Static task
static1
Behavioral task
behavioral1
Sample
2024-07-06_73572ad0215ada830f6ebbf357e44e38_icedid.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-07-06_73572ad0215ada830f6ebbf357e44e38_icedid.exe
Resource
win10v2004-20240704-en
General
-
Target
2024-07-06_73572ad0215ada830f6ebbf357e44e38_icedid
-
Size
5.1MB
-
MD5
73572ad0215ada830f6ebbf357e44e38
-
SHA1
cba1ead4b48419116993805ecbb06ba485cf7538
-
SHA256
8d4fc03e37392faa7ce37cd159f6419432d08c61dc0740c57ed4e5d10c6fb6ff
-
SHA512
a6227ee7b18a31f64c6a9145bd96080a111d58f2d7f82fc627d6592dab5898c88c3c284d8f2170e130e6de485558479af1d8d1873e285d581372486e8b217bbd
-
SSDEEP
49152:Q+2LRDyxd9PwuzhNGrd/JULVX3MaPTJUu59qqTxx:Qnuxd9oudMy9bTxx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-06_73572ad0215ada830f6ebbf357e44e38_icedid
Files
-
2024-07-06_73572ad0215ada830f6ebbf357e44e38_icedid.exe windows:4 windows x86 arch:x86
a4f3615ece3d7e5818a80016e23a58c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
ExitThread
CreateThread
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
VirtualQuery
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
GetLocaleInfoA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
LockResource
LoadResource
FindResourceW
GetDateFormatA
CloseHandle
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
RtlUnwind
GetStartupInfoW
GetProcessHeap
HeapAlloc
HeapFree
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
AreFileApisANSI
DeviceIoControl
FormatMessageA
InterlockedCompareExchange
EnumResourceTypesW
EnumResourceNamesW
LocalSize
GetExitCodeThread
TerminateThread
FlushInstructionCache
lstrcpynA
GetTimeFormatA
Sleep
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetConsoleScreenBufferInfo
GetStdHandle
SetConsoleTextAttribute
GetConsoleWindow
GetProcAddress
GetModuleHandleW
GetLastError
CreateMutexW
GetFileAttributesW
MulDiv
GetModuleFileNameW
SetPriorityClass
GetCurrentProcess
WriteConsoleW
SetCurrentDirectoryW
GetSystemWindowsDirectoryW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
LocalFree
GetVersionExW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
SizeofResource
GetTickCount
OpenProcess
TerminateProcess
GetCurrentThreadId
GetSystemInfo
SetEvent
ResetEvent
LoadLibraryW
FreeLibrary
GetStringTypeExW
GetThreadLocale
lstrlenA
WritePrivateProfileStringW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
ResumeThread
GetModuleHandleA
InterlockedDecrement
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
WideCharToMultiByte
CompareStringA
InterlockedExchange
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
MultiByteToWideChar
GetVersionExA
GlobalAlloc
SetLastError
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetTimeZoneInformation
OutputDebugStringW
WriteFile
lstrcpynW
GetCurrentProcessId
CreateEventA
FindFirstFileW
FindNextFileW
FindClose
RemoveDirectoryW
FormatMessageW
DeleteFileW
CreateEventW
SwitchToThread
SetThreadAffinityMask
SetThreadPriority
InitializeCriticalSection
ReleaseMutex
lstrlenW
CreateFileW
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcpyW
IsBadReadPtr
IsBadCodePtr
user32
InflateRect
LoadCursorW
GetSysColorBrush
DrawIcon
SendMessageW
PostMessageW
IsIconic
SetWindowContextHelpId
MapDialogRect
SetCursor
GetMessageW
GetCursorPos
ValidateRect
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
GetMenuItemInfoW
ShowWindow
CopyAcceleratorTableW
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
IsRectEmpty
SetRect
InvalidateRgn
SetCapture
ReleaseCapture
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatW
PostThreadMessageW
CheckMenuItem
SendDlgItemMessageW
DestroyMenu
SystemParametersInfoW
UnregisterClassW
DestroyIcon
CharUpperW
PostQuitMessage
CharNextW
GetClientRect
EnableWindow
LoadIconW
GetSystemMetrics
LoadImageW
RegisterWindowMessageW
WaitForInputIdle
wsprintfW
DispatchMessageW
TranslateMessage
PeekMessageW
EndDialog
GetNextDlgTabItem
MoveWindow
GetParent
IsWindowEnabled
GetDlgItem
GetWindowLongW
IsWindow
DestroyWindow
CreateDialogIndirectParamW
SetActiveWindow
GetActiveWindow
GetDesktopWindow
GetSubMenu
GetMenuItemCount
GetMenuItemID
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
GetKeyState
GetScrollPos
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
UnregisterClassA
LoadStringW
ScreenToClient
EqualRect
GetScrollInfo
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
GetMenuState
GetMenuStringW
SetTimer
SetWindowLongA
GetWindowLongA
IsWindowUnicode
EnumWindows
GetMenuItemRect
SetRectEmpty
SendMessageTimeoutW
DrawEdge
DrawIconEx
DrawStateW
SetWindowRgn
KillTimer
SetClassLongW
GetSystemMenu
SetMenuDefaultItem
GetMenuDefaultItem
WaitMessage
DrawFocusRect
GetDoubleClickTime
GetIconInfo
CopyIcon
CreateIconFromResourceEx
CreateIconIndirect
LookupIconIdFromDirectoryEx
LoadMenuW
InvalidateRect
gdi32
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
GetStockObject
GetObjectW
CreateFontIndirectW
SelectPalette
GetObjectType
SetBkMode
CreatePen
CreateSolidBrush
GetTextExtentPoint32W
GetTextMetricsW
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
SetStretchBltMode
SetMapMode
ExcludeClipRect
IntersectClipRect
DeleteObject
SelectClipRgn
GetClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
CreateCompatibleBitmap
OffsetRgn
GetTextCharsetInfo
StretchBlt
CreateDIBSection
SetBrushOrgEx
Polygon
CreatePalette
CreateDIBitmap
GetDIBits
StretchDIBits
ScaleWindowExtEx
CreateCompatibleDC
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateRectRgnIndirect
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegCloseKey
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
comctl32
InitCommonControlsEx
FlatSB_GetScrollProp
_TrackMouseEvent
ImageList_GetBkColor
ImageList_GetImageInfo
ImageList_DrawIndirect
ImageList_GetIconSize
ImageList_Destroy
shlwapi
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
wnsprintfW
SHDeleteKeyW
PathIsUNCW
oledlg
OleUIBusyW
ole32
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
CLSIDFromString
CoRegisterMessageFilter
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromProgID
oleaut32
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
SysStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
OleLoadPicturePath
imagehlp
ImageDirectoryEntryToData
winmm
PlaySoundW
Sections
.text Size: 896KB - Virtual size: 895KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 296KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 732KB - Virtual size: 729KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ