Static task
static1
Behavioral task
behavioral1
Sample
2024-03-12_5ffe43a6ee970785e15ba499206ed7f8_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-12_5ffe43a6ee970785e15ba499206ed7f8_icedid.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-12_5ffe43a6ee970785e15ba499206ed7f8_icedid
-
Size
2.6MB
-
MD5
5ffe43a6ee970785e15ba499206ed7f8
-
SHA1
00fc19e41dcc861ab8644d9cff3840187da49f34
-
SHA256
b2b9b9b5c6870156d5fe5ae024a126815e9c66900e3bc16c41a34b7d062547eb
-
SHA512
f50d6667e5db2a176e6b49c97240904bff2895ecb73a809087d72dd781685bacfac0ea7e79eb363544925e1a2ac0df1b7ce7efd9c9e8ac7ff232a815f365b2d7
-
SSDEEP
24576:FHYq6LjwhGTktswtl29v+EVk1z86yb4t15wuwtj2eKBG709/fMABwUABgr3cfTA7:F4yhGgts0fpSBMAtqxwUiG0UgU9Y/px
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-12_5ffe43a6ee970785e15ba499206ed7f8_icedid
Files
-
2024-03-12_5ffe43a6ee970785e15ba499206ed7f8_icedid.exe windows:4 windows x86 arch:x86
9c040f50e2897393f5c3cff179b0408e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFont
GdipDeleteFont
GdipGetImageWidth
GdipGetImageHeight
GdipCreateMatrix
GdipRotateMatrix
GdipTranslateMatrix
GdipCreateSolidFill
GdipDeleteGraphics
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipAddPathString
GdipGetImageGraphicsContext
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipSetWorldTransform
GdipCreateStringFormat
GdipSetPageUnit
GdipDeletePath
GdipCreatePath
GdipSetPenMode
GdipDeleteStringFormat
GdipSetPageScale
GdipDrawRectangleI
GdipDeletePen
GdipCreatePen1
GdipDeleteBrush
GdipDeleteMatrix
GdipCloneImage
GdipDisposeImage
GdipLoadImageFromStream
GdipReleaseDC
GdipGetDC
GdipEndContainer
GdipBeginContainer2
GdipDrawImagePointRectI
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipCreateRegionRect
GdipDrawImagePointsRect
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromFile
GdipSaveImageToFile
GdipAlloc
GdipGetWorldTransform
GdipAddPathLine
GdipLoadImageFromFile
GdipIsVisibleRegionRect
GdipTransformRegion
GdipDeleteRegion
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipDrawRectangle
GdipCreateHBITMAPFromBitmap
GdipDrawImageRectI
GdipDrawImageRectRect
GdipSaveImageToStream
GdiplusStartup
GdiplusShutdown
GdipGetLogFontA
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipGetFamilyName
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipMeasureString
GdipDrawString
GdipFillRectangle
GdipNewInstalledFontCollection
GdipGetFontCollectionFamilyCount
GdipCloneBitmapAreaI
GdipSetClipRectI
GdipDrawImageRectRectI
GdipDrawCachedBitmap
GdipDrawPath
GdipCreateFromHDC
GdipTransformPath
GdipAddPathEllipse
GdipAddPathRectangle
GdipFree
GdipSetPenDashStyle
GdipTransformMatrixPoints
GdipInvertMatrix
GdipSetMatrixElements
GdipGetMatrixElements
GdipCreateBitmapFromGraphics
GdipGetImagePixelFormat
GdipDeleteCachedBitmap
GdipCreateCachedBitmap
GdipIsVisiblePathPoint
GdipBitmapSetResolution
GdipCreateBitmapFromScan0
GdipGetImageVerticalResolution
GdipGetImageHorizontalResolution
GdipFillRectangleI
GdipGetDpiY
GdipGetDpiX
GdipCreateLineBrushI
GdipScaleMatrix
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCloneBrush
GdipRestoreGraphics
GdipSaveGraphics
GdipSetClipRect
GdipDrawImageI
GdipDrawImageRect
GdipFillPath
GdipGraphicsClear
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
DeviceCapabilitiesA
GetPrinterA
GetPrinterDriverA
EnumPrintersA
GetJobA
imm32
ImmAssociateContext
imagehlp
MakeSureDirectoryPathExists
kernel32
GetStringTypeExA
FreeLibrary
lstrcmpA
CompareStringW
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
CloseHandle
SetThreadPriority
ResumeThread
GlobalAddAtomA
GetCurrentProcessId
FreeResource
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
MulDiv
LocalFree
FormatMessageA
CopyFileA
GetModuleFileNameW
InterlockedDecrement
GetPrivateProfileIntA
WritePrivateProfileStringA
SetFileTime
GetFileTime
GetTempFileNameA
GetFullPathNameA
GetDiskFreeSpaceA
MoveFileA
GetThreadLocale
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetShortPathNameA
CreateFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FindNextFileA
GetProfileIntA
VirtualProtect
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetCurrentDirectoryA
GlobalFlags
InterlockedIncrement
GetCPInfo
GetOEMCP
SetErrorMode
FindResourceExA
HeapFree
RtlUnwind
HeapReAlloc
RaiseException
ExitThread
CreateThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
SetStdHandle
GetFileType
HeapSize
HeapDestroy
HeapCreate
VirtualFree
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetDriveTypeA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
CompareStringA
GetVersion
InterlockedExchange
GlobalSize
DeleteFileA
lstrlenW
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
lstrcmpiA
Sleep
WaitForSingleObject
GlobalFree
CreateDirectoryA
GetVersionExA
GetTickCount
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
GetFileAttributesA
GlobalAlloc
GlobalLock
GlobalUnlock
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
CreateMutexA
GetLastError
SetThreadLocale
HeapAlloc
GetWindowsDirectoryA
GetTempPathA
SearchPathA
GetSystemDirectoryA
LoadLibraryExA
user32
AdjustWindowRectEx
RegisterClassA
GetClassInfoExA
CreateWindowExA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenu
ShowScrollBar
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetForegroundWindow
GetWindowTextA
GetWindowTextLengthA
SetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
IsChild
WinHelpA
SendDlgItemMessageA
RegisterWindowMessageA
CheckDlgButton
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
MoveWindow
RemoveMenu
InsertMenuA
AppendMenuA
GetMenuStringA
TranslateAcceleratorA
SetMenu
BringWindowToTop
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
MapDialogRect
SetWindowContextHelpId
RegisterClipboardFormatA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
GetDCEx
GetKeyNameTextA
MapVirtualKeyA
WindowFromPoint
GetAsyncKeyState
DeleteMenu
DestroyIcon
GetMenuItemInfoA
UnregisterClassA
GetSystemMenu
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
LockWindowUpdate
GetLastActivePopup
IsWindowEnabled
MessageBoxA
ShowOwnedPopups
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
PeekMessageA
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
EnableMenuItem
DefWindowProcA
PostQuitMessage
GrayStringA
EqualRect
DrawTextA
TabbedTextOutA
GetSysColorBrush
IsRectEmpty
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CharUpperA
LoadBitmapA
DrawFrameControl
LoadIconA
SystemParametersInfoA
GetWindowLongA
SetWindowLongA
GetCursorPos
DestroyMenu
GetClassInfoA
SetParent
KillTimer
SetTimer
IsWindow
RedrawWindow
OffsetRect
SetRect
GetSystemMetrics
GetDC
ReleaseDC
SetCursor
ReleaseCapture
LoadCursorA
SetCapture
GetCapture
ScreenToClient
UnionRect
IntersectRect
SetRectEmpty
PtInRect
GetParent
GetFocus
GetWindowRect
PostMessageA
FrameRect
FillRect
GetSysColor
InvalidateRect
GetClientRect
InflateRect
FindWindowExA
IsIconic
ShowWindow
SetForegroundWindow
SendMessageA
EnableWindow
UpdateWindow
IsZoomed
GetIconInfo
CopyImage
EnableScrollBar
CopyIcon
SetCursorPos
DestroyAcceleratorTable
SetWindowRgn
DrawFocusRect
LoadImageA
DrawIconEx
DrawStateA
DrawEdge
WaitMessage
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableA
EnumChildWindows
SetClassLongA
GetMenuDefaultItem
GetUpdateRect
IsMenu
SetMenuDefaultItem
CharUpperBuffA
IsCharLowerA
MapVirtualKeyExA
SubtractRect
GetWindowRgn
DestroyCursor
IsClipboardFormatAvailable
CreateMenu
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
FindWindowA
CallWindowProcA
SetWindowPos
GetWindowPlacement
GetWindow
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
DrawTextExA
GetDlgCtrlID
DrawIcon
GetNextDlgTabItem
EndDialog
CheckMenuItem
GetWindowThreadProcessId
CopyRect
gdi32
GetWindowOrgEx
LPtoDP
CreateEllipticRgn
GetViewportOrgEx
GetSystemPaletteEntries
GetNearestPaletteIndex
SetPaletteEntries
ExtFloodFill
GetStockObject
FrameRgn
FillRgn
PtInRegion
GetPaletteEntries
CreatePalette
RoundRect
Ellipse
StretchBlt
RealizePalette
GetDIBits
CreateRoundRectRgn
OffsetRgn
Polygon
Polyline
CreatePolygonRgn
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
GetDeviceCaps
DeleteDC
CreateDCA
CreateFontIndirectA
DeleteObject
GetObjectA
GetTextFaceA
CreateDIBSection
GetBoundsRect
CreatePen
GetTextMetricsA
GetTextExtentPoint32A
CreateCompatibleBitmap
CreateCompatibleDC
EnumFontFamiliesExA
GetRgnBox
GetTextColor
GetBkColor
CombineRgn
SetRectRgn
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
DPtoLP
CreateRectRgnIndirect
PatBlt
Rectangle
SetTextAlign
BitBlt
GetPixel
SetPixel
SetPixelV
GetMapMode
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
CopyMetaFileA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
ExcludeClipRect
SelectClipRgn
IntersectClipRect
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
StartDocA
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
LineTo
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreateSolidBrush
CreateHatchBrush
MoveToEx
comdlg32
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
advapi32
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegQueryValueExA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHAppBarMessage
ExtractIconA
SHGetFileInfoA
DragQueryFileA
DragFinish
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetSpecialFolderPathA
SHGetMalloc
shlwapi
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathIsUNCA
oledlg
ord8
ole32
CreateStreamOnHGlobal
CoTaskMemFree
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
GetHGlobalFromStream
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
StgCreateDocfileOnILockBytes
CoGetClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
OleLockRunning
DoDragDrop
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
oleaut32
VariantClear
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VarUdateFromDate
winmm
PlaySoundA
comctl32
ImageList_Destroy
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_Create
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_DrawEx
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 844KB - Virtual size: 842KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ