Static task
static1
Behavioral task
behavioral1
Sample
2024-02-29_d7154a0254cc0c49409c095ea63edb9e_icedid.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-02-29_d7154a0254cc0c49409c095ea63edb9e_icedid.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-02-29_d7154a0254cc0c49409c095ea63edb9e_icedid
-
Size
1.7MB
-
MD5
d7154a0254cc0c49409c095ea63edb9e
-
SHA1
652c9cecf8ca7fe21e2c57c835627dfb27fd0e1e
-
SHA256
4ed45b77c20fff6f2aa39d7546d11ad01cb65c2b220a6ec0af05d24b14937575
-
SHA512
fde26561d125cdd7424414e781393d01c9f76753cf48e2ff93720e9d6584f3544d2c6fec10e6620b71e1948c9a7bb21c73e7802c4bec080d628ccc1553d29572
-
SSDEEP
24576:uHnmlJblvSdFP8THlhqe1kh8eOUvAK6kMU0MG0aw/FODVQLeBtaZMbPS8BehyDlr:QmHz0E8AK6kMfSibPrecW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-29_d7154a0254cc0c49409c095ea63edb9e_icedid
Files
-
2024-02-29_d7154a0254cc0c49409c095ea63edb9e_icedid.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 530KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
.data
-
.rdata
-
.rsrc/0/ICON/IDI_ICON2
-
.rsrc/1033/MANIFEST/1.xml
-
.rsrc/2052/BITMAP/0D.bmp
-
.rsrc/2052/BITMAP/0U.bmp
-
.rsrc/2052/BITMAP/1D.bmp
-
.rsrc/2052/BITMAP/1U.bmp
-
.rsrc/2052/BITMAP/2D.bmp
-
.rsrc/2052/BITMAP/2U.bmp
-
.rsrc/2052/BITMAP/30994.bmp
-
.rsrc/2052/BITMAP/30996.bmp
-
.rsrc/2052/BITMAP/3D.bmp
-
.rsrc/2052/BITMAP/3U.bmp
-
.rsrc/2052/BITMAP/4D.bmp
-
.rsrc/2052/BITMAP/4U.bmp
-
.rsrc/2052/BITMAP/5D.bmp
-
.rsrc/2052/BITMAP/5U.bmp
-
.rsrc/2052/BITMAP/6D.bmp
-
.rsrc/2052/BITMAP/6U.bmp
-
.rsrc/2052/BITMAP/7D.bmp
-
.rsrc/2052/BITMAP/7U.bmp
-
.rsrc/2052/BITMAP/8D.bmp
-
.rsrc/2052/BITMAP/8U.bmp
-
.rsrc/2052/BITMAP/9D.bmp
-
.rsrc/2052/BITMAP/9U.bmp
-
.rsrc/2052/BITMAP/ADDD.bmp
-
.rsrc/2052/BITMAP/ADDU.bmp
-
.rsrc/2052/BITMAP/BACKD.bmp
-
.rsrc/2052/BITMAP/BACKU.bmp
-
.rsrc/2052/BITMAP/CD.bmp
-
.rsrc/2052/BITMAP/CED.bmp
-
.rsrc/2052/BITMAP/CEU.bmp
-
.rsrc/2052/BITMAP/CHEND.bmp
-
.rsrc/2052/BITMAP/CHENU.bmp
-
.rsrc/2052/BITMAP/CU.bmp
-
.rsrc/2052/BITMAP/DAOSHUD.bmp
-
.rsrc/2052/BITMAP/DAOSHUU.bmp
-
.rsrc/2052/BITMAP/DIVIDED.bmp
-
.rsrc/2052/BITMAP/DIVIDEU.bmp
-
.rsrc/2052/BITMAP/EQUALD.bmp
-
.rsrc/2052/BITMAP/EQUALU.bmp
-
.rsrc/2052/BITMAP/PERCENTD.bmp
-
.rsrc/2052/BITMAP/PERCENTU.bmp
-
.rsrc/2052/BITMAP/POINTD.bmp
-
.rsrc/2052/BITMAP/POINTU.bmp
-
.rsrc/2052/BITMAP/REDUCED.bmp
-
.rsrc/2052/BITMAP/REDUCEU.bmp
-
.rsrc/2052/BITMAP/SIGND.bmp
-
.rsrc/2052/BITMAP/SIGNU.bmp
-
.rsrc/2052/BITMAP/SQRTD.bmp
-
.rsrc/2052/BITMAP/SQRTU.bmp
-
.rsrc/2052/CURSOR/10
-
.rsrc/2052/CURSOR/11
-
.rsrc/2052/CURSOR/12
-
.rsrc/2052/CURSOR/13
-
.rsrc/2052/CURSOR/14
-
.rsrc/2052/CURSOR/15
-
.rsrc/2052/CURSOR/16
-
.rsrc/2052/CURSOR/17
-
.rsrc/2052/CURSOR/18
-
.rsrc/2052/CURSOR/3
-
.rsrc/2052/CURSOR/4
-
.rsrc/2052/CURSOR/5
-
.rsrc/2052/CURSOR/6
-
.rsrc/2052/CURSOR/7
-
.rsrc/2052/CURSOR/8
-
.rsrc/2052/CURSOR/9
-
.rsrc/2052/DIALOG/100
-
.rsrc/2052/DIALOG/30734
-
.rsrc/2052/GROUP_CURSOR/30977
-
.rsrc/2052/GROUP_CURSOR/30998
-
.rsrc/2052/GROUP_CURSOR/30999
-
.rsrc/2052/GROUP_CURSOR/31000
-
.rsrc/2052/GROUP_CURSOR/31001
-
.rsrc/2052/GROUP_CURSOR/31002
-
.rsrc/2052/GROUP_CURSOR/31003
-
.rsrc/2052/GROUP_CURSOR/31004
-
.rsrc/2052/GROUP_CURSOR/31005
-
.rsrc/2052/GROUP_CURSOR/31006
-
.rsrc/2052/GROUP_CURSOR/31007
-
.rsrc/2052/GROUP_CURSOR/31008
-
.rsrc/2052/GROUP_CURSOR/31009
-
.rsrc/2052/GROUP_CURSOR/31010
-
.rsrc/2052/GROUP_CURSOR/31011
-
.rsrc/2052/GROUP_ICON/182
-
.rsrc/2052/ICON/1.ico
-
.rsrc/2052/ICON/2.ico
-
.rsrc/2052/string.txt
-
.rsrc/2052/version.txt
-
.text