Static task
static1
Behavioral task
behavioral1
Sample
2024-05-26_8f1b91c7e1732d57a496516e936c827d_icedid.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2024-05-26_8f1b91c7e1732d57a496516e936c827d_icedid.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-05-26_8f1b91c7e1732d57a496516e936c827d_icedid
-
Size
2.8MB
-
MD5
8f1b91c7e1732d57a496516e936c827d
-
SHA1
78d8ff1eef2c7f7066e1a3225ecbc4daf35a057f
-
SHA256
d68c7a0c137be94aa33d6e0bd608b6b20d397202703caa0cea96f5f14ecd12cd
-
SHA512
3a85e1ea12d47712f81116da60291dd607547cf646fb3cc37c3572c4ae9b6ea8631218f451884c2907e11602457395d67d9960d724b259372059094020096ce5
-
SSDEEP
49152:TFbFeBSOJK7jv4g/dme4LrwJh32y4+pgPdu/QvnWXSxzoR2M:TFbFeBSOJK7jvd/ke4rEhGy4+pgPdu/B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-26_8f1b91c7e1732d57a496516e936c827d_icedid
Files
-
2024-05-26_8f1b91c7e1732d57a496516e936c827d_icedid.exe windows:5 windows x86 arch:x86
46b3340d5b08a904bf7e4c1baab77814
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
msacm32
acmFormatChooseA
acmFormatDetailsA
acmFormatTagDetailsA
acmMetrics
libhamlib-4
ord229
ord204
ord324
ord288
ord283
ord280
ord282
ord172
ord269
ord193
ord265
ord169
ord264
ord185
ord278
ord273
ord159
ord274
ord227
ord262
ord228
ord176
ord243
ord157
ord266
ord173
ord313
ord284
ord168
ord184
ord277
ord197
ord198
ord179
ord326
ord217
ord321
ord249
ord208
ord210
ord407
ord135
ord136
ord162
ord206
kernel32
EncodePointer
GetCurrentThreadId
GetSystemDirectoryW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CompareStringA
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetCurrentProcessId
GetProfileIntA
lstrcmpA
GetCurrentThread
GetPrivateProfileIntA
DeleteFileA
FlushFileBuffers
GetFullPathNameA
LockFile
SetEndOfFile
UnlockFile
DuplicateHandle
GetCurrentProcess
LoadLibraryExA
MoveFileA
GetVolumeInformationA
GetThreadLocale
SetThreadPriority
GetACP
GlobalFlags
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalAlloc
LocalReAlloc
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetOEMCP
GetCPInfo
SetErrorMode
VerSetConditionMask
VerifyVersionInfoA
FindResourceExW
SearchPathA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetProcAddress
GetModuleHandleW
VirtualQuery
VirtualProtect
GetSystemInfo
GetLocalTime
UnmapViewOfFile
GetFileSize
GetFileInformationByHandle
FileTimeToSystemTime
SetFileTime
GetFileAttributesA
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFilePointer
GetProcessHeap
CopyFileA
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
CreateThread
ExitProcess
ReadFile
SuspendThread
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ResetEvent
DeleteCriticalSection
SetEvent
ResumeThread
CreateProcessA
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetCommandLineA
GetCurrentDirectoryA
GlobalAlloc
FreeResource
FindResourceA
MultiByteToWideChar
GetPrivateProfileStringA
GlobalFree
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
CreateDirectoryA
SetCurrentDirectoryA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
MulDiv
GlobalUnlock
GlobalLock
GlobalSize
GlobalReAlloc
Sleep
GetVersionExA
LocalFree
FormatMessageA
SetLastError
FindClose
GetLastError
FindNextFileA
FindFirstFileA
lstrcpyA
WinExec
lstrlenA
lstrcatA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
WriteFile
CreateFileA
GetTickCount
GetTempFileNameA
GetTempPathA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
LoadLibraryW
GetModuleFileNameW
OutputDebugStringA
OutputDebugStringW
RtlUnwind
QueryPerformanceFrequency
GetDriveTypeW
SetEnvironmentVariableA
GetCurrentDirectoryW
VirtualAlloc
SetStdHandle
GetFileType
GetCommandLineW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
HeapQueryInformation
GetStdHandle
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetStringTypeW
GetTimeZoneInformation
GetExitCodeProcess
GetFileAttributesExW
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExA
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
lstrcmpiA
CreateFileW
user32
LoadMenuW
SetCursorPos
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
LockWindowUpdate
SetMenuDefaultItem
CharUpperBuffA
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
LoadImageW
TrackMouseEvent
MapDialogRect
SetWindowContextHelpId
GetMenuItemInfoA
ShowOwnedPopups
GetMessageA
CharUpperA
PostQuitMessage
RegisterClipboardFormatA
GetWindowDC
GetWindowThreadProcessId
MapVirtualKeyA
GetKeyNameTextA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
CallNextHookEx
SetWindowsHookExA
GetLastActivePopup
GetClassNameA
GetClassLongA
EqualRect
MapWindowPoints
AdjustWindowRectEx
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
GetClassInfoExA
RegisterClassA
CallWindowProcA
GetMessageTime
RegisterWindowMessageA
IsDialogMessageA
GetWindow
GetWindowTextLengthA
GetDlgCtrlID
CheckDlgButton
SetClassLongA
MoveWindow
UnhookWindowsHookEx
GetMenuItemID
GetMenuState
GetMenuStringA
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
SendDlgItemMessageA
UnionRect
MsgWaitForMultipleObjects
SetWindowRgn
DrawIconEx
wsprintfA
GetDoubleClickTime
GetTopWindow
SetParent
GetClipboardFormatNameA
DdeQueryStringA
DdePostAdvise
DdeCreateDataHandle
DdeCmpStringHandles
DdeQueryConvInfo
DdeInitializeA
DdeUninitialize
DdeNameService
DdeUnaccessData
DdeAccessData
DdeClientTransaction
DdeConnect
DdeDisconnect
DdeFreeStringHandle
DdeCreateStringHandleA
UnregisterClassA
SetWindowPos
RedrawWindow
CreateWindowExA
ShowWindow
SetWindowTextA
SetFocus
EndDialog
GetDlgItem
GetWindowTextA
SetClipboardData
EmptyClipboard
LoadCursorW
DdeGetLastError
InsertMenuA
GetMenuItemCount
RemoveMenu
ModifyMenuA
IsMenu
CloseClipboard
GetClipboardData
OpenClipboard
ChangeClipboardChain
SetClipboardViewer
GetDesktopWindow
AppendMenuA
GetSystemMenu
LoadBitmapW
MessageBeep
SetWindowLongA
CopyIcon
GrayStringA
DrawTextExA
TabbedTextOutA
ReleaseCapture
GetCapture
ClipCursor
SetCapture
InvertRect
GetMessagePos
IsClipboardFormatAvailable
EnumDisplayMonitors
ScreenToClient
GetCursorPos
IntersectRect
DefWindowProcA
GetClassInfoA
IsWindow
GetKeyState
IsRectEmpty
PtInRect
DrawFrameControl
SetRect
LoadCursorA
DrawTextA
DrawEdge
SystemParametersInfoA
MessageBoxA
GetFocus
SetTimer
KillTimer
SetLayeredWindowAttributes
GetMenuDefaultItem
NotifyWinEvent
HideCaret
EnableScrollBar
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
DeleteMenu
WaitMessage
ReuseDDElParam
UnpackDDElParam
GetAsyncKeyState
DrawIcon
LoadIconW
UpdateWindow
GetSystemMetrics
SetRectEmpty
InsertMenuItemA
CreatePopupMenu
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
PostThreadMessageA
CopyImage
GetSysColorBrush
SetDlgItemTextA
RealChildWindowFromPoint
FrameRect
LoadMenuA
LoadImageA
CreateIconIndirect
GetIconInfo
ReleaseDC
GetDC
GetSysColor
FillRect
DrawStateA
OffsetRect
GetClientRect
DrawFocusRect
InflateRect
CopyRect
TrackPopupMenuEx
GetSubMenu
GetActiveWindow
WindowFromPoint
ClientToScreen
InvalidateRect
SetCursor
GetNextDlgTabItem
GetWindowLongA
DestroyIcon
DestroyMenu
DestroyCursor
EnumChildWindows
GetParent
PostMessageA
GetWindowRect
IsWindowVisible
IsZoomed
IsIconic
SendMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
EnableWindow
IsWindowEnabled
gdi32
SetLayout
GetLayout
SetPolyFillMode
SetROP2
GetClipBox
SetTextAlign
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetRectRgn
CreateBitmap
SelectObject
GetTextColor
GetRgnBox
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
SetMapMode
RealizePalette
CreateDIBitmap
GetTextCharsetInfo
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
Polygon
EnumFontFamiliesExA
Rectangle
OffsetRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceA
ExcludeClipRect
CreateHatchBrush
CreateRectRgnIndirect
CreateDCA
CopyMetaFileA
StretchBlt
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
LineTo
IntersectClipRect
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
DeleteObject
GetWindowExtEx
GetViewportExtEx
GetObjectType
GetSystemPaletteEntries
CombineRgn
CreateRectRgn
CreatePolygonRgn
CreateRoundRectRgn
FrameRgn
FillRgn
Polyline
RoundRect
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateFontA
AbortDoc
EndDoc
EndPage
StartPage
StartDocA
CreatePen
GetBkColor
DPtoLP
GetMapMode
LPtoDP
GetDeviceCaps
GetCurrentObject
EnumFontFamiliesA
CreateFontIndirectA
GetTextExtentPoint32A
PatBlt
GetTextMetricsA
CreatePatternBrush
CreateSolidBrush
GetObjectA
SetPixel
GetPixel
DeleteDC
SetTextColor
SetBkColor
msimg32
AlphaBlend
TransparentBlt
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueA
RegCloseKey
RegQueryValueExA
RegDeleteValueA
RegEnumValueA
RegEnumKeyA
RegOpenKeyExA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
shell32
ShellExecuteA
ShellExecuteExA
SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
ExtractIconA
SHGetFileInfoA
DragQueryFileA
DragFinish
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
comctl32
ImageList_Draw
ImageList_GetImageInfo
ImageList_AddMasked
ord17
_TrackMouseEvent
shlwapi
StrStrA
PathQuoteSpacesA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
uxtheme
GetWindowTheme
GetThemeSysColor
CloseThemeData
DrawThemeText
DrawThemeParentBackground
OpenThemeData
IsAppThemed
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
ole32
CLSIDFromString
OleCreateMenuDescriptor
CoDisconnectObject
CoGetClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemAlloc
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CLSIDFromProgID
CoUninitialize
CoInitializeEx
CoCreateInstance
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
DoDragDrop
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoInitialize
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
CoCreateGuid
OleLockRunning
oleaut32
VariantCopy
SafeArrayDestroy
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
VarDateFromStr
SysFreeString
VarBstrFromDate
VarUdateFromDate
SystemTimeToVariantTime
LoadTypeLi
OleCreateFontIndirect
SysAllocString
VariantTimeToSystemTime
oledlg
ord8
gdiplus
GdiplusShutdown
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipAlloc
oleacc
CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow
imm32
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 434KB - Virtual size: 433KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 589KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 203KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ