Static task
static1
Behavioral task
behavioral1
Sample
2024-02-24_e76c690bb425b48a7ab46ec84c71a674_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-24_e76c690bb425b48a7ab46ec84c71a674_icedid.exe
Resource
win10v2004-20240221-en
General
-
Target
2024-02-24_e76c690bb425b48a7ab46ec84c71a674_icedid
-
Size
252KB
-
MD5
e76c690bb425b48a7ab46ec84c71a674
-
SHA1
d7f8437f7bfcc2918d1efb6f7efd15abe15e5f32
-
SHA256
b767a84e19cd9208d81bca9d20d109f27234cd5c6c4835c76ce0b7b1f05a2a31
-
SHA512
b2481580d579eced91ac8bcc806b86a86bd743d1252b64b37ccb232f502ae8888e21f8f9ba1e80004f23484a6c79daa082b75019dec5a88f56634b22c3c9b4db
-
SSDEEP
3072:IEP7TD8v7WAp1oGERed3LKX1YBLkzI6PUzbQnDP7QlZwwJDjDCe:jjH5Ap1vSeNLKXJk0DP7P0j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-24_e76c690bb425b48a7ab46ec84c71a674_icedid
Files
-
2024-02-24_e76c690bb425b48a7ab46ec84c71a674_icedid.exe windows:4 windows x86 arch:x86
339217c0bac457c7ad7d911f79ebf517
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFileExistsA
PathFindFileNameA
PathRemoveFileSpecA
StrCmpNIA
ws2_32
htonl
ntohs
closesocket
ntohl
recv
send
socket
connect
inet_addr
htons
setsockopt
inet_ntoa
gethostbyname
WSAGetLastError
kernel32
GetFileSize
GetFileTime
GetCPInfo
GetOEMCP
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
RtlUnwind
HeapFree
HeapAlloc
GetFileType
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
RaiseException
HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetStdHandle
SetHandleCount
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
lstrcpyA
lstrlenA
lstrcmpA
CreateThread
ExitThread
Sleep
CloseHandle
TerminateThread
GetExitCodeThread
WaitForSingleObject
GetStdHandle
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
GetSystemDefaultLangID
GlobalAlloc
GetPrivateProfileStringA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
GetLastError
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
GetThreadLocale
SizeofResource
WritePrivateProfileStringA
GlobalFlags
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpynA
MulDiv
LoadLibraryA
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
GetProcAddress
SetLastError
FreeLibrary
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GlobalLock
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
FormatMessageA
LocalFree
LCMapStringA
user32
PtInRect
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
GetClassNameA
GetDesktopWindow
GetSysColorBrush
LoadCursorA
InflateRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
UpdateWindow
MapWindowPoints
AdjustWindowRectEx
ScreenToClient
GetTopWindow
IsChild
GetCapture
WinHelpA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
CopyRect
GetDC
ReleaseDC
MapDialogRect
GetWindow
SetWindowContextHelpId
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
SetCursor
GetMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
IsWindow
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
LoadStringA
ShowWindow
SetWindowPos
MoveWindow
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
GetDlgItemInt
GetDlgItem
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
PostMessageA
SendMessageA
wsprintfA
SetFocus
MessageBoxA
GetFocus
PostQuitMessage
GetSysColor
LoadIconA
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
EnableWindow
InvalidateRect
RedrawWindow
TabbedTextOutA
DrawTextA
GrayStringA
GetClassInfoA
gdi32
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
DeleteObject
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
PatBlt
CreateBitmap
Escape
ExtTextOutA
TextOutA
RectVisible
GetTextExtentPointA
PtVisible
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateDIBitmap
CreateRectRgn
comdlg32
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
comctl32
ImageList_Destroy
ord17
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleInitialize
OleIsCurrentClipboard
OleUninitialize
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoTaskMemAlloc
olepro32
ord253
oleaut32
SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
wsock32
WSAStartup
WSACleanup
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ