Static task
static1
Behavioral task
behavioral1
Sample
2024-06-15_edf9212c776b469c1b043c9506061c4e_icedid_magniber.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2024-06-15_edf9212c776b469c1b043c9506061c4e_icedid_magniber.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-15_edf9212c776b469c1b043c9506061c4e_icedid_magniber
-
Size
6.1MB
-
MD5
edf9212c776b469c1b043c9506061c4e
-
SHA1
49c9b8a938e539a78a60ce4f74e29df6115d07c2
-
SHA256
93b202af4850613b568a7ecb7177e7500c802912d9aaa60d65a575600d63fb3f
-
SHA512
b9a9a4cc4bb33a5995ca30122d285cd0ddd1b56fafc65643d8d6b1658d3f7c3231dd39e47ac68c31be135550f23d5dc034f1552d9f427e077cfd68c45f785081
-
SSDEEP
196608:dtJjKN9g7R5dVvni6CtWbNvz1FLOyomFHKnPA:dtJWN9g1TVviEF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-15_edf9212c776b469c1b043c9506061c4e_icedid_magniber
Files
-
2024-06-15_edf9212c776b469c1b043c9506061c4e_icedid_magniber.exe windows:5 windows x86 arch:x86
80b0e03215ca8cce2aad95ca125fab59
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
kernel32
SetConsoleCtrlHandler
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
LCMapStringW
GetDriveTypeW
GetFullPathNameA
GetTimeZoneInformation
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
_llseek
GetModuleHandleA
VirtualFree
TerminateThread
OpenThread
GetExitCodeThread
AllocConsole
FlushConsoleInputBuffer
ReadConsoleW
SetConsoleCP
SetConsoleMode
GetConsoleOutputCP
SetConsoleOutputCP
SetConsoleWindowInfo
SetConsoleTitleW
SetDllDirectoryW
GetDllDirectoryW
CreateRemoteThread
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
GetProcessId
WriteProcessMemory
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
GetLocalTime
GetSystemTime
GetNativeSystemInfo
IsBadReadPtr
LoadLibraryA
GetModuleFileNameA
FormatMessageA
IsBadStringPtrA
GetFileAttributesA
IsBadWritePtr
DebugBreak
lstrcpynW
QueueUserWorkItem
GetStringTypeW
SizeofResource
LockResource
LoadResource
FindResourceW
InterlockedDecrement
MultiByteToWideChar
GetCPInfo
GetLastError
CloseHandle
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
CreateMutexW
WaitForSingleObject
GetACP
ReleaseMutex
OpenFileMappingW
MapViewOfFile
GetCurrentProcessId
UnmapViewOfFile
GetFileAttributesW
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
GetCurrentThreadId
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WideCharToMultiByte
Sleep
GetModuleFileNameW
GetVersionExW
CreateFileMappingW
OpenProcess
DeleteFileW
CreateFileW
GetFileSize
ReadFile
UpdateResourceW
SetFilePointer
CopyFileW
BeginUpdateResourceW
EndUpdateResourceW
GetConsoleWindow
GlobalAlloc
GlobalLock
lstrcpyW
GlobalUnlock
SetLastError
DeactivateActCtx
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetExitCodeProcess
FatalAppExitA
LoadLibraryW
GetProcAddress
ActivateActCtx
lstrcmpiW
InterlockedCompareExchange
CreateProcessA
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapDestroy
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
HeapQueryInformation
HeapSize
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
GetFileType
SetStdHandle
RaiseException
RtlUnwind
FindNextFileA
FindFirstFileExA
FindFirstFileExW
SetCurrentDirectoryW
SetEnvironmentVariableW
HeapReAlloc
CreateThread
ExitThread
DecodePointer
EncodePointer
HeapAlloc
HeapFree
GetStartupInfoW
HeapSetInformation
GetCommandLineW
CreateProcessW
GetTimeFormatW
GetDateFormatW
CreateFileA
CreatePipe
FindResourceExW
GetNumberFormatW
lstrlenW
ExitProcess
FormatMessageW
GetWindowsDirectoryW
VirtualProtect
SearchPathW
GetTempPathW
LocalLock
LocalUnlock
GetFileSizeEx
LocalFileTimeToFileTime
SetFileAttributesW
GetFileAttributesExW
SetErrorMode
GlobalFlags
GetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
GetProfileIntW
GetDiskFreeSpaceW
GetTempFileNameW
GetFileTime
SetFileTime
ReplaceFileW
GetUserDefaultLCID
GetCurrentDirectoryW
GlobalReAlloc
SystemTimeToFileTime
GlobalGetAtomNameW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
lstrlenA
GetSystemDirectoryW
CompareStringW
GetTickCount
GetShortPathNameW
GetFullPathNameW
LocalFree
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
MoveFileW
GetThreadLocale
GetStringTypeExW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
GetLocaleInfoW
LoadLibraryExW
InterlockedExchange
lstrcmpW
FreeLibrary
ReleaseActCtx
CreateActCtxW
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GlobalSize
MulDiv
GetLongPathNameW
CreateDirectoryW
WriteFile
GlobalFree
FreeResource
user32
GetDialogBaseUnits
GetIconInfo
GetNextDlgGroupItem
InvalidateRgn
CharNextW
GetTabbedTextExtentW
EnumChildWindows
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
RealChildWindowFromPoint
UnregisterClassW
GetMenuDefaultItem
DestroyCursor
CopyAcceleratorTableW
GetUpdateRect
SetRect
SetCursorPos
CopyIcon
GetMenuItemInfoW
GetSystemMenu
SetMenuDefaultItem
DrawFrameControl
DrawEdge
IsMenu
UpdateLayeredWindow
CopyImage
UnionRect
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
UnpackDDElParam
ReuseDDElParam
GetMenuBarInfo
InsertMenuItemW
IntersectRect
BringWindowToTop
TranslateAcceleratorW
MapVirtualKeyW
GetKeyNameTextW
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
SendDlgItemMessageA
WinHelpW
GetClassLongW
GetClassNameW
RemovePropW
BeginDeferWindowPos
EndDeferWindowPos
GetMessageTime
GetMessagePos
MonitorFromWindow
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
ShowScrollBar
CreateWindowExW
GetClassInfoExW
RegisterClassW
SendNotifyMessageW
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcW
CallWindowProcW
GetMenu
DestroyAcceleratorTable
SetClassLongW
NotifyWinEvent
SetParent
GetTopWindow
CheckMenuItem
CreatePopupMenu
ShowOwnedPopups
CreateDialogIndirectParamW
DestroyWindow
GetNextDlgTabItem
EndDialog
GetDesktopWindow
WaitMessage
PostThreadMessageW
GetClassInfoW
LoadAcceleratorsW
DestroyMenu
GetSysColorBrush
MonitorFromPoint
GetMonitorInfoW
SetWindowRgn
SetWindowContextHelpId
MapDialogRect
GetLastActivePopup
CharUpperW
OffsetRect
UnhookWindowsHookEx
ScrollWindowEx
IsWindowEnabled
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
GetWindowLongW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
SendDlgItemMessageW
GetDlgItemTextW
GetDlgItemInt
GetDlgItem
CheckRadioButton
CheckDlgButton
SetWindowsHookExW
CallNextHookEx
GetMessageW
ValidateRect
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
RemoveMenu
DrawIconEx
LockWindowUpdate
IsChild
FillRect
MessageBeep
SetActiveWindow
GetCaretPos
InSendMessage
FrameRect
GetDoubleClickTime
CharUpperBuffW
SubtractRect
IsCharLowerW
MapVirtualKeyExW
DrawIcon
WindowFromDC
CreateMenu
GetWindowRgn
GetDCEx
SendMessageA
ModifyMenuA
WinHelpA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetAsyncKeyState
RegisterClipboardFormatW
InvalidateRect
ReleaseDC
GetClipboardData
IsClipboardFormatAvailable
LoadBitmapW
InflateRect
GetSysColor
SetClipboardData
EmptyClipboard
CreateWindowExA
GetWindowLongA
MessageBoxA
wsprintfA
ShowCaret
SetCaretPos
CreateCaret
AdjustWindowRectEx
DestroyCaret
CloseClipboard
OpenClipboard
GetWindowRect
SystemParametersInfoW
ReplyMessage
KillTimer
IsZoomed
GetSystemMetrics
GetDC
GetFocus
DeleteMenu
GetSubMenu
LoadMenuW
SetTimer
GetWindowTextW
GetWindowTextLengthW
SetFocus
GetKeyState
IsWindow
GetParent
EqualRect
IsRectEmpty
SetCapture
GetCapture
ReleaseCapture
WindowFromPoint
ClientToScreen
GetClientRect
SetCursor
ScreenToClient
GetCursorPos
RedrawWindow
DrawStateW
CopyRect
EnableWindow
PtInRect
SetRectEmpty
PostMessageW
MsgWaitForMultipleObjects
DestroyIcon
DispatchMessageW
TranslateMessage
GetActiveWindow
LoadImageW
LoadIconW
AttachThreadInput
GetWindowThreadProcessId
UpdateWindow
SetPropW
SendMessageTimeoutW
SetForegroundWindow
IsIconic
IsHungAppWindow
GetPropW
GetForegroundWindow
GetWindow
PostQuitMessage
PeekMessageW
IsWindowVisible
ShowWindow
SetWindowPos
MessageBoxW
RegisterWindowMessageW
SendMessageW
GetScrollPos
gdi32
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
StartDocW
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
SelectPalette
PlayMetaFileRecord
GetObjectType
SetBkMode
PlayMetaFile
ExtCreatePen
CreateHatchBrush
SetRectRgn
CombineRgn
GetMapMode
Polygon
SetDIBColorTable
GetDIBits
RealizePalette
StretchBlt
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
GetTextColor
StartPage
EndPage
EndDoc
RoundRect
SetAbortProc
AbortDoc
GetViewportOrgEx
OffsetRgn
GetRgnBox
GetCharWidthW
StretchDIBits
CreatePalette
GetPaletteEntries
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
GetWindowOrgEx
GetNearestPaletteIndex
GetSystemPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
CreateMetaFileW
CloseMetaFile
DeleteMetaFile
EnumFontFamiliesExW
SetPixelV
GetTextCharset
AddFontResourceExW
SaveDC
RestoreDC
CreateDIBSection
GetCurrentObject
DeleteDC
GetTextCharsetInfo
EnumFontFamiliesW
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreatePatternBrush
CreateDIBitmap
CreateBitmap
SetBkColor
SetTextColor
GetTextExtentPoint32W
CreateRoundRectRgn
CreateDCW
CopyMetaFileW
GetTextMetricsW
Ellipse
CreatePen
CreateFontW
SetPixel
Polyline
SelectObject
Rectangle
PatBlt
CreateSolidBrush
GetStockObject
CreateFontIndirectW
GetDeviceCaps
DPtoLP
DeleteObject
GetObjectW
CreateRectRgnIndirect
EnumMetaFile
GetPixel
LPtoDP
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleW
winspool.drv
GetJobW
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
AdjustTokenPrivileges
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueW
RegSetValueW
RegDeleteValueW
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyW
LookupPrivilegeValueA
OpenProcessToken
RegEnumKeyExW
RegEnumValueW
GetFileSecurityW
SetFileSecurityW
RegEnumKeyW
shell32
SHAppBarMessage
DragAcceptFiles
ShellExecuteW
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
SHGetFileInfoW
ord165
ExtractIconW
SHAddToRecentDocs
SHChangeNotify
ShellExecuteExW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder
comctl32
InitCommonControlsEx
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx
shlwapi
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
StrFormatByteSizeW
SHDeleteKeyA
StrCmpNIA
ole32
OleCreateMenuDescriptor
OleCreateLinkToFile
CoTaskMemAlloc
StringFromCLSID
CoTreatAsClass
OleDuplicateData
CoCreateGuid
CoFreeUnusedLibraries
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
PropVariantCopy
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoDisconnectObject
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleLockRunning
OleSetMenuDescriptor
StgCreateDocfile
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
OleGetClipboard
OleRegEnumVerbs
OleRegGetMiscStatus
OleTranslateAccelerator
IsAccelerator
OleCreateFromFile
OleDestroyMenuDescriptor
OleRun
OleSave
WriteClassStm
OleSaveToStream
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreate
OleLoad
GetHGlobalFromILockBytes
OleSetContainedObject
StringFromIID
MkParseDisplayName
OleQueryLinkFromData
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance
OleQueryCreateFromData
CreateDataAdviseHolder
OleUninitialize
OleInitialize
CreateOleAdviseHolder
CoGetMalloc
OleIsRunning
GetRunningObjectTable
CreateGenericComposite
CreateItemMoniker
OleGetIconOfClass
oleaut32
SysAllocString
DispGetIDsOfNames
SafeArrayCreateVector
LHashValOfNameSys
OleSavePictureFile
UnRegisterTypeLi
GetActiveObject
VariantCopyInd
LoadTypeLibEx
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringLen
OleLoadPicture
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringByteLen
SysStringLen
SysFreeString
GetErrorInfo
SetErrorInfo
SysStringByteLen
CreateErrorInfo
oledlg
OleUIBusyW
gdiplus
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdipFillPath
GdipDrawLine
GdipDrawPath
GdipAddPathLine
GdipAddPathBezier
GdipSetPixelOffsetMode
GdipResetWorldTransform
GdipFillEllipseI
GdipCreateTexture
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipDrawImageRectRect
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipFillEllipse
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientGammaCorrection
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipAddPathEllipse
GdipDeletePath
GdipCreatePath
GdipCreateLineBrushFromRectWithAngle
GdipDrawRectangleI
GdipSetPenDashStyle
GdipDeletePen
GdipCreatePen1
GdipDrawImageRectI
GdipFillRectangleI
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipResetClip
GdipDrawCachedBitmap
GdipDeleteCachedBitmap
GdipCreateCachedBitmap
GdipSetClipRectI
GdipDrawImageRectRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdiplusStartup
GdiplusShutdown
GdipNewPrivateFontCollection
GdipFree
GdipDeletePrivateFontCollection
GdipPrivateAddFontFile
GdipGetFontCollectionFamilyCount
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipGetFamilyName
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipAlloc
GdipCloneImage
imm32
ImmSetCandidateWindow
ImmGetOpenStatus
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
ImmGetCompositionWindow
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
winmm
PlaySoundW
Sections
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 739KB - Virtual size: 739KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ