Static task
static1
Behavioral task
behavioral1
Sample
2024-03-20_b78d53ae565c726ec8ea06b75cacbb7c_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-20_b78d53ae565c726ec8ea06b75cacbb7c_icedid.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-03-20_b78d53ae565c726ec8ea06b75cacbb7c_icedid
-
Size
212KB
-
MD5
b78d53ae565c726ec8ea06b75cacbb7c
-
SHA1
a6a93685fdf7049e69935db9ce7f2126d8656418
-
SHA256
099822bd9fccfb6df1443d313fa7eb8b3d81e159d822221474ca07de53768803
-
SHA512
7849dd2aa8ecf944a519f930a82ca17e87f6c1e2d92fb8529c171d55c127eb31713eecee6a20118b3477c86afdc2ed5faaf4d1f2d024d5f912ae405b945780f5
-
SSDEEP
3072:iYDKRaRizYQ2Ie6kwpBASiHT1eCkQAXS3MYbMdrb8Zrk6Es1tNd5T:iYlj6kwpBAJz1eQZ3Mn9bUrkKdV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-03-20_b78d53ae565c726ec8ea06b75cacbb7c_icedid
Files
-
2024-03-20_b78d53ae565c726ec8ea06b75cacbb7c_icedid.exe windows:4 windows x86 arch:x86
3c171927af349c66f105d75c4590f151
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
clcapiw2
ord72
ord123
ord122
ord92
ord14
ord13
ord1
ord104
ord105
ord106
ord71
ord102
ord292
ord291
ord293
ord51
ord54
ord53
ord2
ord15
ws2_32
WSAStartup
WSACleanup
listen
bind
htons
htonl
socket
shutdown
closesocket
accept
WSAGetLastError
send
recv
kernel32
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
CreateFileA
RaiseException
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
GetProcessHeap
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetOEMCP
GetACP
Sleep
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetModuleHandleA
GetCommandLineA
InterlockedExchange
MultiByteToWideChar
WideCharToMultiByte
GetLastError
GetVersion
CompareStringA
lstrlenA
SizeofResource
LockResource
IsDebuggerPresent
LoadResource
FindResourceA
GetCPInfo
GlobalFlags
WritePrivateProfileStringA
CloseHandle
GlobalAddAtomA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GetThreadLocale
GlobalGetAtomNameA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
GetCurrentProcessId
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
lstrcmpA
FreeLibrary
GlobalDeleteAtom
SetErrorMode
GetProcAddress
GetModuleFileNameA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
user32
ShowWindow
DestroyMenu
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
GetForegroundWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
ClientToScreen
GetSubMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetWindowTextA
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
UnregisterClassA
SetWindowTextA
GetMenuItemCount
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageA
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GetSystemMetrics
LoadCursorA
UnhookWindowsHookEx
MessageBoxA
EnableWindow
CopyRect
gdi32
SetMapMode
GetClipBox
DeleteObject
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreateBitmap
GetStockObject
SetTextColor
SetBkColor
RestoreDC
SaveDC
PtVisible
GetDeviceCaps
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ