c:\block\sense\form\either\after\desert\list\Joy\tireNeck.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-13_acc2c23c76c03064f3a4b90a9390e2d4_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-13_acc2c23c76c03064f3a4b90a9390e2d4_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-13_acc2c23c76c03064f3a4b90a9390e2d4_icedid
-
Size
454KB
-
MD5
acc2c23c76c03064f3a4b90a9390e2d4
-
SHA1
48076d450d66ec954114eb3a2f7aca32978237fc
-
SHA256
4422f23ee111f1318966ae14fb67999ef3367b370a895c552d1186ee2539d97c
-
SHA512
853838f737a57a0169ce1a62fabf2f91b6d5e459c68315a8b3c401d44a1ba37abb01ff0bd9047b172aca7f5c29da4f052c8a690e601b8ac8e791db085412ae01
-
SSDEEP
6144:9of9TWolDGA/JrkTo4RLMSoYomd4aBD11rWUBt5hmjxW5WfS:9EFrkTdRISNeapbyUajxW4fS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-13_acc2c23c76c03064f3a4b90a9390e2d4_icedid
Files
-
2024-02-13_acc2c23c76c03064f3a4b90a9390e2d4_icedid.exe windows:5 windows x86 arch:x86
c6d4c85727994d6fa17dab6249cf0dc3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GlobalUnlock
GlobalHandle
GlobalAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
GlobalFree
TlsFree
GetModuleFileNameW
InterlockedDecrement
SizeofResource
LoadResource
WideCharToMultiByte
FreeLibrary
GetCurrentProcessId
lstrlenA
MultiByteToWideChar
FormatMessageA
CloseHandle
GlobalReAlloc
CompareStringA
GetModuleHandleW
InterlockedIncrement
GlobalGetAtomNameA
lstrcmpW
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GlobalFlags
InterlockedExchange
GetLocaleInfoA
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
HeapAlloc
HeapFree
VirtualAlloc
HeapReAlloc
HeapSize
ExitProcess
GetACP
IsValidCodePage
CompareStringW
GetFileType
SetStdHandle
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
GetProcessHeap
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GlobalLock
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
GetLastError
SetLastError
GetTempPathA
GetModuleFileNameA
FindFirstChangeNotificationA
LoadLibraryExA
GetProcAddress
MulDiv
Sleep
TlsAlloc
FindFirstFileA
FindNextFileA
FindClose
EnterCriticalSection
InitializeCriticalSection
GetModuleHandleA
LockResource
FindResourceA
GetDateFormatA
GetVersionExA
OpenProcess
GetSystemTime
GetWindowsDirectoryA
CreateFileA
QueryPerformanceCounter
GetCurrentThreadId
lstrcmpA
user32
ClientToScreen
DestroyMenu
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
PostQuitMessage
RegisterWindowMessageA
TranslateMessage
GetPropA
GetTopWindow
DestroyWindow
GetMessageTime
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
LoadCursorA
GetSystemMetrics
ReleaseDC
GetSysColor
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
GetKeyState
PeekMessageA
ValidateRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowThreadProcessId
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
UnhookWindowsHookEx
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
WinHelpA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsDialogMessageA
LoadBitmapA
CheckDlgButton
SendMessageA
SetWindowTextA
GetIconInfo
GetMessagePos
UpdateWindow
GetClassNameA
GetDC
GetAsyncKeyState
EnumChildWindows
GetCapture
GetClassLongA
SetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetFocus
GetDlgItem
ShowWindow
GetWindowTextA
FindWindowA
GetMessageA
CloseClipboard
EndDialog
OffsetRect
ReleaseCapture
LoadIconA
BeginDeferWindowPos
DeferWindowPos
CreateMenu
UnregisterHotKey
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
SetMenuItemBitmaps
GetSysColorBrush
ole32
StgCreateDocfile
OleCreate
CoSuspendClassObjects
OleInitialize
OleSetContainedObject
CoUninitialize
CoInitialize
OleUninitialize
gdi32
CreateBitmap
SetMapMode
GetStockObject
BitBlt
DeleteDC
DeleteObject
CreatePen
GetObjectA
CreateDCA
DPtoLP
SelectObject
StretchBlt
SetPixel
GetTextExtentPoint32A
PatBlt
ScaleWindowExtEx
SetWindowExtEx
RestoreDC
SaveDC
GetClipBox
ExtTextOutA
SetBkColor
GetDeviceCaps
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
SetTextColor
winspool.drv
GetJobA
EnumPrintersA
GetPrinterDataA
GetPrinterA
OpenPrinterA
DocumentPropertiesA
ClosePrinter
comctl32
ImageList_AddMasked
ImageList_SetIconSize
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_Remove
ImageList_Destroy
ImageList_GetImageCount
comdlg32
ChooseFontA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
ReplaceTextA
GetFileTitleA
shlwapi
StrToIntA
SHRegWriteUSValueA
SHRegCreateUSKeyA
PathQuoteSpacesA
SHRegCloseUSKey
PathAppendA
SHDeleteKeyA
dbghelp
MiniDumpWriteDump
oleaut32
VariantClear
VariantChangeType
VariantInit
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 577KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ