Static task
static1
Behavioral task
behavioral1
Sample
2024-07-07_f09d1fb457d9b246b05c732fa1477745_icedid.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-07-07_f09d1fb457d9b246b05c732fa1477745_icedid.exe
Resource
win10v2004-20240704-en
General
-
Target
2024-07-07_f09d1fb457d9b246b05c732fa1477745_icedid
-
Size
1.7MB
-
MD5
f09d1fb457d9b246b05c732fa1477745
-
SHA1
3f3a32a4f07662634f27523ca87b60ce0cf80eb0
-
SHA256
78bd79b6cd83ad87d0abd71558d405112d989f94181250e28507a9774b2bfcb0
-
SHA512
03e7e0c4e5faa289fc2bacd34a0e17d3a96953c510d07e892cde7ffc90766f0120985c5bb5b49c3887e080a96697cceeba20892d03523542f688191b4f4632cd
-
SSDEEP
24576:VKQbcef4lXqTaHx7hTEft+GJssJcoTtmtisEjxNeKpg38jiZ0GdchJc8iI5i:DbcGJ4oxMrEKP8jw0GdKaIo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-07_f09d1fb457d9b246b05c732fa1477745_icedid
Files
-
2024-07-07_f09d1fb457d9b246b05c732fa1477745_icedid.exe windows:4 windows x86 arch:x86
435cb5089a7aee8093d3e36e3dd726c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
GetPrivateProfileIntA
GetThreadLocale
FlushFileBuffers
DuplicateHandle
GetVolumeInformationA
GetCurrentProcessId
ResumeThread
SuspendThread
InterlockedDecrement
VirtualProtect
GetProfileIntA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GetFileTime
GetTempFileNameA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GlobalFlags
LocalAlloc
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
SetErrorMode
FindResourceExA
HeapFree
GetSystemTimeAsFileTime
GetTimeFormatA
GetCurrentThreadId
GetConsoleCP
GetConsoleMode
ExitProcess
GetDriveTypeW
GetFileType
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
ExitThread
CreateThread
HeapSize
SetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetACP
IsValidCodePage
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetHandleCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetEnvironmentVariableA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetCurrentProcess
FormatMessageA
GetDiskFreeSpaceA
GetShortPathNameW
RemoveDirectoryA
UnlockFile
RemoveDirectoryW
GetVersionExA
MulDiv
LockFile
SetFileAttributesW
WaitForMultipleObjects
FindFirstChangeNotificationA
FindCloseChangeNotification
CreateEventA
FindNextChangeNotification
SetEvent
GlobalGetAtomNameA
GlobalGetAtomNameW
SetEndOfFile
SetThreadPriority
GetModuleFileNameW
CompareFileTime
CreateSemaphoreA
ReleaseSemaphore
CopyFileW
GetCurrentDirectoryW
DosDateTimeToFileTime
GetFullPathNameA
GlobalSize
GetFullPathNameW
SetFileTime
GlobalAddAtomW
GlobalHandle
CreateMutexA
DeleteAtom
GetCommandLineA
LocalFree
ReleaseMutex
GlobalAddAtomA
OpenSemaphoreA
GetCommandLineW
VirtualAllocEx
WriteProcessMemory
VirtualAlloc
CreateFileMappingA
ReadProcessMemory
VirtualFreeEx
OpenProcess
UnmapViewOfFile
MapViewOfFile
VirtualFree
GetPrivateProfileStringA
WritePrivateProfileStringA
SetLastError
GetSystemDefaultLangID
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToDosDateTime
HeapReAlloc
GetDriveTypeA
GetLogicalDriveStringsA
GetWindowsDirectoryA
ReadFile
GetTempPathA
CreateProcessW
DeleteFileA
GetCurrentDirectoryA
GetExitCodeProcess
GetFileSize
GetShortPathNameA
CreateProcessA
HeapCreate
CreateFileA
GetTickCount
lstrcpyW
MoveFileA
SetFilePointer
FindClose
IsDBCSLeadByte
GetModuleHandleA
FindFirstFileA
Sleep
SetCurrentDirectoryW
GetFileAttributesW
DeleteFileW
FileTimeToSystemTime
SearchPathW
GetTempPathW
SetCurrentDirectoryA
WaitForSingleObject
GlobalFree
FindNextFileW
CreateFileW
GlobalAlloc
CopyFileA
WriteFile
CreateDirectoryA
MoveFileW
GlobalReAlloc
TerminateThread
HeapAlloc
FindFirstFileW
FileTimeToLocalFileTime
FindNextFileA
GlobalLock
lstrcatW
SetFileAttributesA
GlobalUnlock
CreateDirectoryW
CloseHandle
SearchPathA
lstrcatA
FreeLibrary
GetSystemDirectoryA
GetFileAttributesA
GetModuleFileNameA
HeapDestroy
LoadLibraryA
GetProcAddress
lstrcmpA
GetLastError
LockResource
CompareStringA
lstrlenW
GetStringTypeExA
FindResourceA
SizeofResource
MultiByteToWideChar
InterlockedExchange
WideCharToMultiByte
lstrlenA
lstrcmpiA
CompareStringW
GetVersion
lstrcpyA
GetDateFormatA
LoadResource
user32
PostThreadMessageA
SetParent
GetDCEx
DrawMenuBar
SetMenu
GetMenu
LoadImageA
DrawIconEx
GetSystemMenu
DeleteMenu
DefWindowProcW
InsertMenuItemA
GetWindowPlacement
keybd_event
GetClassInfoA
InsertMenuW
RemoveMenu
CallNextHookEx
CheckMenuRadioItem
SetWindowTextW
SetRect
ClientToScreen
IsWindowVisible
GetMessageA
mouse_event
RedrawWindow
GetCapture
CloseClipboard
FrameRect
GetScrollBarInfo
GetAsyncKeyState
OpenClipboard
EmptyClipboard
CheckMenuItem
DrawTextA
IntersectRect
IsCharUpperA
DrawFocusRect
DrawTextW
GetWindowTextW
GetFocus
IsZoomed
ReleaseDC
EnableMenuItem
GetDC
IsCharLowerA
LoadStringW
GetMenuStringA
EnumWindows
RegisterClipboardFormatA
IsCharUpperW
WaitForInputIdle
EnumDisplaySettingsA
RegisterWindowMessageA
PostQuitMessage
GetDesktopWindow
CreateWindowExA
UnregisterClassA
RegisterClassA
DefWindowProcA
SystemParametersInfoA
GetWindowThreadProcessId
SetCapture
WindowFromPoint
GetCursor
ReleaseCapture
ShowCursor
DrawFrameControl
CheckRadioButton
GetWindowTextA
SetMenuItemInfoA
DrawStateA
CreateMenu
GetMenuItemInfoA
GetMenuItemCount
GetTopWindow
InflateRect
DrawEdge
GetClassNameA
EnumChildWindows
FindWindowExA
GetSystemMetrics
DeferWindowPos
EndDeferWindowPos
LoadMenuA
GetSubMenu
ModifyMenuA
IsWindow
OffsetRect
BeginDeferWindowPos
FillRect
InvalidateRect
GetClientRect
GetSysColor
SetWindowLongA
GetWindowLongA
SetForegroundWindow
IsChild
SetMenuDefaultItem
SendMessageW
GetKeyState
DispatchMessageA
SetWindowTextA
wsprintfW
EnableWindow
CharLowerA
CharUpperW
CharUpperA
SendMessageA
GetMessageTime
GetMessagePos
IsDlgButtonChecked
PostMessageA
MessageBoxW
SetFocus
PeekMessageA
ShowWindow
FindWindowA
CreateDialogParamA
SetDlgItemTextW
IsWindowEnabled
IsDialogMessageA
CheckDlgButton
TranslateMessage
GetDlgItemTextA
DestroyWindow
UpdateWindow
ScreenToClient
GetForegroundWindow
GetWindowRect
SetDlgItemTextA
GetSysColorBrush
UnionRect
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
IsClipboardFormatAvailable
ShowOwnedPopups
IsRectEmpty
MapDialogRect
ValidateRect
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
TabbedTextOutA
GetActiveWindow
CreateDialogIndirectParamA
GetClassLongA
EndDialog
DestroyMenu
GetParent
AppendMenuA
MessageBeep
MessageBoxA
TrackPopupMenu
DestroyIcon
GetDlgItem
SetWindowPos
PtInRect
LoadCursorA
SetCursor
GetCursorPos
DialogBoxParamA
SetTimer
CreatePopupMenu
KillTimer
LoadIconA
wsprintfA
ChildWindowFromPoint
LoadStringA
CharLowerW
SetPropA
GetPropA
RemovePropA
GetLastActivePopup
LoadBitmapA
SetActiveWindow
GetScrollPos
GetClassInfoExA
AdjustWindowRectEx
SetWindowPlacement
IsIconic
GetWindowTextLengthA
GetMenuCheckMarkDimensions
IsMenu
MapWindowPoints
WinHelpA
GetDlgCtrlID
LockWindowUpdate
CallWindowProcA
GetWindowLongW
CallWindowProcW
SetWindowLongW
GetWindow
SetClipboardData
MoveWindow
GetDlgItemTextW
SendDlgItemMessageA
GetNextDlgTabItem
EqualRect
InsertMenuA
AppendMenuW
SetWindowsHookExA
UnhookWindowsHookEx
GetMenuState
CopyRect
GetMenuItemID
SetMenuItemBitmaps
gdi32
SelectClipRgn
CreateRectRgn
GetPixel
PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
CreatePatternBrush
CreatePen
GetTextMetricsA
GetCharWidthA
StretchDIBits
SetRectRgn
CombineRgn
EnumFontFamiliesExA
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
RestoreDC
SaveDC
CopyMetaFileA
GetClipBox
DeleteDC
Polygon
SetBkColor
GetDeviceCaps
ExtTextOutA
GetTextColor
GetBkColor
StretchBlt
SetPixel
SetBkMode
SetTextColor
CreateSolidBrush
GetTextExtentPoint32W
GetTextExtentPoint32A
CreateBitmap
CreateCompatibleBitmap
PatBlt
CreateRectRgnIndirect
CreateCompatibleDC
BitBlt
CreateBitmapIndirect
GetStockObject
Ellipse
CreateFontA
DeleteObject
CreateFontIndirectA
GetObjectA
SelectObject
comdlg32
GetOpenFileNameW
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
GetSaveFileNameW
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
RegQueryValueExA
RegQueryInfoKeyA
RegCloseKey
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExW
RegSetValueExW
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExW
RegDeleteValueA
RegSetValueA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegOpenKeyExA
shell32
SHAddToRecentDocs
DragFinish
DragQueryFileW
DragAcceptFiles
DragQueryFileA
SHGetPathFromIDListW
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
SHGetFileInfoW
ExtractIconExW
ShellExecuteA
ExtractIconA
SHChangeNotify
SHGetFileInfoA
SHFileOperationA
ShellExecuteW
CommandLineToArgvW
ExtractIconExA
ShellExecuteExA
ShellExecuteExW
comctl32
ImageList_Destroy
ImageList_Draw
ImageList_Remove
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_Create
ImageList_ReplaceIcon
ImageList_DragLeave
ImageList_EndDrag
ImageList_GetIcon
InitCommonControlsEx
ImageList_AddMasked
ImageList_DragEnter
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_SetOverlayImage
ImageList_DrawEx
_TrackMouseEvent
ImageList_GetImageCount
PropertySheetA
ImageList_SetBkColor
shlwapi
PathIsUNCA
PathFindExtensionA
PathRemoveExtensionA
PathStripToRootA
PathFindFileNameA
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
DoDragDrop
OleDuplicateData
CoTaskMemAlloc
OleInitialize
CoTaskMemFree
ReleaseStgMedium
CreateStreamOnHGlobal
CoCreateInstance
CoGetClassObject
CLSIDFromString
OleGetClipboard
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
oleaut32
SystemTimeToVariantTime
SysFreeString
VariantTimeToSystemTime
DosDateTimeToVariantTime
OleLoadPicture
VarUdateFromDate
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
VarBstrFromDate
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
mpr
WNetEnumResourceW
WNetEnumResourceA
WNetOpenEnumW
WNetOpenEnumA
WNetCloseEnum
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 280KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ