Static task
static1
Behavioral task
behavioral1
Sample
2024-04-17_dc49d906e40efebb94926bf8723a3a22_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-17_dc49d906e40efebb94926bf8723a3a22_icedid.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-17_dc49d906e40efebb94926bf8723a3a22_icedid
-
Size
1.3MB
-
MD5
dc49d906e40efebb94926bf8723a3a22
-
SHA1
16c95327107db94cce53335434e047c237adf7a7
-
SHA256
3b562e9d8541185db0f900edf3bbac3539d192b423f9fd108a4f391c49a27542
-
SHA512
4e6f6083355eb52e85e97e0d6efeeff2051df9ed91c6764ef08cb77a49c8896011318bd68f61646750bd1016433398bb24c544416d317bfd162efb0bd63e9342
-
SSDEEP
24576:bk12WbNsBMA34xOEy4UW2T0kJuhi9O/R2dbrTR:A1xbWMAgOEyTuE9O/UNr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-17_dc49d906e40efebb94926bf8723a3a22_icedid
Files
-
2024-04-17_dc49d906e40efebb94926bf8723a3a22_icedid.exe windows:4 windows x86 arch:x86
0a0f639676ee17facb41aa6e48882888
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetTimeZoneInformation
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetCurrentProcessId
QueryPerformanceCounter
IsBadWritePtr
VirtualFree
InterlockedExchange
HeapCreate
HeapDestroy
GetFileType
SetStdHandle
GetCommandLineA
GetStartupInfoA
HeapSize
TerminateProcess
GetSystemTimeAsFileTime
HeapReAlloc
RtlUnwind
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
FindResourceExA
lstrcpynW
LocalFileTimeToFileTime
SetErrorMode
SystemTimeToFileTime
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
GetTempPathA
SearchPathA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetProfileIntA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
VirtualProtect
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrcmpA
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
lstrcpyA
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
MoveFileA
GetModuleFileNameA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
InterlockedDecrement
CopyFileA
FormatMessageA
lstrcpynA
LocalFree
GetProcAddress
SetLastError
DeleteFileA
GetDiskFreeSpaceA
GetTickCount
HeapAlloc
HeapFree
GetFileSize
ReadFile
GlobalReAlloc
GlobalMemoryStatus
GetModuleHandleA
GlobalFlags
GetCurrentDirectoryA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GetStringTypeExA
CompareStringW
CompareStringA
GlobalSize
MulDiv
CreateFileA
WriteFile
CloseHandle
GlobalFree
LocalAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
user32
GetMenuItemInfoA
SetParent
GetSystemMenu
WaitMessage
GetMessageA
TranslateMessage
GetWindowThreadProcessId
PostThreadMessageA
MapDialogRect
InSendMessage
CopyAcceleratorTableA
IsRectEmpty
CountClipboardFormats
MessageBeep
KillTimer
SetTimer
SetRect
IsZoomed
DestroyCursor
SetCursorPos
SetCapture
RedrawWindow
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DestroyMenu
ReuseDDElParam
ReleaseCapture
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
GetMenuCheckMarkDimensions
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
InflateRect
IsWindowEnabled
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
PostQuitMessage
TrackPopupMenu
GetKeyState
GetScrollPos
SetForegroundWindow
PostMessageA
EqualRect
DeferWindowPos
GetClassInfoA
RegisterClassA
UnregisterClassA
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
UnhookWindowsHookEx
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
RemoveMenu
CharUpperA
LoadBitmapA
GetDC
ReleaseDC
GetDesktopWindow
MessageBoxA
GetActiveWindow
DestroyIcon
SendMessageA
EnableWindow
EndPaint
BeginPaint
GetWindowDC
LoadIconA
SetMenu
GetDialogBaseUnits
GetAsyncKeyState
ClipCursor
SetRectEmpty
GetSysColor
GetCursor
SetCursor
PtInRect
LoadCursorA
IsChild
GetFocus
ShowOwnedPopups
ValidateRect
SetWindowContextHelpId
WindowFromDC
DrawFocusRect
GetDCEx
GetTabbedTextExtentA
GetSysColorBrush
FindWindowA
ClientToScreen
GetMenuState
CheckMenuItem
ScreenToClient
LoadMenuA
GetSubMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnpackDDElParam
AdjustWindowRectEx
DrawMenuBar
GetMenu
DeleteMenu
CopyRect
GetNextDlgGroupItem
InvalidateRgn
CharNextA
LockWindowUpdate
wsprintfA
GetClientRect
GetParent
RegisterClipboardFormatA
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
IsClipboardFormatAvailable
CloseClipboard
IsWindow
GetWindowRect
UpdateWindow
InvalidateRect
FillRect
IsWindowVisible
SetScrollPos
SetScrollRange
TranslateAcceleratorA
LoadAcceleratorsA
WindowFromPoint
GetForegroundWindow
GetClassNameA
GetWindowTextA
GetCursorPos
SendNotifyMessageA
gdi32
SetArcDirection
DeleteObject
SelectClipRgn
GetWindowExtEx
GetPixel
StartDocA
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateBitmap
SelectPalette
CopyMetaFileA
CreateDCA
CreateRectRgnIndirect
SetRectRgn
GetWindowOrgEx
SetAbortProc
AbortDoc
CreateFontA
UnrealizeObject
GetTextAlign
CloseMetaFile
DeleteMetaFile
CreateMetaFileA
EnumFontFamiliesExA
GetTextColor
GetRgnBox
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetStretchBltMode
SetROP2
SetBkMode
SetBkColor
RestoreDC
SaveDC
EndDoc
StartPage
PtInRegion
CloseEnhMetaFile
CreateEnhMetaFileA
ExtFloodFill
PatBlt
GetViewportExtEx
GetBkColor
CombineRgn
CreateEllipticRgn
GetObjectA
ExtCreatePen
EndPage
GetCharWidthA
GetTextMetricsA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
StretchBlt
CreateHatchBrush
FillRgn
CreatePolygonRgn
Ellipse
Polygon
Arc
Rectangle
LPtoDP
CreateSolidBrush
GetStockObject
PolyBezier
GetTextExtentPoint32A
DPtoLP
SelectObject
CreateFontIndirectA
CreatePen
StretchDIBits
GetDIBits
BitBlt
GetMapMode
RealizePalette
SetBrushOrgEx
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
CreateRectRgn
comdlg32
ReplaceTextA
PrintDlgA
PageSetupDlgA
CommDlgExtendedError
ChooseColorA
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
FindTextA
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
GetJobA
advapi32
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegOpenKeyA
SetFileSecurityA
GetFileSecurityA
RegEnumKeyA
RegQueryValueA
RegDeleteValueA
RegCloseKey
shell32
DragFinish
SHBrowseForFolderA
SHGetMalloc
DragAcceptFiles
ExtractIconA
DragQueryFileA
SHGetPathFromIDListA
SHGetFileInfoA
comctl32
ord17
ImageList_Destroy
ImageList_Draw
ImageList_GetImageInfo
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
shlwapi
PathIsUNCA
PathFindExtensionA
PathRemoveExtensionA
PathStripToRootA
PathFindFileNameA
oledlg
ord3
ord5
ord4
ord11
ord8
ord1
ole32
StgOpenStorageOnILockBytes
GetHGlobalFromILockBytes
OleRun
OleIsRunning
OleSetMenuDescriptor
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateFileMoniker
CoLockObjectExternal
CoRegisterClassObject
CoRevokeClassObject
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleRegEnumVerbs
OleRegGetMiscStatus
CoDisconnectObject
CreateGenericComposite
CreateOleAdviseHolder
CreateDataAdviseHolder
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoGetClassObject
CoRegisterMessageFilter
CoTaskMemAlloc
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateStreamOnHGlobal
CreateItemMoniker
OleGetIconOfClass
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleLockRunning
OleSetContainedObject
OleSaveToStream
WriteClassStm
OleSave
OleDuplicateData
GetRunningObjectTable
ReleaseStgMedium
oleaut32
OleLoadPicture
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
SysStringByteLen
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect
Sections
.text Size: 857KB - Virtual size: 857KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 234KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ