Static task
static1
Behavioral task
behavioral1
Sample
2024-02-03_9313b99a9ccca3ca7c43473743384c39_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-03_9313b99a9ccca3ca7c43473743384c39_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-03_9313b99a9ccca3ca7c43473743384c39_icedid
-
Size
1.3MB
-
MD5
9313b99a9ccca3ca7c43473743384c39
-
SHA1
2609593e3b8520abbc37fd757b27c2a4afd253e6
-
SHA256
fa2ae105accc36bf96938e3001044eea40c6b8a3859f3c5357ee340e13cffe47
-
SHA512
26e89c28576028214fabe7e8fbcccd133f547c7e89fc08acbbd29716054c67c3bb00f5cb62448cba4ab9594dc3ca525ec415942c8c32f265ab35a4a292883abb
-
SSDEEP
12288:IV5Hqj1CWBOD6MEkdpO7wQa5Jctksqe4sMrBmwIPZ1DSvZpsGxyUrzQptGwDDlvQ:I/hWBOD6Dk/O74+4sfipsGYUQpfRv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-03_9313b99a9ccca3ca7c43473743384c39_icedid
Files
-
2024-02-03_9313b99a9ccca3ca7c43473743384c39_icedid.exe windows:4 windows x86 arch:x86
421fbf0f34b794db630b75a3d7b61586
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
closesocket
accept
__WSAFDIsSet
select
listen
send
recv
socket
shutdown
ioctlsocket
recvfrom
sendto
ntohl
gethostbyname
connect
htons
htonl
WSASetLastError
WSAStartup
bind
WSAGetLastError
setsockopt
ddraw
DirectDrawCreate
dinput
DirectInputCreateA
advapi32
GetFileSecurityA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyA
RegDeleteKeyA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
SetFileSecurityA
kernel32
GetDiskFreeSpaceA
GetCurrentThread
lstrcmpA
GetProcessVersion
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetCPInfo
GetOEMCP
FileTimeToSystemTime
FileTimeToLocalFileTime
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetFileTime
GetVolumeInformationA
LocalFileTimeToFileTime
SystemTimeToFileTime
GetCurrentDirectoryA
SetErrorMode
RtlUnwind
HeapFree
IsBadReadPtr
HeapReAlloc
GetTimeZoneInformation
GetLocalTime
GetStartupInfoA
GetCommandLineA
ExitProcess
SetConsoleCtrlHandler
RaiseException
ExitThread
TerminateProcess
HeapSize
GetACP
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetFileType
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
GetThreadLocale
SuspendThread
SetThreadPriority
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
FormatMessageA
LocalFree
WritePrivateProfileStringA
GetPrivateProfileIntA
GlobalFree
GetStdHandle
FlushConsoleInputBuffer
QueryPerformanceCounter
GlobalMemoryStatus
GetCurrentProcessId
FindFirstFileA
FindClose
SetFilePointer
ResetEvent
GetExitCodeThread
SetLastError
LoadLibraryA
GetProcAddress
IsDBCSLeadByte
lstrcpynA
LoadLibraryExA
FreeLibrary
lstrcpyA
lstrcatA
InterlockedIncrement
HeapDestroy
HeapCreate
GetSystemInfo
HeapAlloc
lstrcmpiA
GetModuleFileNameA
GetShortPathNameA
lstrlenA
CreateThread
GetVersionExA
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
CreateEventA
MultiByteToWideChar
InterlockedDecrement
lstrlenW
WideCharToMultiByte
WaitForMultipleObjects
ResumeThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
CreateFileA
FindResourceA
SizeofResource
LoadResource
LockResource
WriteFile
GetFileSize
ReadFile
GetLastError
SetEvent
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
GetSystemTime
GetTickCount
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateMutexA
InterlockedExchange
GetDriveTypeA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
DeleteFileA
user32
wvsprintfA
ValidateRect
TranslateMessage
GetMessageA
WindowFromPoint
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
DestroyMenu
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetWindowDC
TabbedTextOutA
DrawTextA
GrayStringA
SetParent
GetSystemMenu
DefFrameProcA
TranslateMDISysAccel
DefMDIChildProcA
SetWindowContextHelpId
LoadStringA
IsZoomed
ShowOwnedPopups
RegisterClipboardFormatA
GetClassNameA
LockWindowUpdate
InvertRect
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
CharUpperA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
CheckRadioButton
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
DeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
WinHelpA
GetClassInfoA
RegisterClassA
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
SetPropA
GetPropA
GetMenuCheckMarkDimensions
GetMessageTime
GetMessagePos
GetWindow
RegisterWindowMessageA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
UnhookWindowsHookEx
MapDialogRect
GetCapture
GetAsyncKeyState
GetDlgItem
IsWindowEnabled
FrameRect
CreatePopupMenu
InsertMenuA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
IsMenu
GetMenuStringA
ModifyMenuA
LoadBitmapA
GetFocus
IsChild
SetFocus
SetWindowRgn
UnionRect
ShowWindow
BeginPaint
EndPaint
GetLastActivePopup
IsIconic
CharNextA
PostThreadMessageA
EqualRect
GetSystemMetrics
LoadIconA
ShowScrollBar
GetDC
GetMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
DeleteMenu
AppendMenuA
DrawMenuBar
ScreenToClient
UpdateWindow
SetCursor
GetKeyboardLayout
InvalidateRect
SetRectEmpty
IntersectRect
SetRect
SetActiveWindow
GetClassInfoExA
RegisterClassExA
CallWindowProcA
GetWindowLongA
SetWindowLongA
DestroyWindow
CreateWindowExA
SetWindowPos
SetForegroundWindow
DefWindowProcA
IsWindow
AdjustWindowRectEx
LoadMenuA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
RemovePropA
SetWindowTextA
KillTimer
IsWindowVisible
SetTimer
GetActiveWindow
MessageBoxA
PeekMessageA
PostQuitMessage
wsprintfA
GetCursorPos
GetKeyState
GetDCEx
ReleaseCapture
SetCapture
RedrawWindow
PtInRect
GetWindowRect
OffsetRect
GetClassLongA
FillRect
GetSysColor
ReleaseDC
CopyRect
InflateRect
ClientToScreen
GetParent
BeginDeferWindowPos
EndDeferWindowPos
IsRectEmpty
GetClientRect
SystemParametersInfoA
GetSysColorBrush
LoadCursorA
PostMessageA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SendMessageA
EnableWindow
UnregisterClassA
FindWindowA
gdi32
GetTextExtentPoint32A
SetDIBitsToDevice
CreateCompatibleDC
MoveToEx
LineTo
SetTextAlign
CreateCompatibleBitmap
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
Escape
GetBkColor
GetTextMetricsA
StretchDIBits
GetCharWidthA
SetBkMode
DPtoLP
CreateFontIndirectA
ExtTextOutA
CreateRectRgn
CombineRgn
BitBlt
StretchBlt
CreateFontA
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetStretchBltMode
TextOutA
GetStockObject
GetTextColor
GetDeviceCaps
PatBlt
SetRectRgn
CreatePatternBrush
GetMapMode
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
DeleteObject
CreateSolidBrush
SelectObject
GetObjectA
CreateDCA
LPtoDP
SetMapMode
SetViewportOrgEx
DeleteDC
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
comdlg32
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
shell32
DragQueryFileA
DragFinish
comctl32
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
ImageList_Destroy
ImageList_LoadImageA
oledlg
ord8
ole32
CoTaskMemRealloc
CoTaskMemFree
CreateDataAdviseHolder
CoTaskMemAlloc
OleRegGetMiscStatus
CLSIDFromProgID
OleRegGetUserType
OleRegEnumVerbs
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoCreateInstance
CLSIDFromString
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
OleLoadFromStream
OleSaveToStream
WriteClassStm
CoUninitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateOleAdviseHolder
CreateILockBytesOnHGlobal
olepro32
ord250
ord253
oleaut32
SysStringLen
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopy
VariantTimeToSystemTime
LoadRegTypeLi
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
VariantClear
SysAllocStringLen
SysAllocString
SysFreeString
GetErrorInfo
Sections
.text Size: 836KB - Virtual size: 832KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ