Static task
static1
Behavioral task
behavioral1
Sample
2024-03-05_7949b925d7e008945949488fc83460d7_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-05_7949b925d7e008945949488fc83460d7_icedid.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-05_7949b925d7e008945949488fc83460d7_icedid
-
Size
596KB
-
MD5
7949b925d7e008945949488fc83460d7
-
SHA1
74c28d62251231b42daf30ea3be49ef53e012709
-
SHA256
ff5c34854dfcfc7d8e7891d68f5d11a78c30b122679ddb7c5dffe099db5d9b55
-
SHA512
92a18c203bb84bd95eda8406a3aa416cf0b2bbf83fa75aff2caee273266d4e73635214d48255bcab3419064be3008e648e665666037ce911a6145edbc6e138c0
-
SSDEEP
6144:PiOIX9e1z0UstgInIJ/cvaqhIYvCwih9PCZdRa8QbBZKehWQ1qoXUDXQ8tix5ubJ:JCOshIFcvxXCRCIFjdEDjxuJwp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-05_7949b925d7e008945949488fc83460d7_icedid
Files
-
2024-03-05_7949b925d7e008945949488fc83460d7_icedid.exe windows:4 windows x86 arch:x86
fc4316c98078fd39cb4b0766a936a128
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
FileTimeToLocalFileTime
GetFileAttributesA
SetErrorMode
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitThread
CreateThread
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
ExitProcess
HeapSize
FileTimeToSystemTime
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetACP
IsValidCodePage
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetThreadLocale
GetOEMCP
GetCPInfo
GlobalFlags
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
OpenMutexA
CreateMutexA
ReleaseMutex
DeleteFileA
RemoveDirectoryA
GetVersionExA
GetLongPathNameA
MoveFileExA
lstrcpyA
GetShortPathNameA
WritePrivateProfileStringA
GetModuleFileNameA
GetTempPathA
CopyFileA
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
LoadLibraryA
GetProcAddress
FreeLibrary
GetDiskFreeSpaceA
CreateDirectoryA
WaitForSingleObject
GetFileTime
SetFileTime
ResetEvent
IsDBCSLeadByte
CreateEventA
SetEvent
FindResourceA
LoadResource
LockResource
SizeofResource
GetLogicalDriveStringsA
GetDriveTypeA
SetCurrentDirectoryA
lstrlenA
CompareStringW
CompareStringA
GetFileSize
SetLastError
SetFilePointer
WriteFile
ReadFile
CreateFileA
FormatMessageA
LocalFree
CloseHandle
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
user32
RegisterClipboardFormatA
PostThreadMessageA
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
SetCursor
PostQuitMessage
ReleaseDC
GetDC
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
IsWindowVisible
UpdateWindow
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetParent
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
UnregisterClassA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
ReleaseCapture
SetCapture
CheckMenuItem
DestroyMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetSystemMetrics
LoadIconA
SetForegroundWindow
SetActiveWindow
GetClientRect
IsIconic
DrawIcon
SendDlgItemMessageA
ShowWindow
GetDlgItem
SendMessageA
EnableWindow
CharUpperA
MessageBoxA
GetFocus
gdi32
ExtSelectClipRgn
DeleteDC
GetStockObject
ScaleWindowExtEx
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
GetWindowExtEx
GetViewportExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
GetDeviceCaps
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
PtVisible
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteValueA
RegQueryInfoKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetMalloc
SHGetFileInfoA
ShellExecuteA
ShellExecuteExA
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemFree
oleaut32
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
ws2_32
WSASetLastError
WSACleanup
WSAStartup
Sections
.text Size: 244KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 276KB - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ