Static task
static1
Behavioral task
behavioral1
Sample
2024-05-13_7767ab6b0e3ea41896cd497907dd409c_icedid.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-13_7767ab6b0e3ea41896cd497907dd409c_icedid.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-05-13_7767ab6b0e3ea41896cd497907dd409c_icedid
-
Size
2.3MB
-
MD5
7767ab6b0e3ea41896cd497907dd409c
-
SHA1
7a53e06afb0ec0a219da9eb206ce6a8a3fca36c5
-
SHA256
4ddecca1f9a0d6ce9c99d48adfa661f1b4e091ad8b630e33cb9cc87d1da8187e
-
SHA512
6a18ceb6b369ddc808fb6d06d280130b9c64c57ac30e691022b69a22e0ff610bccc3b954820f9d3d159530579bfab9434bae3b74fd21c45b58e529d3a1cc77eb
-
SSDEEP
49152:ix4X6xd8/dFyduUOsQDxDJdoeoahDhaTW3siRLTVu4pyG/dRVR:jOd8/dFZUOJxDJdoeoahDhaTYppu4pyU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-13_7767ab6b0e3ea41896cd497907dd409c_icedid
Files
-
2024-05-13_7767ab6b0e3ea41896cd497907dd409c_icedid.exe windows:5 windows x86 arch:x86
23cc0bdc1894049aecdb4fdb0743f278
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
WriteConsoleW
GetEnvironmentStringsW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetStdHandle
HeapCreate
LCMapStringW
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoW
IsProcessorFeaturePresent
GetTimeZoneInformation
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsValidCodePage
HeapQueryInformation
HeapSize
GetFileType
SetStdHandle
ExitProcess
FormatMessageA
CreateThread
ExitThread
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
RaiseException
GetStartupInfoW
GetConsoleMode
GetCommandLineA
HeapFree
DecodePointer
EncodePointer
GetDateFormatA
GetTimeFormatA
RtlUnwind
GetSystemTimeAsFileTime
SearchPathA
GetProfileIntA
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
SetErrorMode
GetCurrentDirectoryA
GetACP
GetOEMCP
GetCPInfo
GetSystemDirectoryW
FindResourceExW
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetFileSizeEx
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExA
GetShortPathNameA
GetConsoleCP
QueryPerformanceCounter
HeapSetInformation
SetHandleCount
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileA
CreateFileA
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetDiskFreeSpaceA
GetFullPathNameA
GetFileTime
SetFileTime
ReplaceFileA
SystemTimeToFileTime
GetUserDefaultLCID
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
LoadLibraryExA
InterlockedExchange
lstrcmpA
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
FreeLibrary
lstrcmpW
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleW
VirtualProtect
GetCurrentProcessId
CopyFileA
GlobalSize
lstrlenW
lstrlenA
Sleep
GetTempFileNameA
lstrcpynA
FindFirstFileA
FindClose
CreateDirectoryA
GetModuleFileNameA
GetFileAttributesA
DeleteFileA
GetLocalTime
GetTickCount
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
GetUserDefaultLangID
GlobalAlloc
GlobalFree
FindResourceA
GetLocaleInfoA
GlobalLock
GlobalUnlock
ActivateActCtx
DeactivateActCtx
GetProcAddress
GetModuleHandleA
LoadLibraryA
MulDiv
lstrcpyA
GetLastError
SetLastError
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
LocalFree
CreateFileW
user32
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
GetMenuDefaultItem
SetCursorPos
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFocusRect
DrawFrameControl
DrawIconEx
DrawStateA
SetClassLongA
NotifyWinEvent
DestroyAcceleratorTable
GetNextDlgGroupItem
InvalidateRgn
CharNextA
LoadMenuW
LoadAcceleratorsW
LockWindowUpdate
GetDCEx
UnregisterClassA
UnionRect
MessageBeep
IsClipboardFormatAvailable
GetTabbedTextExtentW
PostThreadMessageA
CreateMenu
CopyAcceleratorTableA
CopyImage
SetLayeredWindowAttributes
EnumDisplayMonitors
RealChildWindowFromPoint
GetSysColorBrush
CharUpperA
RegisterClipboardFormatA
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
WaitMessage
WindowFromPoint
SetParent
GetSystemMenu
DeleteMenu
IsZoomed
UnpackDDElParam
ReuseDDElParam
DestroyMenu
LoadImageA
DestroyIcon
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
IntersectRect
BringWindowToTop
TranslateAcceleratorA
GetMessageA
TranslateMessage
LoadCursorA
DestroyCursor
GetCursorPos
ReleaseCapture
SetCursor
LoadCursorW
SetCapture
KillTimer
SetTimer
SetWindowRgn
DrawIcon
IsRectEmpty
InvalidateRect
IsIconic
MoveWindow
SetWindowTextA
TranslateMDISysAccel
SetDlgItemTextA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
MapVirtualKeyA
GetKeyNameTextA
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
IsWindowVisible
ValidateRect
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
PtInRect
GetWindow
SetPropA
GetCapture
GetActiveWindow
SetActiveWindow
MapDialogRect
MonitorFromPoint
UpdateLayeredWindow
IsMenu
SetMenuDefaultItem
FrameRect
GetUpdateRect
OpenClipboard
SetClipboardData
GetWindowRgn
SubtractRect
MapVirtualKeyExA
SetWindowPos
ShowWindow
GetPropA
RemovePropA
GetAsyncKeyState
SetFocus
PostMessageA
GetDlgItem
GetWindowThreadProcessId
GetParent
IsCharLowerA
GetDoubleClickTime
CharUpperBuffA
CopyIcon
LoadImageW
EmptyClipboard
IsDialogMessageA
CloseClipboard
GetWindowLongA
GetLastActivePopup
MessageBoxA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
FillRect
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
RemoveMenu
LoadMenuA
UpdateWindow
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetRect
ReleaseDC
GetDC
LoadIconW
SystemParametersInfoA
GetSystemMetrics
GetSysColor
GetMenuItemInfoA
SetMenuItemInfoA
DrawEdge
InflateRect
CopyRect
IsWindow
SetWindowLongA
GetSubMenu
GetMenuItemCount
LoadBitmapW
OffsetRect
GetKeyState
IsWindowEnabled
GetWindowRect
EnableWindow
IsChild
GetFocus
SendMessageA
SetRectEmpty
gdi32
CreatePatternBrush
CreateBitmap
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateRectRgnIndirect
CreateEllipticRgn
DPtoLP
LPtoDP
Ellipse
CreateDIBSection
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetViewportOrgEx
Rectangle
GetCharWidthA
CreateFontA
StretchDIBits
GetTextMetricsA
SetRectRgn
CombineRgn
GetMapMode
GetBkColor
EnumFontFamiliesExA
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetNearestColor
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
GetWindowOrgEx
GetRgnBox
CreateRoundRectRgn
CreatePolygonRgn
Polyline
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
ExtSelectClipRgn
SetTextAlign
GetLayout
GetCurrentPositionEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
GetBkMode
CreateFontIndirectA
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CopyMetaFileA
GetEnhMetaFileHeader
DeleteEnhMetaFile
GetWinMetaFileBits
SetMetaFileBitsEx
DeleteMetaFile
SetEnhMetaFileBits
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteDC
CreateDCA
ScaleWindowExtEx
BitBlt
PatBlt
RoundRect
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetStockObject
GetTextExtentPoint32A
GetObjectA
GetDeviceCaps
Polygon
GetTextColor
SetLayout
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
GetJobA
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegCloseKey
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
shell32
SHGetSpecialFolderLocation
DragFinish
DragQueryFileA
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
SHBrowseForFolderA
SHGetPathFromIDListA
SHAppBarMessage
ShellExecuteA
SHGetDesktopFolder
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
ole32
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoGetClassObject
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleCreateStaticFromData
OleSetContainedObject
OleDuplicateData
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
DoDragDrop
OleGetClipboard
CoLockObjectExternal
CoFreeUnusedLibraries
OleLockRunning
OleInitialize
oleaut32
VariantTimeToSystemTime
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
SafeArrayDestroy
VariantCopy
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringByteLen
SysFreeString
VarUdateFromDate
SystemTimeToVariantTime
oledlg
ord8
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
gdiplus
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown
GdipDrawImageI
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 356KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 467KB - Virtual size: 466KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ