Static task
static1
Behavioral task
behavioral1
Sample
2024-02-28_13932b57ffbb35a225f607c718bc9af3_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-28_13932b57ffbb35a225f607c718bc9af3_icedid.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-02-28_13932b57ffbb35a225f607c718bc9af3_icedid
-
Size
1.9MB
-
MD5
13932b57ffbb35a225f607c718bc9af3
-
SHA1
84a72f3ec1b8383756ba03774e3fdf027557e92e
-
SHA256
0a4c27fa6c52de5447ee7560497f5dabb570675bac97e992372c2ba8a3d5038f
-
SHA512
a72c90146153de06240b520b67505fc3ff5499a463dd8bc4be812ba095907b374b1748ab152fa750ffdf0149a1120faa166db760d3d187ef16c41df665f5dfbb
-
SSDEEP
12288:4PdcrUKoFTUr67jJKfZioJ5BQKINunGpbFGFr6/PsuQ+6V8zQ9Sfj0VpQAqacmhx:OcrUKSTUu7dsjSKYbFGFr6++6V8zQ/sA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-28_13932b57ffbb35a225f607c718bc9af3_icedid
Files
-
2024-02-28_13932b57ffbb35a225f607c718bc9af3_icedid.exe windows:5 windows x86 arch:x86
7e226fc0d6d97db68966564b7ce74843
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Child
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
CM_Get_Device_IDW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
CM_Locate_DevNodeW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
shlwapi
PathIsUNCW
PathStripToRootW
StrFormatByteSizeW
PathGetDriveNumberW
PathCompactPathW
PathRemoveFileSpecW
PathFindExtensionW
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
PathIsNetworkPathW
avifil32
AVIFileExit
AVIFileInit
AVIStreamOpenFromFileW
AVIStreamGetFrameOpen
AVIStreamLength
AVIStreamStart
AVIStreamInfoW
AVIStreamGetFrameClose
AVIStreamRelease
AVIStreamGetFrame
AVIStreamSampleToTime
msvfw32
DrawDibOpen
DrawDibDraw
DrawDibClose
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
kernel32
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
SetErrorMode
FindResourceExW
GlobalHandle
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
ExitThread
ExitProcess
HeapSize
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
LCMapStringA
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetEnvironmentVariableA
SetEnvironmentVariableW
GetCurrentDirectoryA
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GlobalFlags
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
SetThreadPriority
FindNextFileW
VirtualProtect
lstrlenA
lstrcmpA
GetFullPathNameW
FindFirstFileW
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
ReadFile
GetThreadLocale
MoveFileW
GetCurrentProcessId
InterlockedDecrement
WideCharToMultiByte
GetModuleHandleA
GlobalAlloc
FormatMessageW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GlobalLock
GlobalUnlock
GlobalFree
GetVolumeInformationW
FreeResource
GetCurrentThread
RemoveDirectoryW
CreateFileMappingW
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
GetFileSize
CreateDirectoryW
CreateMutexW
CopyFileW
GetSystemDefaultLangID
GetSystemDirectoryW
GetPrivateProfileStringW
GetDateFormatW
GetTimeFormatW
GetUserDefaultLangID
GetNumberFormatW
GetFileTime
GetPrivateProfileIntW
WritePrivateProfileStringW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileSizeEx
VerSetConditionMask
VerifyVersionInfoW
SuspendThread
ResumeThread
MulDiv
GetWindowsDirectoryW
CreateProcessW
GetExitCodeProcess
OpenEventW
SetEvent
CreateEventW
ResetEvent
WaitForSingleObject
LocalAlloc
lstrcpynW
LocalFree
lstrcmpiW
lstrlenW
lstrcpyW
FreeLibrary
GetLogicalDrives
FlushFileBuffers
CreateThread
TerminateThread
GetDiskFreeSpaceExW
GetFileAttributesW
SetFileAttributesW
CreateFileW
SetVolumeLabelW
OutputDebugStringW
CloseHandle
WriteFile
GetModuleFileNameW
GetLastError
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
MultiByteToWideChar
VirtualFree
VirtualAlloc
GetTempPathW
GetTickCount
Sleep
DeleteFileW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
GetStartupInfoW
user32
ShowWindow
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMenuState
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetLastActivePopup
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
DefWindowProcW
CallWindowProcW
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindowEnabled
EndDialog
GetNextDlgGroupItem
SetWindowPos
MapDialogRect
GetSystemMenu
EnableMenuItem
wsprintfW
PostQuitMessage
GetForegroundWindow
MoveWindow
EndPaint
BeginPaint
DispatchMessageW
TranslateMessage
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
AppendMenuW
DrawEdge
GetFocus
MapVirtualKeyW
GetKeyNameTextW
PeekMessageW
LoadIconW
GetDesktopWindow
IsWindowVisible
IsIconic
SetMenuDefaultItem
CreatePopupMenu
DrawIcon
UpdateWindow
GetDlgCtrlID
GetWindowDC
GetWindowThreadProcessId
CharUpperW
GetWindowTextW
GetClassNameW
FindWindowW
GetDlgItem
MessageBeep
ModifyMenuW
DeleteMenu
SetForegroundWindow
BringWindowToTop
SetRect
GetSubMenu
TrackPopupMenuEx
DestroyMenu
LoadMenuW
DestroyCursor
FillRect
SetCursor
GetWindowLongW
WindowFromPoint
GetNextDlgTabItem
GetActiveWindow
FrameRect
DrawStateW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
DrawFocusRect
LoadBitmapW
LoadImageW
DestroyIcon
GetDC
ReleaseDC
DrawIconEx
GetIconInfo
GetAsyncKeyState
ValidateRect
GetMessageW
SetWindowContextHelpId
UnregisterClassW
CharNextW
CopyAcceleratorTableW
InvalidateRgn
PostThreadMessageW
SystemParametersInfoW
GetCursorPos
CallNextHookEx
RegisterClipboardFormatW
GetMenuStringW
SendMessageW
GetWindowRect
EnableWindow
GetSystemMetrics
GetKeyState
OffsetRect
GetClientRect
InvalidateRect
GetParent
KillTimer
IsWindow
GetSysColor
SetTimer
ClientToScreen
UnhookWindowsHookEx
IsRectEmpty
PtInRect
SetRectEmpty
CopyRect
DrawFrameControl
PostMessageW
SetWindowRgn
RedrawWindow
GetCapture
SetCapture
GetMonitorInfoW
MonitorFromPoint
RegisterClassExW
GetSysColorBrush
LoadCursorW
ReleaseCapture
InflateRect
EqualRect
SetWindowsHookExW
SetWindowLongW
gdi32
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
EnumFontFamiliesExW
GetRgnBox
MoveToEx
LineTo
ExcludeClipRect
SetMapMode
TextOutW
RectVisible
PtVisible
GetPixel
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
DeleteObject
StretchBlt
FrameRgn
OffsetRgn
EqualRgn
CombineRgn
CreateRoundRectRgn
CreatePolygonRgn
CreateRectRgn
GetObjectW
CreateFontIndirectW
CreateSolidBrush
GetStockObject
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
GetClipBox
SelectClipRgn
FloodFill
RoundRect
CreatePen
CreateEllipticRgnIndirect
CreateDCW
GetDIBColorTable
CreateHalftonePalette
CreatePalette
PatBlt
Rectangle
CreateFontW
CreateDIBitmap
Polygon
CreateRectRgnIndirect
GetTextExtentPoint32W
GetTextColor
GetBkMode
MaskBlt
SetPixel
SelectObject
SetBkColor
SetTextColor
DeleteDC
Escape
ExtTextOutW
SetStretchBltMode
comdlg32
CommDlgExtendedError
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
StartServiceW
OpenServiceW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegEnumValueW
OpenThreadToken
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
RegDeleteValueW
RegQueryInfoKeyW
RegOpenKeyExW
CreateServiceW
OpenSCManagerW
QueryServiceStatus
CloseServiceHandle
ControlService
DeleteService
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegCreateKeyExA
RegSetValueExA
GetTokenInformation
OpenProcessToken
shell32
SHGetSpecialFolderLocation
ShellExecuteExW
DragAcceptFiles
SHGetFileInfoW
DragQueryFileW
Shell_NotifyIconW
ord2
SHBrowseForFolderW
SHGetMalloc
SHGetDesktopFolder
ShellExecuteW
SHGetSpecialFolderPathW
ord71
SHChangeNotify
ord680
SHGetPathFromIDListW
ord4
comctl32
ImageList_GetIconSize
_TrackMouseEvent
oledlg
OleUIBusyW
ole32
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitializeEx
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoInitialize
CoRegisterMessageFilter
CoTaskMemAlloc
oleaut32
VariantInit
SysAllocString
VariantClear
SysFreeString
SysAllocStringLen
VariantChangeType
SysStringLen
SystemTimeToVariantTime
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
OleCreateFontIndirect
urlmon
URLDownloadToFileW
wininet
InternetGetConnectedState
InternetCheckConnectionW
Sections
.text Size: 506KB - Virtual size: 505KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ