP/PERCENTD.bmp
-
.rsrc/2052/BITMAP/PERCENTU.bmp
-
.rsrc/2052/BITMAP/POINTD.bmp
-
.rsrc/2052/BITMAP/POINTU.bmp
-
.rsrc/2052/BITMAP/REDUCED.bmp
-
.rsrc/2052/BITMAP/REDUCEU.bmp
-
.rsrc/2052/BITMAP/SIGND.bmp
-
.rsrc/2052/BITMAP/SIGNU.bmp
-
.rsrc/2052/BITMAP/SQRTD.bmp
-
.rsrc/2052/BITMAP/SQRTU.bmp
-
.rsrc/2052/CURSOR/10
-
.rsrc/2052/CURSOR/11
-
.rsrc/2052/CURSOR/12
-
.rsrc/2052/CURSOR/13
-
.rsrc/2052/CURSOR/14
-
.rsrc/2052/CURSOR/15
-
.rsrc/2052/CURSOR/16
-
.rsrc/2052/CURSOR/17
-
.rsrc/2052/CURSOR/18
-
.rsrc/2052/CURSOR/3
-
.rsrc/2052/CURSOR/4
-
.rsrc/2052/CURSOR/5
-
.rsrc/2052/CURSOR/6
-
.rsrc/2052/CURSOR/7
-
.rsrc/2052/CURSOR/8
-
.rsrc/2052/CURSOR/9
-
.rsrc/2052/DIALOG/100
-
.rsrc/2052/DIALOG/30734
-
.rsrc/2052/GROUP_CURSOR/30977
-
.rsrc/2052/GROUP_CURSOR/30998
-
.rsrc/2052/GROUP_CURSOR/30999
-
.rsrc/2052/GROUP_CURSOR/31000
-
.rsrc/2052/GROUP_CURSOR/31001
-
.rsrc/2052/GROUP_CURSOR/31002
-
.rsrc/2052/GROUP_CURSOR/31003
-
.rsrc/2052/GROUP_CURSOR/31004
-
.rsrc/2052/GROUP_CURSOR/31005
-
.rsrc/2052/GROUP_CURSOR/31006
-
.rsrc/2052/GROUP_CURSOR/31007
-
.rsrc/2052/GROUP_CURSOR/31008
-
.rsrc/2052/GROUP_CURSOR/31009
-
.rsrc/2052/GROUP_CURSOR/31010
-
.rsrc/2052/GROUP_CURSOR/31011
-
.rsrc/2052/GROUP_ICON/182
-
.rsrc/2052/ICON/1.ico
-
.rsrc/2052/ICON/2.ico
-
.rsrc/2052/string.txt
-
.rsrc/2052/version.txt
-
.text