Static task
static1
Behavioral task
behavioral1
Sample
2024-02-05_d506afa0ec84db29b42175f6baf63cb6_icedid.exe
Resource
win7-20231215-en
General
-
Target
2024-02-05_d506afa0ec84db29b42175f6baf63cb6_icedid
-
Size
283KB
-
MD5
d506afa0ec84db29b42175f6baf63cb6
-
SHA1
2b43169325c5907c83f4bb5f2f50efe6ecdabc5d
-
SHA256
b1d62fa44ef019260bb465b5a40a82b372d0c4c5695e5f0c1b239c1318bad7ff
-
SHA512
b16732065adfc8d985629ab212170a12bc9aaa3234d755bf71bf765cc72844dc71f95ceb8faedae3ffbb0a8f5570a3a2a0240c2c5b72878f9b3d9cc9b49b4079
-
SSDEEP
6144:nJzrn0Fmcf1E+pBvYXuze9+77swVVBKnuQGi4MQ:nNI1E+pBXe9+JrcZ4D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2024-02-05_d506afa0ec84db29b42175f6baf63cb6_icedid
Files
-
2024-02-05_d506afa0ec84db29b42175f6baf63cb6_icedid.exe windows:5 windows x86 arch:x86
7cbc6648eeb6d2d2ee113cdc9cc540a7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
RaiseException
GetCommandLineA
GetStartupInfoA
Sleep
ExitProcess
HeapReAlloc
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
HeapCreate
GetStdHandle
GetACP
IsValidCodePage
GetStringTypeA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetErrorMode
GetModuleHandleW
GetOEMCP
GetCPInfo
CreateFileA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
InterlockedDecrement
GetModuleFileNameW
FormatMessageA
LocalFree
MulDiv
GlobalGetAtomNameA
GlobalFindAtomA
MultiByteToWideChar
lstrcmpW
GetVersionExA
WritePrivateProfileStringA
GlobalUnlock
GlobalFree
FreeResource
GetCurrentProcessId
GetLastError
SetLastError
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
WideCharToMultiByte
CompareStringA
FindResourceA
LoadResource
LockResource
SizeofResource
InterlockedExchange
GlobalLock
lstrcmpA
GlobalAlloc
FreeLibrary
GetModuleHandleA
CreateThread
SleepEx
CloseHandle
HeapFree
GetProcessHeap
HeapAlloc
DeleteFileA
LoadLibraryA
GetProcAddress
WriteFileGather
VirtualAlloc
GetModuleFileNameA
lstrlenA
lstrcatA
GetCurrentProcess
GetStringTypeW
VirtualAllocExNuma
user32
UnregisterClassA
DestroyMenu
GetSysColorBrush
LoadCursorA
EndPaint
BeginPaint
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongA
GetPropA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
LoadIconA
EnableWindow
GetClientRect
IsIconic
SendMessageA
DrawIcon
IsWindow
wsprintfA
GetSystemMetrics
gdi32
GetStockObject
Escape
GetDeviceCaps
DeleteDC
ExtTextOutA
TextOutA
RectVisible
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateBitmap
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
SelectObject
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
comctl32
ord17
shlwapi
PathFindFileNameA
PathRemoveFileSpecW
PathFindExtensionA
ole32
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitializeEx
oleaut32
VariantClear
VariantChangeType
VariantInit
winmm
waveInGetErrorTextA
waveInStart
waveInStop
waveInUnprepareHeader
waveInPrepareHeader
waveInClose
mmioClose
waveInOpen
mmioOpenA
mmioCreateChunk
mmioAscend
mmioWrite
waveInAddBuffer
waveInGetNumDevs
waveInGetDevCapsA
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ