Static task
static1
Behavioral task
behavioral1
Sample
2024-02-24_b6cfb40b7cc7c5f477c9f680cc9d643b_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-24_b6cfb40b7cc7c5f477c9f680cc9d643b_icedid.exe
Resource
win10v2004-20240221-en
General
-
Target
2024-02-24_b6cfb40b7cc7c5f477c9f680cc9d643b_icedid
-
Size
324KB
-
MD5
b6cfb40b7cc7c5f477c9f680cc9d643b
-
SHA1
339909dcd679dd390b0ed35cf98264e684297309
-
SHA256
ebccc12a74969a332e89219b0353011b351bd5c2cd3e12fd6a06649bc71a8490
-
SHA512
1ae8139bf5f9ce097ad5b01509f4ac4d3cb49e23842bf9aec5f60a16b0c83d1f675311329736c8d57b5d7402f2f2b70cf047e6d37cfb6905c149237bf323d853
-
SSDEEP
6144:M/soDclSJcjCcl1YxVGlVGVq08NqUSxFPuxR1E75sJVGT:MEoYlMcjCcl1YxVGlVGVqvNqYfS7eW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-24_b6cfb40b7cc7c5f477c9f680cc9d643b_icedid
Files
-
2024-02-24_b6cfb40b7cc7c5f477c9f680cc9d643b_icedid.exe windows:4 windows x86 arch:x86
bb634e23246125d5236e5a485351fdb6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
CreateThread
ExitThread
RtlUnwind
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
HeapReAlloc
HeapSize
GetACP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
GetOEMCP
GetCPInfo
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
LocalFree
LocalAlloc
GetLastError
MulDiv
SetLastError
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalFindAtomA
GetModuleHandleA
lstrcatA
lstrcpyA
lstrlenA
lstrcpynA
GlobalGetAtomNameA
GlobalAddAtomA
GetVersion
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetTickCount
GetWindowsDirectoryA
GetPrivateProfileIntA
GetModuleFileNameA
FindFirstFileA
FindNextFileA
FindClose
WaitForMultipleObjects
Sleep
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateEventA
FreeLibrary
GetProcAddress
SetErrorMode
LoadLibraryA
OpenEventA
SetEvent
TerminateThread
ResetEvent
CloseHandle
CreateMutexA
UnhandledExceptionFilter
WaitForSingleObject
user32
CopyRect
EqualRect
IsIconic
BringWindowToTop
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CreateWindowExA
RegisterClassA
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetClientRect
DeferWindowPos
ScreenToClient
AdjustWindowRectEx
GetSysColor
MapWindowPoints
ClientToScreen
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
LoadStringA
InvalidateRect
wsprintfA
GetMenuItemCount
GetSubMenu
GetMenuItemID
UnpackDDElParam
ReuseDDElParam
WinHelpA
SetMenu
GetMenu
GetClassInfoA
LoadMenuA
DestroyMenu
GetDesktopWindow
GetWindow
GetCapture
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
RegisterWindowMessageA
EndDialog
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItemTextA
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
ShowOwnedPopups
PostQuitMessage
SetForegroundWindow
CheckMenuItem
PostMessageA
LoadIconA
DestroyIcon
ReleaseDC
GetDC
SendMessageA
EnableWindow
GetSystemMenu
AppendMenuA
UpdateWindow
UnregisterClassA
gdi32
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetTextColor
GetClipBox
CreateSolidBrush
CreateBitmap
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
GetTextExtentPoint32A
SetBkColor
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
shell32
DragQueryFileA
DragFinish
comctl32
ord17
Sections
.text Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
aodjk Size: 8KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 144KB - Virtual size: 142KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE