Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_5ad70c36f6a0e79f6cde29969818b2dc_icedid.exe
Resource
win7-20231215-en
General
-
Target
2024-02-13_5ad70c36f6a0e79f6cde29969818b2dc_icedid
-
Size
482KB
-
MD5
5ad70c36f6a0e79f6cde29969818b2dc
-
SHA1
491acb275a4371d384cc2efc3c132a4fbb138cd4
-
SHA256
2508f27dd9d712900f3c6013535c9dcb5948c3c06078cb9d18815d69903dcc62
-
SHA512
0d22e634a2456027714c7cfa7ae96577ec2fb33471516e2fe792cc56097da0c5022f51cf6afa84c82fbe8449fdbdaa1efc461c26fadd862e7f8fe50444217f1a
-
SSDEEP
12288:zVXt7NBVMBwfFTRmKzUuk5jYwwA/KDxHogFF:j3K4R8fuk5kwwA/KVHV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-13_5ad70c36f6a0e79f6cde29969818b2dc_icedid
Files
-
2024-02-13_5ad70c36f6a0e79f6cde29969818b2dc_icedid.exe windows:5 windows x86 arch:x86
91063fe8ee345526bda72bc9f3d2eb8c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
CreateFileA
HeapReAlloc
RtlUnwind
RaiseException
GetCommandLineA
GetStartupInfoA
HeapSize
Sleep
ExitProcess
HeapCreate
GetACP
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
SetFilePointer
WriteFile
GetModuleHandleW
GetOEMCP
GetCPInfo
GetCurrentProcessId
GetModuleFileNameA
GetLocaleInfoA
InterlockedIncrement
CloseHandle
GlobalFlags
lstrcmpA
InterlockedDecrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrlenA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
WideCharToMultiByte
CompareStringA
GetLastError
SetLastError
MultiByteToWideChar
lstrcmpW
GetModuleHandleA
GetVersionExA
FindResourceA
LoadResource
LockResource
SizeofResource
HeapAlloc
FreeLibrary
GetProcessHeap
HeapFree
IsBadReadPtr
LoadLibraryA
GetProcAddress
VirtualFree
VirtualProtect
VirtualAlloc
user32
LoadCursorA
GetSysColorBrush
GetWindowThreadProcessId
PostQuitMessage
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ValidateRect
ClientToScreen
DestroyMenu
IsWindowEnabled
SetWindowTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
EnableWindow
SetMenu
SetForegroundWindow
GetClientRect
PostMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
GetWindow
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
SetWindowPos
SetWindowLongA
GetWindowLongA
GetMenu
CallWindowProcA
DefWindowProcA
SendMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetParent
CopyRect
PtInRect
GetDlgCtrlID
CheckMenuItem
oleacc
LresultFromObject
CreateStdAccessibleObject
gdi32
CreateBitmap
GetDeviceCaps
ExtTextOutA
ScaleWindowExtEx
DeleteDC
GetStockObject
SetTextColor
SetBkColor
GetClipBox
SetWindowExtEx
RectVisible
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
PtVisible
SetMapMode
RestoreDC
SaveDC
DeleteObject
TextOutA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
oleaut32
VariantInit
VariantChangeType
VariantClear
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 342KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ