Static task
static1
Behavioral task
behavioral1
Sample
2024-04-09_6b8aed0de6d21b8d2267160582702cf5_icedid_magniber.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-04-09_6b8aed0de6d21b8d2267160582702cf5_icedid_magniber.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-09_6b8aed0de6d21b8d2267160582702cf5_icedid_magniber
-
Size
11.3MB
-
MD5
6b8aed0de6d21b8d2267160582702cf5
-
SHA1
0f2dc12d9dca1abee7fc1cf66911f2f7fa87e012
-
SHA256
bd25b23e0363d8686fc071a97cacb866059c7269b36d02cf6e58ccdea5488e69
-
SHA512
1e19b95b148ee96b3c5e6f3332ff2b151ed6b7a0529a8b7302e4b2cecb17af290a9da3917cb7d32866c8c9e8fdbdfc92955a3243c0909308c4defba3b3d68d88
-
SSDEEP
196608:8Y3dfcPIJ/k06aoBIgaXUZHHrfu2zD2s3moXiNQ+ud+SnI2WirJAJItBq8DNb+C/:8xwNk0NaTBzSyStud+SI2XuJaqqNb102
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-09_6b8aed0de6d21b8d2267160582702cf5_icedid_magniber
Files
-
2024-04-09_6b8aed0de6d21b8d2267160582702cf5_icedid_magniber.exe windows:6 windows x86 arch:x86
c32b51fd95828808236719b22bc0aa90
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
NdrConformantArrayBufferSize
NdrNonEncapsulatedUnionMemorySize
NdrInterfacePointerUnmarshall
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
CreateFileW
SetConsoleCtrlHandler
SetEnvironmentVariableW
FreeEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
EnumSystemLocalesW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStdHandle
ExitProcess
GetFileType
SetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
VirtualQuery
VirtualAlloc
GetSystemInfo
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
CompareStringEx
GetStringTypeW
GetLocaleInfoEx
LCMapStringEx
OutputDebugStringW
SearchPathA
GetProfileIntA
GetTempPathA
GetUserDefaultLCID
GetCommandLineW
GetEnvironmentStringsW
GetDiskFreeSpaceA
GetTempFileNameW
SetEndOfFile
SetFileApisToANSI
IsDebuggerPresent
DecodeSystemPointer
CloseHandle
GetLastError
FlsFree
InitializeCriticalSection
InitializeConditionVariable
CancelWaitableTimer
CreateWaitableTimerExW
Sleep
CreateProcessA
SetPriorityClass
GetThreadContext
GetNativeSystemInfo
VirtualQueryEx
FindResourceExW
GetModuleHandleExA
GetBinaryTypeW
GlobalDeleteAtom
GetFirmwareEnvironmentVariableA
EnumResourceLanguagesA
BeginUpdateResourceW
GlobalGetAtomNameW
GetProfileSectionW
SetDllDirectoryA
FindFirstVolumeMountPointW
GetVolumePathNameA
UnregisterApplicationRestart
GetOEMCP
CompareStringA
LCIDToLocaleName
IsValidLocale
GetCalendarInfoEx
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceA
WideCharToMultiByte
GetWindowsDirectoryA
ReplaceFileA
GetTempFileNameA
VerifyVersionInfoA
VerSetConditionMask
SystemTimeToTzSpecificLocalTime
SetFileAttributesA
GetFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
SetErrorMode
GetCPInfo
VirtualProtect
FileTimeToSystemTime
GetAtomNameA
GetStringTypeExA
GetThreadLocale
MoveFileA
GetShortPathNameA
LoadLibraryExA
DuplicateHandle
GetVolumeInformationA
UnlockFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
FreeLibrary
LoadLibraryA
WinExec
GetLocaleInfoW
GetACP
lstrcmpiA
LocalUnlock
LocalLock
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalFlags
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CreateSemaphoreA
WaitForMultipleObjects
CreateMutexA
ReleaseMutex
ReleaseSemaphore
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
FormatMessageA
MulDiv
GlobalSize
GetCurrentProcessId
GlobalAddAtomA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GlobalAlloc
GetVersionExA
GetCurrentThread
ResumeThread
SuspendThread
SetThreadPriority
CreateEventA
SetEvent
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryW
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
GetSystemDirectoryW
SetLastError
EncodePointer
OutputDebugStringA
LocalFree
LocalAlloc
CopyFileA
FindNextFileA
FindFirstFileA
FindClose
GetCurrentThreadId
MultiByteToWideChar
GetVolumeInformationW
SystemTimeToFileTime
SetFileTime
SetFilePointer
LocalFileTimeToFileTime
GetFileAttributesA
GetCurrentDirectoryA
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
RaiseException
DecodePointer
TerminateThread
Process32Next
OpenFileMappingA
UnmapViewOfFile
MapViewOfFile
lstrcpynA
ReadFile
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetTickCount
GetCurrentProcess
WaitForSingleObject
WriteFile
DeleteFileA
CreateFileA
lstrlenA
lstrcatA
lstrcpyA
WriteConsoleW
user32
IsCharLowerA
GetKeyboardLayout
PostThreadMessageA
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
UnionRect
FrameRect
SetCursorPos
GetSystemMenu
LoadMenuW
IsZoomed
DrawFrameControl
DrawEdge
SetParent
SetWindowRgn
SetClassLongA
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DrawIconEx
IsRectEmpty
DrawFocusRect
GetNextDlgGroupItem
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
LoadImageA
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
GetMenuDefaultItem
CreatePopupMenu
MapDialogRect
GetAsyncKeyState
GetMenuItemInfoA
DestroyMenu
LoadImageW
TrackMouseEvent
LoadCursorW
ReleaseCapture
SetCapture
WaitMessage
CharUpperA
DestroyIcon
DeleteMenu
CopyImage
GetDialogBaseUnits
SetRect
MessageBeep
GetTabbedTextExtentA
IsClipboardFormatAvailable
GetSysColorBrush
RealChildWindowFromPoint
MsgWaitForMultipleObjectsEx
WindowFromPoint
IntersectRect
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
GetWindow
GetTopWindow
GetKeyboardState
GetClassLongA
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ToAsciiEx
MessageBoxA
SendMessageA
IsIconic
EnableWindow
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
RegisterWindowMessageA
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
GetUpdateRect
GetDCEx
EnumChildWindows
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
SendNotifyMessageA
MonitorFromRect
CreateMenu
WindowFromDC
GetWindowRgn
GetSystemMetrics
DrawIcon
GetClientRect
GetWindowRect
GetSysColor
LoadIconW
GetMessagePos
IsWindow
SetTimer
KillTimer
GetDC
ReleaseDC
InvalidateRect
SetCursor
ScreenToClient
InflateRect
SetRectEmpty
PtInRect
SetWindowLongA
GetParent
LoadCursorA
CopyIcon
wsprintfA
PostMessageA
UnregisterClassA
AttachThreadInput
SetForegroundWindow
AllowSetForegroundWindow
LockSetForegroundWindow
SystemParametersInfoA
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
LoadBitmapW
DestroyWindow
CreateDialogIndirectParamA
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
MapVirtualKeyExA
DestroyCursor
GetTabbedTextExtentW
GetClassNameA
InSendMessage
IsWindowEnabled
SetActiveWindow
GetWindowLongA
GetDesktopWindow
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
IsWindowVisible
GetKeyState
ValidateRect
GetCursorPos
SetWindowsHookExA
CallNextHookEx
PostQuitMessage
ShowOwnedPopups
GetWindowThreadProcessId
GetLastActivePopup
GetKeyNameTextA
MapVirtualKeyA
CopyRect
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
UnhookWindowsHookEx
DrawTextA
DrawTextExA
GrayStringA
TabbedTextOutA
GetWindowDC
BeginPaint
EndPaint
ClientToScreen
FillRect
SendDlgItemMessageA
OffsetRect
gdi32
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
TextOutA
ExtTextOutA
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectA
Escape
DPtoLP
GetTextMetricsA
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
CreateCompatibleBitmap
CreateFontA
StretchDIBits
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
EnumFontFamiliesExA
Rectangle
GetRgnBox
OffsetRgn
GetCurrentObject
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
GetClipBox
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreateEllipticRgnIndirect
ExcludeClipRect
FloodFill
GetCharWidthA
GetMapMode
GetMetaFileW
SetDCBrushColor
UpdateColors
PolyTextOutW
GetTextExtentPoint32A
GetObjectA
CreateBitmap
CreateRectRgnIndirect
PatBlt
CopyMetaFileA
CreateDCA
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateDIBPatternBrushPt
CreateHatchBrush
SetRectRgn
CreatePen
msimg32
TransparentBlt
AlphaBlend
winspool.drv
OpenPrinterA
DocumentPropertiesA
GetJobA
ClosePrinter
advapi32
GetFileSecurityA
RegEnumKeyExA
RegEnumValueA
RegSetValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
CryptSetKeyParam
CryptReleaseContext
RegCreateKeyExA
RegOpenKeyExW
StartServiceA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
ChangeServiceConfig2A
RegUnLoadKeyA
RegLoadKeyA
LookupPrivilegeValueA
OpenProcessToken
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
SetFileSecurityA
shell32
SHAddToRecentDocs
ExtractIconA
SHGetFileInfoA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
DragFinish
ShellExecuteA
SHGetMalloc
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteExA
shlwapi
PathAppendA
PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW
uxtheme
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetThemePartSize
IsAppThemed
ole32
StgCreateDocfile
OleLockRunning
OleSetMenuDescriptor
RevokeDragDrop
StgIsStorageFile
CreateILockBytesOnHGlobal
CreateFileMoniker
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleRegGetMiscStatus
OleRegEnumVerbs
StgCreateDocfileOnILockBytes
StgOpenStorage
CoInitialize
GetHGlobalFromILockBytes
CreateGenericComposite
CreateItemMoniker
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
WriteClassStm
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
PropVariantCopy
OleGetIconOfClass
OleRun
CreateStreamOnHGlobal
CoInitializeEx
CLSIDFromString
StringFromGUID2
CoDisconnectObject
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoCreateInstance
CoCreateGuid
CoUninitialize
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
OleIsRunning
CoGetMalloc
OleQueryLinkFromData
OleQueryCreateFromData
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID
StgOpenStorageOnILockBytes
oleaut32
VariantClear
VariantChangeType
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysStringLen
SysReAllocStringLen
SystemTimeToVariantTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetDim
SysAllocStringByteLen
SysStringByteLen
VariantTimeToSystemTime
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
SysAllocString
VariantInit
SysFreeString
SafeArrayGetElemsize
SysAllocStringLen
SafeArrayGetUBound
oledlg
ord8
wininet
InternetGetLastResponseInfoA
InternetGetConnectedStateExA
InternetEnumPerSiteCookieDecisionA
secur32
AddCredentialsW
AddSecurityPackageA
DeleteSecurityContext
SetCredentialsAttributesA
gdiplus
GdipDrawImageI
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipGetImagePaletteSize
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 602KB - Virtual size: 601KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8.0MB - Virtual size: 8.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ