Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_aeb83ce25c83a430bd81f4abd697100d_icedid.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-22_aeb83ce25c83a430bd81f4abd697100d_icedid.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-22_aeb83ce25c83a430bd81f4abd697100d_icedid
-
Size
412KB
-
MD5
aeb83ce25c83a430bd81f4abd697100d
-
SHA1
6a8dc3700cdd4c6fcb3bfc19f7a803cdaef8fef9
-
SHA256
1ced2d96bd1a3be442eabc98deb226d9816bae76521c20fbcff715bae971f587
-
SHA512
d0b47dbad7db7ea1ddbc2fb92c2d61487ebfe622605027e8ab68789ea3074af57a8c0ffde9c22e433c196589574c034395058bfa96bca41ae33888e20dd4423e
-
SSDEEP
6144:WCZ0uYI7wt45E6aPBTPJeeWpLUrlhJoMWehNyyyyyR4lKvQJ:NYXG66aVPJmNUryuyyyyyRQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-22_aeb83ce25c83a430bd81f4abd697100d_icedid
Files
-
2024-05-22_aeb83ce25c83a430bd81f4abd697100d_icedid.exe windows:4 windows x86 arch:x86
4aace1205ef2fe12297e1cc8a0281b21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
fbus32
ord16
ord29
ord31
ord35
ord3
ord78
ord32
ord2
ord21
ord73
kernel32
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapAlloc
HeapFree
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
GetStartupInfoA
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetErrorMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersion
MultiByteToWideChar
CompareStringW
CompareStringA
WideCharToMultiByte
lstrcmpiA
lstrlenA
CreateDirectoryA
GetCommandLineA
CloseHandle
GetLastError
CreateMutexA
Sleep
WinExec
FindResourceA
SizeofResource
LockResource
LoadResource
LeaveCriticalSection
EnterCriticalSection
LocalFree
FormatMessageA
InitializeCriticalSection
FreeResource
CreateThread
SetEvent
SetWaitableTimer
GetOEMCP
GetCPInfo
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
DeleteFileA
MoveFileA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
DeleteCriticalSection
RaiseException
GlobalFlags
InterlockedIncrement
WritePrivateProfileStringA
InterlockedDecrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
GlobalAddAtomA
SetLastError
GlobalFree
MulDiv
GlobalUnlock
lstrcpynA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalAlloc
FreeLibrary
WriteFile
GlobalDeleteAtom
lstrcmpA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
CreateFileA
GetCommState
GetCommTimeouts
SetCommTimeouts
BuildCommDCBA
SetCommState
CreateEventA
CreateWaitableTimerA
ResetEvent
GetOverlappedResult
ReadFile
WaitForMultipleObjects
SetCommMask
WaitCommEvent
CancelIo
SetUnhandledExceptionFilter
user32
DestroyMenu
GetSysColorBrush
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
wsprintfA
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
GetSysColor
GetClassInfoA
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
CopyRect
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
EnableWindow
LoadIconA
SendMessageA
LoadCursorA
LoadImageA
GetClientRect
GetSystemMetrics
DrawIcon
IsIconic
ShowCursor
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
ValidateRect
MessageBoxA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
GetWindowRect
SetCursorPos
SetCursor
GetCursorPos
PtInRect
SetRect
WinHelpA
GetDlgCtrlID
GetWindow
MoveWindow
AdjustWindowRectEx
ClientToScreen
EndPaint
BeginPaint
PostMessageA
PostQuitMessage
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
gdi32
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
SelectObject
GetTextMetricsA
GetTextExtentPointA
CreateFontW
DeleteObject
comdlg32
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCloseKey
RegOpenKeyExA
RegConnectRegistryA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
comctl32
ord17
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 276KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ