Static task
static1
Behavioral task
behavioral1
Sample
2024-07-06_4ad2ee1ac18c1e3ca2ee7273467fad59_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-07-06_4ad2ee1ac18c1e3ca2ee7273467fad59_icedid.exe
Resource
win10v2004-20240704-en
General
-
Target
2024-07-06_4ad2ee1ac18c1e3ca2ee7273467fad59_icedid
-
Size
490KB
-
MD5
4ad2ee1ac18c1e3ca2ee7273467fad59
-
SHA1
6a1a6cc9680b71521a15d9204b3af3d7f945a8a6
-
SHA256
e0331e2d48947f4b100fdf71c11b771cdf6c8edf798bcb26bcb21f1e1bb4245e
-
SHA512
fbfbaaeff666c7e3eec947360c142bcebdf171c5419bcf59aaba6384c33b3071fc2867041d0a487601c7c4d205fe9921c8c169b438a2c9ed48f2e6c183ab2fbc
-
SSDEEP
12288:f3tPTbZujM6vdfz+RmrqblJoprtU2HJwVP7cWCWB/cMUWTd:f/uYIR6BblJOrtvHJwVDH/cMUWTd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-06_4ad2ee1ac18c1e3ca2ee7273467fad59_icedid
Files
-
2024-07-06_4ad2ee1ac18c1e3ca2ee7273467fad59_icedid.exe windows:5 windows x86 arch:x86
05bb508fa80cff5d666f486464a9a2ff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cdrs_ini
ord1
ord2
kernel32
ReleaseSemaphore
Sleep
CreateThread
CreateSemaphoreA
QueryPerformanceFrequency
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetFileType
GetStdHandle
SetHandleCount
IsValidCodePage
GetACP
HeapSize
HeapReAlloc
VirtualAlloc
GetStartupInfoA
GetCommandLineA
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
ExitProcess
HeapAlloc
RaiseException
IsDebuggerPresent
IsBadReadPtr
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetProcessHeap
HeapFree
GetOEMCP
GetCPInfo
GetLocaleInfoA
InterlockedExchange
GlobalFindAtomA
lstrcmpW
GetVersionExA
CreateFileA
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
VirtualFree
HeapCreate
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
DeleteFileA
GlobalFlags
WaitForSingleObject
GetCurrentThreadId
CloseHandle
GlobalGetAtomNameA
lstrcmpA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GetModuleHandleA
SetEnvironmentVariableA
GetStringTypeExW
InterlockedCompareExchange
GetModuleHandleW
CompareStringA
GetCurrentProcessId
GetModuleFileNameA
GetLastError
SetLastError
FormatMessageA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenW
WideCharToMultiByte
lstrlenA
GlobalAddAtomA
WinExec
GlobalDeleteAtom
GetTickCount
GlobalCompact
LocalSize
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
GlobalAlloc
LocalAlloc
LocalLock
LocalUnlock
LocalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalFree
SetUnhandledExceptionFilter
user32
UnpackDDElParam
DestroyMenu
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
LoadStringW
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
GetClassInfoExA
GetClassInfoA
AdjustWindowRectEx
CopyRect
CallWindowProcA
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
UnregisterClassA
SetWindowPos
SetWindowLongA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowsHookExA
CallNextHookEx
GetKeyState
ValidateRect
UnhookWindowsHookEx
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowTextA
GetWindowThreadProcessId
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
WaitMessage
EnumThreadWindows
FreeDDElParam
PackDDElParam
RegisterClipboardFormatA
GetSubMenu
FindWindowA
PostQuitMessage
DefWindowProcA
IsWindow
ShowWindow
PeekMessageA
GetActiveWindow
SetFocus
UpdateWindow
CreateDialogParamA
DestroyWindow
CreateWindowExA
SetWindowTextA
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassA
wsprintfA
LoadStringA
GetDlgItem
SendMessageA
GetDlgItemTextA
SetDlgItemTextA
RemovePropA
GetPropA
SetPropA
GetFocus
MessageBoxA
gdi32
OffsetViewportOrgEx
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
PtVisible
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
GetStockObject
GetDeviceCaps
DeleteObject
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetMapMode
SetViewportExtEx
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
CryptAcquireContextA
CryptGenKey
CryptExportKey
CryptDestroyKey
CryptDecrypt
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptEncrypt
CryptImportKey
CryptReleaseContext
ole32
CoInitialize
CoUninitialize
CoCreateInstance
OleRun
CLSIDFromProgID
CLSIDFromString
oleaut32
SafeArrayGetElement
SafeArrayDestroy
VariantClear
VariantChangeType
SysStringLen
SysAllocString
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SysFreeString
VariantInit
SysStringByteLen
SysAllocStringByteLen
GetErrorInfo
oleacc
CreateStdAccessibleObject
LresultFromObject
Sections
.text Size: 413KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ