Static task
static1
Behavioral task
behavioral1
Sample
2024-03-10_9fe632023f1ee1cd6d4d5239a72fa999_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-10_9fe632023f1ee1cd6d4d5239a72fa999_icedid.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-10_9fe632023f1ee1cd6d4d5239a72fa999_icedid
-
Size
1.3MB
-
MD5
9fe632023f1ee1cd6d4d5239a72fa999
-
SHA1
496cad9b0d7ae282a7e85b1da970e0fa5247a39d
-
SHA256
5a9798c2c4afa6f91a3006135dea82358c6edfe4aab2ca759b442e05d6f96114
-
SHA512
27c3921a92a5332113a1e9ea09f2095970bafe48f04858be4194e2d11e1ef0b76127b2d1cba522d46d0175e210724665f66e951ef53f944c64a19977f572cbe1
-
SSDEEP
24576:C1JsmdrudX8i6TcyL6KAK+fGdl3psSQwSKkV0dzpbA7:aD3AyL6Edl3ps6SMzpbG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-10_9fe632023f1ee1cd6d4d5239a72fa999_icedid
Files
-
2024-03-10_9fe632023f1ee1cd6d4d5239a72fa999_icedid.exe windows:4 windows x86 arch:x86
c7ca6d066e8137b7f307b61cfe44c7f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
wglCreateContext
wglGetCurrentContext
wglMakeCurrent
wglDeleteContext
glClearColor
glClear
glFlush
glLineStipple
glBlendFunc
glPointSize
glDisable
glBegin
glVertex3f
glEnd
glViewport
glColor3fv
glMatrixMode
glOrtho
glLineWidth
glEnable
glFrontFace
glCullFace
glLightfv
glColorMaterial
glDepthFunc
glLoadIdentity
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
dinput8
DirectInput8Create
ole32
CoRegisterMessageFilter
CoInitialize
CoSetProxyBlanket
CoCreateInstance
OleRun
CoRevokeClassObject
CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
CreateBindCtx
ReleaseStgMedium
CoTaskMemAlloc
StringFromCLSID
CoTreatAsClass
OleDuplicateData
CLSIDFromProgID
CLSIDFromString
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleSave
WriteClassStm
OleSaveToStream
CreateStreamOnHGlobal
OleLockRunning
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
StgOpenStorageOnILockBytes
GetHGlobalFromILockBytes
OleSetContainedObject
OleCreateFromFile
OleCreateLinkToFile
OleGetIconOfClass
CreateItemMoniker
CreateGenericComposite
StgCreateDocfile
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
OleIsRunning
OleSetMenuDescriptor
GetRunningObjectTable
CoLockObjectExternal
OleRegEnumVerbs
OleRegGetMiscStatus
CoDisconnectObject
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleGetClipboard
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
kernel32
GetTempFileNameW
GetDiskFreeSpaceW
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetFileTime
SetErrorMode
GetCurrentDirectoryW
GetTickCount
HeapAlloc
GetStartupInfoW
RtlUnwind
RaiseException
HeapReAlloc
SetStdHandle
GetFileType
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetFileAttributesW
InterlockedIncrement
GetVersionExW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
GetShortPathNameW
GetFullPathNameW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetThreadLocale
GetStringTypeExW
DeleteFileW
MoveFileW
GetModuleHandleA
lstrlenA
lstrcmpA
GetVersion
GlobalGetAtomNameW
GetCurrentProcessId
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
GetVersionExA
FreeResource
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
LoadLibraryA
GetModuleFileNameW
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetVolumeInformationW
GetLocalTime
lstrcpynW
lstrcmpW
CreateFileW
CloseHandle
GetLastError
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetFileTime
FileTimeToSystemTime
GetTempPathW
CreateThread
SetThreadPriority
lstrlenW
Sleep
WideCharToMultiByte
InterlockedDecrement
GetProcessHeap
HeapFree
MultiByteToWideChar
lstrcpyW
FindResourceW
LoadResource
LockResource
SizeofResource
user32
SendNotifyMessageW
CopyAcceleratorTableW
UnregisterClassW
GetDCEx
LockWindowUpdate
CreateMenu
PostThreadMessageW
GetTabbedTextExtentA
RegisterClipboardFormatW
CharNextW
InvalidateRgn
GetNextDlgGroupItem
InflateRect
PostQuitMessage
CharUpperW
SetWindowRgn
DrawIcon
FindWindowW
GetCursorPos
WindowFromPoint
SetRect
GetSystemMenu
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
GetWindowThreadProcessId
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemInt
GetDlgItemInt
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
InSendMessage
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
GetScrollRange
SetForegroundWindow
ShowScrollBar
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDC
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
RemoveMenu
GetDlgCtrlID
SetScrollRange
SetScrollPos
UnregisterClassA
EnableWindow
SendMessageW
wsprintfW
LoadImageW
UpdateWindow
InvalidateRect
OffsetRect
GetScrollPos
ChildWindowFromPointEx
ReleaseDC
GetCapture
SystemParametersInfoW
ScreenToClient
IsZoomed
GetMenu
GetSubMenu
DeleteMenu
IsRectEmpty
CopyRect
GetSysColorBrush
FillRect
DrawIconEx
GetSysColor
GetIconInfo
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
ValidateRect
CountClipboardFormats
IsClipboardFormatAvailable
MessageBeep
WaitMessage
UnionRect
DestroyCursor
SetCursorPos
GetTopWindow
GetMenuItemInfoW
SetCursor
LoadCursorW
GetWindowRect
GetClientRect
ClientToScreen
IsWindowVisible
RedrawWindow
SetCapture
GetParent
SetParent
ReleaseCapture
DestroyIcon
KillTimer
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
GetSystemMetrics
SetTimer
LoadBitmapW
GetDlgItem
IsDlgButtonChecked
SetDlgItemTextW
CheckDlgButton
PostMessageW
GetDlgItemTextW
IsWindow
ModifyMenuW
gdi32
PatBlt
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
SetBkMode
CreateRectRgnIndirect
SetROP2
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
SetPolyFillMode
CreateDCW
SetTextAlign
CreatePen
CreateSolidBrush
GetBkColor
CopyMetaFileW
DPtoLP
LPtoDP
Ellipse
CreateFontIndirectW
GetTextExtentPoint32W
GetCharWidthW
StretchDIBits
GetTextMetricsW
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetViewportOrgEx
Rectangle
GetWindowOrgEx
SetRectRgn
CombineRgn
GetMapMode
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetTextAlign
GetTextFaceW
GetTextExtentPoint32A
GetRgnBox
GetDeviceCaps
TextOutW
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontW
DeleteObject
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
GetStockObject
SwapBuffers
LineTo
SelectObject
MoveToEx
CreateEllipticRgn
GetObjectW
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
StartDocW
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
comdlg32
GetFileTitleW
GetOpenFileNameW
winspool.drv
ClosePrinter
GetJobW
DocumentPropertiesW
OpenPrinterW
advapi32
SetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyW
RegSetValueW
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyW
RegSetValueExW
RegCloseKey
GetFileSecurityW
shell32
ExtractIconW
SHGetSpecialFolderPathW
DragFinish
DragQueryFileW
SHGetFileInfoW
DragAcceptFiles
shlwapi
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathRemoveExtensionW
oledlg
OleUIAddVerbMenuW
OleUIObjectPropertiesW
OleUIInsertObjectW
OleUIEditLinksW
OleUIPasteSpecialW
OleUIBusyW
oleaut32
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
GetErrorInfo
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ