Static task
static1
Behavioral task
behavioral1
Sample
2024-05-03_716c44f13874bd81f8064b99473e9c2d_icedid.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-05-03_716c44f13874bd81f8064b99473e9c2d_icedid.exe
Resource
win10v2004-20240419-en
General
-
Target
2024-05-03_716c44f13874bd81f8064b99473e9c2d_icedid
-
Size
3.1MB
-
MD5
716c44f13874bd81f8064b99473e9c2d
-
SHA1
7379c8911af3b35c076e55754d1699386dc38720
-
SHA256
5c43471efdedd7b4ac355c1e82adbd6b89fd6613e16993224b6576b427fd3940
-
SHA512
dcc2cc51697a7eff2c9c2a1c2c0840db73f4557088ac93be43e6d21d018c85d7f26c2f0c76accf532df6cd2727ca21001941b46515bab20056fabe03482241e2
-
SSDEEP
98304:z1eyQJNev7wfloWv6RvbXKDw3j6Wd9F7H502CleyYNMD3jUH2:QXWnX07eV7H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-03_716c44f13874bd81f8064b99473e9c2d_icedid
Files
-
2024-05-03_716c44f13874bd81f8064b99473e9c2d_icedid.exe windows:4 windows x86 arch:x86
97a561ba3ca14452113b5150724a4422
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
CM_Remove_SubTree
CM_Locate_DevNodeA
CM_Get_DevNode_Registry_PropertyA
CM_Get_Child
CM_Get_Sibling
CM_Get_Parent
CM_Request_Device_EjectW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
newdev
UpdateDriverForPlugAndPlayDevicesA
dbghelp
MakeSureDirectoryPathExists
kernel32
GetVersion
LockResource
LoadResource
FindResourceA
DuplicateHandle
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
GetThreadLocale
lstrcmpA
GlobalReAlloc
SuspendThread
lstrlenW
GetCurrentThread
GetFileTime
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SizeofResource
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
RaiseException
GetFileType
GetTimeZoneInformation
GetSystemTime
ExitProcess
TerminateProcess
ExitThread
GetStartupInfoA
GetACP
HeapSize
HeapReAlloc
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
SetStdHandle
SetHandleCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
GetCurrentThreadId
CompareStringW
SetEnvironmentVariableA
LocalUnlock
GetProfileStringA
MoveFileExA
LocalLock
OutputDebugStringA
GetProcAddress
GetModuleHandleA
Sleep
MulDiv
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
CloseHandle
SetCommState
GetCommState
SetCommTimeouts
GetCommTimeouts
CreateFileA
ReadFile
WriteFile
SetThreadPriority
CreateThread
CreateEventA
SetPriorityClass
GetCurrentProcess
WaitForSingleObject
SetEvent
ResetEvent
CopyFileA
GetFileSize
GetTickCount
CreateDirectoryA
GetFileAttributesA
GetVersionExA
FreeLibrary
LoadLibraryA
GetExitCodeProcess
WritePrivateProfileSectionA
GetPrivateProfileSectionA
SetLastError
lstrlenA
LocalAlloc
LocalFree
GetLastError
GetWindowsDirectoryA
DeleteFileA
SetFileAttributesA
FindClose
FindNextFileA
lstrcatA
FindFirstFileA
GetSystemDirectoryA
GetUserDefaultUILanguage
GlobalUnlock
GlobalLock
GlobalAlloc
DeviceIoControl
GetVolumeInformationA
GlobalSize
CompareStringA
GetLocalTime
PeekNamedPipe
CreateProcessA
CreatePipe
GetStdHandle
InitializeCriticalSection
GetModuleFileNameA
MapViewOfFile
CreateFileMappingA
GetComputerNameA
GetDriveTypeA
QueryDosDeviceA
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
InterlockedDecrement
InterlockedIncrement
lstrcpynA
SetFilePointer
RemoveDirectoryA
FormatMessageA
GetPrivateProfileSectionNamesA
WritePrivateProfileStructA
GetTempPathA
ResumeThread
CreateMutexA
ReleaseMutex
GlobalFree
GetLogicalDrives
FileTimeToLocalFileTime
CreateFileW
GetFileAttributesExW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SetFilePointerEx
FindFirstFileW
GetFileAttributesW
FindNextFileW
MultiByteToWideChar
GetDriveTypeW
GetVolumeInformationW
WideCharToMultiByte
SetVolumeLabelW
FlushFileBuffers
EnterCriticalSection
LeaveCriticalSection
UnmapViewOfFile
TerminateThread
MoveFileA
GetCommandLineA
user32
GetSysColorBrush
DestroyMenu
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
IsClipboardFormatAvailable
GetMessageA
ValidateRect
GetDesktopWindow
LoadStringA
EndPaint
BeginPaint
GetWindowDC
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemInt
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScrollWindow
GetScrollInfo
GetScrollPos
GetTopWindow
IsChild
GetClassInfoA
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
UnregisterClassA
HideCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
SendMessageA
GetParent
EnableWindow
ReleaseCapture
CharLowerA
EnumWindows
FindWindowExA
SendMessageTimeoutA
CharUpperW
SetWindowPos
SetMenu
LoadMenuA
RemoveMenu
EnableMenuItem
LoadCursorA
RegisterClassA
CreateWindowExA
DestroyWindow
DefWindowProcA
ModifyMenuA
GetMenuItemID
GetMenuItemCount
ScreenToClient
GetMenuState
CharNextA
CopyAcceleratorTableA
PostThreadMessageA
WinHelpA
CheckMenuItem
GetMenu
GetSubMenu
IsIconic
DrawIcon
GetSystemMetrics
GetSystemMenu
AppendMenuA
MessageBoxA
GetMessagePos
LockWindowUpdate
PostMessageA
GetKeyState
GetSysColor
SetRect
DrawFocusRect
OffsetRect
WindowFromPoint
GetCursorPos
GetCapture
CheckDlgButton
ClientToScreen
GetNextDlgGroupItem
DispatchMessageA
TranslateMessage
PeekMessageA
RedrawWindow
SetWindowLongA
GetWindowLongA
GetKeyNameTextA
LoadImageA
IsWindow
InflateRect
LoadBitmapA
ReleaseDC
GetDC
GetClientRect
UpdateWindow
ShowWindow
FindWindowA
FillRect
DrawEdge
TabbedTextOutA
DrawTextA
GrayStringA
SetWindowRgn
GetWindowRect
InvalidateRect
SetTimer
KillTimer
CopyRect
LoadIconA
GetClassNameA
GetClipboardData
SetCursor
ShowCaret
SetCaretPos
CreateCaret
PtInRect
RegisterClipboardFormatA
SetScrollInfo
EnableScrollBar
DragDetect
SetScrollPos
DestroyCaret
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
EnumChildWindows
GetWindowTextA
IsWindowVisible
IsWindowEnabled
CharUpperA
WaitForInputIdle
GetWindow
MessageBeep
CallWindowProcA
wsprintfA
GetFocus
SetCapture
gdi32
GetTextMetricsA
Escape
CreateFontA
GetCharWidthA
SetBoundsRect
Polygon
GetClipBox
SetTextColor
SetBkColor
PatBlt
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetTextExtentPoint32A
MoveToEx
LineTo
CreateHatchBrush
CopyMetaFileA
GetTextColor
ExtTextOutA
TextOutA
GetPixel
StretchBlt
RoundRect
Rectangle
RectVisible
PtVisible
LPtoDP
DPtoLP
GetWindowExtEx
GetViewportExtEx
GetMapMode
GetBkColor
CreatePen
SelectPalette
GetTextExtentPointA
RealizePalette
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
CreateCompatibleBitmap
CreateFontIndirectA
CreateBitmap
CreateSolidBrush
GetStockObject
DeleteObject
GetObjectA
SelectClipRgn
CombineRgn
CreateRectRgn
IntersectClipRect
CreateDIBitmap
SelectObject
comdlg32
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA
SetNamedSecurityInfoA
FreeSid
GetExplicitEntriesFromAclA
SetSecurityInfo
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
GetSecurityInfo
AllocateAndInitializeSid
SetEntriesInAclA
shell32
SHFileOperationA
ShellExecuteExA
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
comctl32
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_LoadImageA
oledlg
ord8
ole32
OleDuplicateData
CoTaskMemAlloc
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
OleGetClipboard
OleFlushClipboard
OleSetClipboard
ReleaseStgMedium
CoInitialize
CoCreateGuid
CoUninitialize
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoTaskMemFree
CoRevokeClassObject
CoGetClassObject
OleIsCurrentClipboard
olepro32
ord253
oleaut32
LoadTypeLi
VariantTimeToSystemTime
VarBstrFromDate
VarDateFromStr
SysAllocStringByteLen
SysAllocString
SysFreeString
SysAllocStringLen
VariantChangeType
VariantClear
VariantCopy
OleLoadPicturePath
SysStringLen
wsock32
gethostbyname
gethostname
WSACleanup
closesocket
connect
htons
ioctlsocket
socket
WSAStartup
recv
send
listen
htonl
ntohs
getservbyname
ntohl
accept
shutdown
getsockname
getpeername
bind
setsockopt
recvfrom
select
__WSAFDIsSet
sendto
inet_addr
WSASetLastError
WSAGetLastError
WSAAsyncSelect
inet_ntoa
odbc32
ord18
ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord19
ord46
ord12
ord68
ord43
ord41
ord2
ord1
ord50
ord45
ord51
ord15
ord9
ord14
ord3
ord11
ord13
ord61
ord16
ord5
ord10
iphlpapi
GetAdaptersInfo
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 456KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 340KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fkvhets Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE