Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_b69b5e44f4bcb26903d0b8c4184895d9_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-22_b69b5e44f4bcb26903d0b8c4184895d9_icedid.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-05-22_b69b5e44f4bcb26903d0b8c4184895d9_icedid
-
Size
1.5MB
-
MD5
b69b5e44f4bcb26903d0b8c4184895d9
-
SHA1
96200fbfd5e023231c510c520b3d73fe64703ac3
-
SHA256
ce5dde41c09b8d1758f25d1377262437a351306aff0b44fe19c49cadbb742ae7
-
SHA512
99a64b8ddfa3dd325aba1b049c263b4d098a4ae0013d2e0158e5dcb8ef200ea7ea9a482488fab4cbb608fddcbff6fcfeca28281f90d5c0eba0828db9c419dcf1
-
SSDEEP
24576:/5lDV0svs2Vlbl2/VFkW1lzF0E6M2HiDKUTRtUrSozrSobrSozrSoLrSo:/5l2sDlMLdD2HqKUTD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-22_b69b5e44f4bcb26903d0b8c4184895d9_icedid
Files
-
2024-05-22_b69b5e44f4bcb26903d0b8c4184895d9_icedid.exe windows:4 windows x86 arch:x86
d34910dd11aa337429876ec055a19e2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
CompareStringA
CompareStringW
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetCurrentDirectoryA
FreeEnvironmentStringsA
IsBadReadPtr
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
GetDriveTypeA
GetLocaleInfoW
GetACP
GetOEMCP
SetEnvironmentVariableA
UnhandledExceptionFilter
HeapSize
FindResourceA
GlobalAddAtomA
GetProfileStringA
InterlockedExchange
GetFileType
SetStdHandle
GetLocalTime
GetSystemTime
GetTimeZoneInformation
ExitThread
CreateThread
HeapReAlloc
GetDriveTypeW
RaiseException
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetStartupInfoW
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
FindResourceExW
GetCurrentDirectoryW
GlobalFlags
FindNextFileW
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetVolumeInformationW
FindFirstFileW
FindClose
UnlockFile
LockFile
SetFilePointer
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProfileIntW
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetProcessVersion
GlobalGetAtomNameW
GetDiskFreeSpaceW
GetFileTime
SetFileTime
GetFullPathNameW
GetTempFileNameW
GetFileAttributesW
GlobalFree
CreateEventW
SuspendThread
SetEvent
lstrcmpW
lstrcmpA
lstrcmpiA
GetCurrentThread
LoadLibraryA
GetVersion
lstrcatW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
InterlockedDecrement
InterlockedIncrement
MulDiv
GetModuleHandleA
SetLastError
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
SetCurrentDirectoryW
FindResourceW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
FlushFileBuffers
WriteFile
ReadFile
SetFilePointerEx
SetEndOfFile
GetFileSizeEx
CloseHandle
CreateFileW
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetWindowsDirectoryW
GetModuleFileNameW
GetCurrentProcess
GetTempPathW
CreateDirectoryW
GetFileAttributesExW
GetLongPathNameW
GetShortPathNameW
GetLastError
LocalFree
MoveFileW
DeleteFileW
SetThreadPriority
Sleep
CreateProcessW
TerminateProcess
GetExitCodeProcess
FreeLibrary
LoadLibraryW
GetCurrentThreadId
GetModuleHandleW
GetProcAddress
GetVersionExW
lstrcpynW
lstrcpyW
WaitForSingleObject
ResumeThread
GetTickCount
lstrlenW
user32
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
PeekMessageW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetTopWindow
MessageBoxW
WinHelpW
GetClassInfoW
RegisterClassW
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextW
GetDlgCtrlID
DestroyWindow
CreateWindowExW
DefWindowProcW
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SystemParametersInfoW
GetWindowPlacement
wsprintfW
EndPaint
BeginPaint
GetWindowDC
SetWindowPos
LockWindowUpdate
CheckMenuItem
IsChild
GetMenu
SetMenu
IsIconic
ExitWindowsEx
DestroyIcon
GetMessageW
TranslateMessage
DispatchMessageW
InsertMenuW
FindWindowW
CallNextHookEx
keybd_event
SetWindowsHookExW
TrackPopupMenuEx
UnhookWindowsHookEx
GetMenuStringW
GetMenuItemCount
WindowFromPoint
DestroyMenu
ShowWindow
GetCapture
IntersectRect
IsRectEmpty
SetRectEmpty
GetDC
ReleaseDC
DrawFocusRect
GetSysColor
SetCursor
IsWindowEnabled
SetFocus
RegisterWindowMessageW
GetWindow
CreatePopupMenu
GetMessagePos
RedrawWindow
LoadCursorW
LoadBitmapW
UnregisterClassW
GetWindowTextLengthA
GetWindowTextLengthW
HideCaret
ShowCaret
ExcludeUpdateRgn
BeginDeferWindowPos
OffsetRect
EndDeferWindowPos
GetSystemMenu
RemovePropW
GetPropW
CallWindowProcW
SetPropW
SetWindowLongW
GetMenuItemID
GetMenuDefaultItem
LoadIconW
KillTimer
SetTimer
SetParent
InflateRect
ClientToScreen
SetMenuDefaultItem
CheckMenuRadioItem
GetNextDlgTabItem
GetClassNameW
CharUpperW
GetDCEx
GetSysColorBrush
wvsprintfW
LoadStringW
BringWindowToTop
UnpackDDElParam
GetWindowRect
GetCursorPos
GetKeyState
GetParent
LoadMenuW
ScreenToClient
GrayStringW
DrawTextW
TabbedTextOutW
InvalidateRect
GetFocus
SetCapture
ReleaseCapture
PtInRect
IsWindowVisible
SetActiveWindow
SetForegroundWindow
SendMessageW
UpdateWindow
PostMessageW
GetSubMenu
DeleteMenu
AppendMenuW
GetClientRect
CopyRect
GetSystemMetrics
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
ReuseDDElParam
GetDesktopWindow
TranslateAcceleratorW
LoadAcceleratorsW
EndDialog
CreateDialogIndirectParamW
MapDialogRect
GetAsyncKeyState
GetActiveWindow
ValidateRect
ShowOwnedPopups
PostQuitMessage
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
SetRect
EnableMenuItem
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
DestroyCursor
EnableWindow
GetWindowLongW
IsWindow
gdi32
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
SetViewportOrgEx
GetDeviceCaps
CreatePen
CreateSolidBrush
CreatePatternBrush
SetRectRgn
GetTextMetricsW
EnumFontFamiliesExW
SetMapMode
CreateRectRgn
CombineRgn
SetTextColor
SetBkMode
CreateBitmap
SetBkColor
SaveDC
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
StretchDIBits
SetDIBitsToDevice
RestoreDC
CreateDIBSection
DeleteDC
PatBlt
DeleteObject
SelectObject
GetBkMode
GetBkColor
GetTextExtentPoint32W
GetTextColor
BitBlt
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
GetObjectW
CreateDIBitmap
ExtTextOutA
GetTextExtentPointA
CreateFontIndirectW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueW
RegSetValueExW
RegCreateKeyW
RegSetValueW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegCreateKeyExW
RegDeleteValueW
SetFileSecurityW
GetFileSecurityW
RegEnumKeyExW
shell32
SHGetDesktopFolder
SHGetMalloc
SHGetFileInfoW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
DragQueryFileW
SHFileOperationW
SHGetSpecialFolderPathW
DragAcceptFiles
DragFinish
ShellExecuteW
ExtractIconW
comctl32
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_Draw
_TrackMouseEvent
ImageList_AddMasked
ImageList_DragLeave
ImageList_DragMove
ImageList_EndDrag
ImageList_Destroy
ImageList_Create
ord17
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_DrawIndirect
ImageList_ReplaceIcon
ole32
CoUninitialize
CoCreateGuid
CoInitialize
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
shlwapi
PathFileExistsW
PathFindExtensionW
PathMakePrettyW
PathFindFileNameW
PathRemoveFileSpecW
PathRenameExtensionW
PathIsRootW
PathIsDirectoryW
PathIsURLW
winhttp
WinHttpQueryHeaders
WinHttpCrackUrl
WinHttpReadData
WinHttpCloseHandle
WinHttpOpen
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpQueryOption
WinHttpSetOption
WinHttpReceiveResponse
Sections
.text Size: 820KB - Virtual size: 817KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ