Static task
static1
Behavioral task
behavioral1
Sample
2024-04-15_b9c841099d0a6acbeb382bb466177615_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-15_b9c841099d0a6acbeb382bb466177615_icedid.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-15_b9c841099d0a6acbeb382bb466177615_icedid
-
Size
1.9MB
-
MD5
b9c841099d0a6acbeb382bb466177615
-
SHA1
7abb0ffdd33dce272515816bacbf959ad2733fb7
-
SHA256
9bcc85e3be32097c30133e0868b0b744ddbe1f489dabc23a3bdcfa64b681f604
-
SHA512
27e71dc63e1983d9644f58225e3f0ce36ddad1fe284edaa5cddd5824c1f5cbfe47411e249ffeb458dfbadad46a19c0a193d29b1ae45461216189e4ce9e7fa8dc
-
SSDEEP
24576:/tfbjHGZJQkgk9OhGJlEnKkI91qnxwXjBHjZnPow2D2uHAxg:5jHGZJp0Kl9dexwxZnPPQ2uHA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-15_b9c841099d0a6acbeb382bb466177615_icedid
Files
-
2024-04-15_b9c841099d0a6acbeb382bb466177615_icedid.exe windows:4 windows x86 arch:x86
eb7b2ef435d9f80b16c8e603e96446ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetOpenStatus
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
wsock32
connect
WSAStartup
WSACleanup
socket
ioctlsocket
htons
bind
htonl
listen
inet_addr
getsockname
accept
select
closesocket
shutdown
send
recv
setsockopt
inet_ntoa
gethostbyname
gethostname
mpr
WNetGetConnectionA
ssce4332
SSCE_OptionsDlg
SSCE_OptionsDlgTmplt
SSCE_EditLexDlg
SSCE_EditLexDlgTmplt
SSCE_OpenBlock
SSCE_CheckBlockDlgTmplt
SSCE_CloseBlock
SSCE_GetRegTreeName
SSCE_SetRegTreeName
SSCE_GetMainLexPath
SSCE_SetMainLexPath
SSCE_GetHelpFile
SSCE_SetHelpFile
SSCE_CheckBlock
SSCE_CheckBlockDlg
SSCE_GetMainLexFiles
SSCE_SetMainLexFiles
SSCE_GetSid
SSCE_GetOption
SSCE_SetOption
SSCE_GetBlockInfo
kernel32
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetFileTime
SetFileTime
GlobalFlags
GetCurrentThread
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTempPathA
SearchPathA
GetProcessVersion
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
MoveFileA
SetErrorMode
InterlockedExchange
RtlUnwind
GetACP
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
GetTimeZoneInformation
SetEnvironmentVariableA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapSize
TerminateProcess
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
GetCurrentProcessId
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadCodePtr
CompareStringA
CompareStringW
SetStdHandle
GetLocaleInfoW
UnlockFile
LockFile
GetCurrentProcess
DuplicateHandle
FormatMessageA
SetLastError
lstrcmpA
CreateEventA
SuspendThread
SetEvent
InterlockedDecrement
InterlockedIncrement
lstrcatA
lstrcmpiA
GlobalFindAtomA
VirtualAlloc
VirtualFree
IsBadReadPtr
CreateFileMappingA
MapViewOfFile
GetDiskFreeSpaceA
GlobalMemoryStatus
UnmapViewOfFile
WriteProfileStringA
IsBadWritePtr
FindResourceA
LoadResource
LockResource
CompareFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
CreateDirectoryA
GetDriveTypeA
GetVolumeInformationA
GetLogicalDrives
GetLocalTime
GetDateFormatA
GetTimeFormatA
LoadLibraryA
GetProcAddress
LocalAlloc
LocalFree
FlushFileBuffers
FreeLibrary
LocalUnlock
LocalLock
ExitThread
lstrcpyA
GetSystemTime
GlobalGetAtomNameA
GlobalDeleteAtom
SetEndOfFile
SetFilePointer
ReadFile
_lclose
GetFileAttributesA
OpenFile
CopyFileA
GetFileSize
LocalSize
GlobalSize
GetOEMCP
GetCPInfo
IsDBCSLeadByte
WideCharToMultiByte
MultiByteToWideChar
GetTempFileNameA
CreateFileA
WriteFile
CreateThread
ResumeThread
SetThreadPriority
Sleep
CreateProcessA
GetLastError
GlobalReAlloc
lstrcpynA
GetCurrentDirectoryA
GetProfileStringA
GetProfileIntA
GetShortPathNameA
SetCurrentDirectoryA
lstrlenW
FindFirstFileA
FindClose
FindNextFileA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GlobalAddAtomA
WinExec
GetVersionExA
GetModuleFileNameA
GetCurrentThreadId
GetVersion
SetFileAttributesA
GetTickCount
GetModuleHandleA
MulDiv
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrlenA
WritePrivateProfileStringA
GetWindowsDirectoryA
DeleteFileA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FindResourceExA
user32
GetDlgItem
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
GetForegroundWindow
GetLastActivePopup
GetMessageTime
RemovePropA
GetPropA
SetPropA
GetWindowTextA
GetWindowTextLengthA
SetWindowPlacement
GetScrollRange
SetScrollInfo
GetScrollInfo
MapWindowPoints
SendDlgItemMessageA
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
wvsprintfA
GetWindowDC
GrayStringA
ReuseDDElParam
UnpackDDElParam
DefFrameProcA
DefMDIChildProcA
MapDialogRect
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
IsClipboardFormatAvailable
GetWindowThreadProcessId
DestroyCursor
SetCursorPos
GetSysColorBrush
InvertRect
GetNextDlgGroupItem
PostThreadMessageA
BeginDeferWindowPos
EndDeferWindowPos
WaitMessage
GetMessagePos
IsMenu
SetMenu
PtInRect
LoadBitmapA
IsWindowEnabled
SetFocus
WindowFromDC
EnableScrollBar
ShowScrollBar
GetScrollPos
SystemParametersInfoA
GetDoubleClickTime
TabbedTextOutA
GetDesktopWindow
AdjustWindowRectEx
CopyRect
SetMenuDefaultItem
LoadIconA
GetMenu
DrawMenuBar
WinHelpA
GetMenuItemID
ModifyMenuA
RemoveMenu
LoadImageA
GetIconInfo
CreateIconIndirect
DestroyIcon
SetKeyboardState
GetAsyncKeyState
LoadMenuA
GetActiveWindow
ToAscii
IsWindow
CallWindowProcA
GetSubMenu
IsCharAlphaW
IsCharLowerW
CharUpperW
IsCharUpperW
CharLowerW
CharLowerBuffW
CharLowerA
IsCharAlphaA
IsCharLowerA
IsCharUpperA
GetClipboardData
SetClipboardData
OemToCharBuffA
DefWindowProcW
GetClassLongA
GetUpdateRect
BeginPaint
EndPaint
ScreenToClient
SetCapture
ClientToScreen
WindowFromPoint
GetClassNameA
CharToOemBuffA
GetTabbedTextExtentA
ValidateRect
ScrollWindow
HideCaret
DrawTextA
TabbedTextOutW
SetScrollPos
SetCaretPos
SetScrollRange
GetTabbedTextExtentW
CharNextA
SetClassLongA
SetWindowLongW
GetWindowLongW
DestroyCaret
CreateCaret
ShowCaret
SetCursor
ReleaseCapture
LoadCursorA
GetSysColor
GetCaretPos
OpenClipboard
EmptyClipboard
CloseClipboard
GetMenuStringA
DeleteMenu
InsertMenuA
GetMenuItemCount
GetWindow
LockWindowUpdate
UnhookWindowsHookEx
UnregisterClassA
FindWindowA
SetForegroundWindow
SetWindowsHookExA
RegisterClassA
CreateWindowExA
UpdateWindow
GetMessageA
GetMessageW
TranslateMessage
DispatchMessageW
DispatchMessageA
PeekMessageA
CallNextHookEx
SetWindowLongA
GetWindowLongA
DefWindowProcA
RegisterWindowMessageA
SetParent
GetDlgCtrlID
GetWindowRect
OffsetRect
CharLowerBuffA
GetClassInfoA
ChildWindowFromPointEx
LoadStringA
ShowWindow
MoveWindow
GetMenuDefaultItem
TrackPopupMenu
IntersectRect
SendMessageTimeoutA
GetMenuState
MessageBeep
SetWindowPos
BringWindowToTop
GetSystemMenu
GetSystemMetrics
wsprintfA
SetRectEmpty
GetFocus
CreatePopupMenu
GetCursorPos
AppendMenuA
GetKeyState
GetParent
IsWindowVisible
MessageBoxA
PostMessageA
SetActiveWindow
IsIconic
GetClientRect
SetRect
TranslateAcceleratorA
TranslateMDISysAccel
IsChild
DeferWindowPos
RegisterClipboardFormatA
GetDCEx
DestroyWindow
DrawIconEx
MenuItemFromPoint
InsertMenuItemA
SetMenuItemInfoA
GetTopWindow
DestroyMenu
DrawEdge
GetMenuItemInfoA
GetCapture
IsRectEmpty
FillRect
InvalidateRect
LoadAcceleratorsA
GetKeyboardState
DestroyAcceleratorTable
CreateAcceleratorTableA
MapVirtualKeyA
CopyAcceleratorTableA
KillTimer
SetTimer
IsZoomed
GetDC
ReleaseDC
EnableWindow
SendMessageA
DrawFocusRect
FrameRect
DrawStateA
DrawFrameControl
RedrawWindow
InflateRect
UnionRect
CharUpperA
EqualRect
gdi32
RectVisible
CreatePatternBrush
CreateFontA
CreateDIBitmap
Ellipse
RealizePalette
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetNearestColor
FillRgn
CombineRgn
CreateRectRgnIndirect
PatBlt
Polygon
Rectangle
CreateBitmap
DeleteDC
StartDocA
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
GetCurrentObject
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
SetTextAlign
GetCurrentPositionEx
GetViewportExtEx
GetWindowExtEx
PtVisible
Escape
CreateDCA
StretchDIBits
GetMapMode
SetRectRgn
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
EnumFontFamiliesExA
GetBkColor
LPtoDP
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
CopyMetaFileA
GetTextColor
DPtoLP
GetClipBox
SelectClipRgn
CreateRectRgn
MoveToEx
LineTo
TextOutA
SetBkColor
SetTextColor
ExtTextOutA
ExtTextOutW
GetTextExtentPoint32W
GetCharWidth32W
GetTextExtentPointA
SelectObject
GetTextMetricsA
GetCharWidthA
CreatePen
GetTextExtentPoint32A
CreateSolidBrush
DeleteObject
GetObjectA
GetDeviceCaps
CreateFontIndirectA
GetStockObject
comdlg32
ReplaceTextA
PrintDlgA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
ChooseFontA
GetFileTitleA
ChooseColorA
FindTextA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegSetValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegCloseKey
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
ShellExecuteA
Shell_NotifyIconA
ShellExecuteExA
DragQueryFileA
DragFinish
DragAcceptFiles
SHGetDesktopFolder
SHGetFileInfoA
ExtractIconA
SHChangeNotify
SHFileOperationA
comctl32
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Draw
ImageList_Destroy
ImageList_LoadImageA
ImageList_Remove
ImageList_SetImageCount
ImageList_Add
ImageList_EndDrag
ImageList_Create
ImageList_BeginDrag
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Duplicate
ImageList_Write
ImageList_Read
oledlg
ord8
ole32
CreateStreamOnHGlobal
OleDuplicateData
CoRevokeClassObject
CoRegisterMessageFilter
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
ReleaseStgMedium
CoTaskMemFree
DoDragDrop
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleLockRunning
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
olepro32
ord253
oleaut32
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysStringLen
SysFreeString
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 360KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ