Static task
static1
Behavioral task
behavioral1
Sample
2024-02-01_e14ed60fa2852dbedd00f54387fabca5_icedid.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-01_e14ed60fa2852dbedd00f54387fabca5_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-01_e14ed60fa2852dbedd00f54387fabca5_icedid
-
Size
1.7MB
-
MD5
e14ed60fa2852dbedd00f54387fabca5
-
SHA1
d68677f26d1fcb4ef0c314b53c517b5c8f5db904
-
SHA256
03bd0dddf1b312469c908974dcb17763662a8023c346ba47386545e9dce8fc52
-
SHA512
5f39494f704cf3475d2759d1f7885c25229154d9d5d74eb00073871655014b0f85f6b83600e8da733d3f541b144b5d9ec7c235986e197a6fc1e76ca6771cc58a
-
SSDEEP
24576:wHnmlJblvSdFP8THlhqe1kh8eOUvAK6kMU0MG0aw/FODVQLeBtaZMbPS8BehyDlr:SmHz0E8AK6kMfSibPrecW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-01_e14ed60fa2852dbedd00f54387fabca5_icedid
Files
-
2024-02-01_e14ed60fa2852dbedd00f54387fabca5_icedid.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 530KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
.data
-
.rdata
-
.rsrc/0/ICON/IDI_ICON2
-
.rsrc/1033/MANIFEST/1.xml
-
.rsrc/2052/BITMAP/0D.bmp
-
.rsrc/2052/BITMAP/0U.bmp
-
.rsrc/2052/BITMAP/1D.bmp
-
.rsrc/2052/BITMAP/1U.bmp
-
.rsrc/2052/BITMAP/2D.bmp
-
.rsrc/2052/BITMAP/2U.bmp
-
.rsrc/2052/BITMAP/30994.bmp
-
.rsrc/2052/BITMAP/30996.bmp
-
.rsrc/2052/BITMAP/3D.bmp
-
.rsrc/2052/BITMAP/3U.bmp
-
.rsrc/2052/BITMAP/4D.bmp
-
.rsrc/2052/BITMAP/4U.bmp
-
.rsrc/2052/BITMAP/5D.bmp
-
.rsrc/2052/BITMAP/5U.bmp
-
.rsrc/2052/BITMAP/6D.bmp
-
.rsrc/2052/BITMAP/6U.bmp
-
.rsrc/2052/BITMAP/7D.bmp
-
.rsrc/2052/BITMAP/7U.bmp
-
.rsrc/2052/BITMAP/8D.bmp
-
.rsrc/2052/BITMAP/8U.bmp
-
.rsrc/2052/BITMAP/9D.bmp
-
.rsrc/2052/BITMAP/9U.bmp
-
.rsrc/2052/BITMAP/ADDD.bmp
-
.rsrc/2052/BITMAP/ADDU.bmp
-
.rsrc/2052/BITMAP/BACKD.bmp
-
.rsrc/2052/BITMAP/BACKU.bmp
-
.rsrc/2052/BITMAP/CD.bmp
-
.rsrc/2052/BITMAP/CED.bmp
-
.rsrc/2052/BITMAP/CEU.bmp
-
.rsrc/2052/BITMAP/CHEND.bmp
-
.rsrc/2052/BITMAP/CHENU.bmp
-
.rsrc/2052/BITMAP/CU.bmp
-
.rsrc/2052/BITMAP/DAOSHUD.bmp
-
.rsrc/2052/BITMAP/DAOSHUU.bmp
-
.rsrc/2052/BITMAP/DIVIDED.bmp
-
.rsrc/2052/BITMAP/DIVIDEU.bmp
-
.rsrc/2052/BITMAP/EQUALD.bmp
-
.rsrc/2052/BITMAP/EQUALU.bmp
-
.rsrc/2052/BITMAP/PERCENTD.bmp
-
.rsrc/2052/BITMAP/PERCENTU.bmp
-
.rsrc/2052/BITMAP/POINTD.bmp
-
.rsrc/2052/BITMAP/POINTU.bmp
-
.rsrc/2052/BITMAP/REDUCED.bmp
-
.rsrc/2052/BITMAP/REDUCEU.bmp
-
.rsrc/2052/BITMAP/SIGND.bmp
-
.rsrc/2052/BITMAP/SIGNU.bmp
-
.rsrc/2052/BITMAP/SQRTD.bmp
-
.rsrc/2052/BITMAP/SQRTU.bmp
-
.rsrc/2052/CURSOR/10
-
.rsrc/2052/CURSOR/11
-
.rsrc/2052/CURSOR/12
-
.rsrc/2052/CURSOR/13
-
.rsrc/2052/CURSOR/14
-
.rsrc/2052/CURSOR/15
-
.rsrc/2052/CURSOR/16
-
.rsrc/2052/CURSOR/17
-
.rsrc/2052/CURSOR/18
-
.rsrc/2052/CURSOR/3
-
.rsrc/2052/CURSOR/4
-
.rsrc/2052/CURSOR/5
-
.rsrc/2052/CURSOR/6
-
.rsrc/2052/CURSOR/7
-
.rsrc/2052/CURSOR/8
-
.rsrc/2052/CURSOR/9
-
.rsrc/2052/DIALOG/100
-
.rsrc/2052/DIALOG/30734
-
.rsrc/2052/GROUP_CURSOR/30977
-
.rsrc/2052/GROUP_CURSOR/30998
-
.rsrc/2052/GROUP_CURSOR/30999
-
.rsrc/2052/GROUP_CURSOR/31000
-
.rsrc/2052/GROUP_CURSOR/31001
-
.rsrc/2052/GROUP_CURSOR/31002
-
.rsrc/2052/GROUP_CURSOR/31003
-
.rsrc/2052/GROUP_CURSOR/31004
-
.rsrc/2052/GROUP_CURSOR/31005
-
.rsrc/2052/GROUP_CURSOR/31006
-
.rsrc/2052/GROUP_CURSOR/31007
-
.rsrc/2052/GROUP_CURSOR/31008
-
.rsrc/2052/GROUP_CURSOR/31009
-
.rsrc/2052/GROUP_CURSOR/31010
-
.rsrc/2052/GROUP_CURSOR/31011
-
.rsrc/2052/GROUP_ICON/182
-
.rsrc/2052/ICON/1.ico
-
.rsrc/2052/ICON/2.ico
-
.rsrc/2052/string.txt
-
.rsrc/2052/version.txt
-
.text