Static task
static1
Behavioral task
behavioral1
Sample
2024-07-07_87b47ee4b862b331ff2a6abc82254670_icedid.exe
Behavioral task
behavioral2
Sample
2024-07-07_87b47ee4b862b331ff2a6abc82254670_icedid.exe
General
-
Target
2024-07-07_87b47ee4b862b331ff2a6abc82254670_icedid
-
Size
1.6MB
-
MD5
87b47ee4b862b331ff2a6abc82254670
-
SHA1
cb7b8ee1237344b91ce81441412fde58f39979ce
-
SHA256
bd7df54d664e5e1091587f1ec862c679f72a140a8212caec2bff33a6fa79c625
-
SHA512
690b43962f5081e3a0fb762aa19ead5cb17d2ba86bc2c28ca29f749e00dc3bfa64901af1e290cea58f1274c874dd978ba5f7f542ff5d9ea565d9cc75a1fa4fef
-
SSDEEP
24576:6SVxhBFI4v36NEEh08fSnkQBQutsNA3/Nv81ADNNS8NMds33XhPZkhGPZfQMe:3rrFI4vKE7P7k2Zf7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-07_87b47ee4b862b331ff2a6abc82254670_icedid
Files
-
2024-07-07_87b47ee4b862b331ff2a6abc82254670_icedid.exe windows:4 windows x86 arch:x86
bb0dbb5dc65995e3567b4494681a4978
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imageload
MedianCut
SaveBMP
SaveGIF
SaveJPG
SavePCX
SaveTGA
SaveTIF
FileType
LoadBMP
LoadGIF
LoadJPG
LoadPCX
LoadTGA
LoadTIF
GetLastPicLibError
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
GetOEMCP
GetProfileStringA
GetExitCodeThread
ResetEvent
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
lstrcpyA
lstrcpynA
EnterCriticalSection
FormatMessageA
LocalFree
InterlockedDecrement
InterlockedIncrement
FileTimeToSystemTime
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GlobalSize
GlobalReAlloc
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
TerminateThread
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetLocalTime
FindFirstFileA
FindNextFileA
FindClose
WriteFile
WaitForSingleObject
SetEvent
CreateFileA
ReadFile
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateDirectoryA
GetLastError
Sleep
DeleteFileA
CreateEventA
GetModuleFileNameA
FreeLibrary
LoadLibraryA
OpenFileMappingA
MapViewOfFile
CreateFileMappingA
CloseHandle
UnmapViewOfFile
GetPrivateProfileIntA
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
DuplicateHandle
GetCurrentProcess
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetProcAddress
GetVolumeInformationA
GetFullPathNameA
GetThreadLocale
lstrcmpiA
SetLastError
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
GetPrivateProfileStringA
GetPrivateProfileSectionA
lstrcatA
GetVersion
LockResource
LoadResource
FindResourceA
MulDiv
GetCurrentThread
lstrcmpA
ResumeThread
SetThreadPriority
SuspendThread
GetFileAttributesA
GetFileSize
GetFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
CopyFileA
GlobalFlags
TlsAlloc
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
GetProcessVersion
GetCPInfo
SizeofResource
WritePrivateProfileStringA
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
HeapFree
GetTimeZoneInformation
HeapAlloc
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
GetSystemTime
GetACP
CreateThread
ExitThread
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
CompareStringW
CompareStringA
user32
FindWindowA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ClientToScreen
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
ValidateRect
GetMessageA
LoadStringA
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
FillRect
PostMessageA
MapWindowPoints
GetSysColor
GetFocus
DestroyMenu
SetFocus
AdjustWindowRectEx
SetCursor
EqualRect
DeferWindowPos
IsRectEmpty
InflateRect
WaitMessage
KillTimer
CreateDialogIndirectParamA
GetActiveWindow
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
EndDialog
wvsprintfA
PostQuitMessage
ShowOwnedPopups
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
SendMessageA
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
ScreenToClient
GetCursorPos
WindowFromPoint
InsertMenuA
GetMenuStringA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
SetCapture
DeleteMenu
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
PostThreadMessageA
DestroyIcon
wsprintfA
OffsetRect
UpdateWindow
GetClientRect
InvalidateRect
EnableWindow
SetActiveWindow
GetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
IntersectRect
GetWindowPlacement
CharUpperA
GetDesktopWindow
GetWindowTextLengthA
GetWindowTextA
GetDlgItem
SendDlgItemMessageA
UnionRect
GetDC
LoadImageA
UnregisterClassA
DrawMenuBar
TranslateMDISysAccel
DefFrameProcA
ExcludeUpdateRgn
DefDlgProcA
GetTabbedTextExtentA
GetClipboardFormatNameA
IsZoomed
SendMessageTimeoutA
DrawEdge
GetDoubleClickTime
OpenClipboard
EmptyClipboard
CloseClipboard
IsWindowUnicode
GetWindowLongW
SetWindowLongW
CreatePopupMenu
IsClipboardFormatAvailable
SetCursorPos
GetCursor
GetKeyboardLayoutList
GetKeyboardState
ToAsciiEx
GetKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
IsCharLowerA
GetMenuDefaultItem
DrawFrameControl
SetWindowRgn
GetWindowRgn
HideCaret
ShowCaret
IsMenu
GetMenuItemInfoA
MapVirtualKeyA
SetClipboardData
CopyIcon
CreateIconIndirect
GetIconInfo
IsIconic
GetSystemMetrics
DrawIcon
RedrawWindow
GetDlgCtrlID
GetSystemMenu
AppendMenuA
SystemParametersInfoA
SetTimer
PeekMessageA
TranslateMessage
DispatchMessageA
LoadIconA
ShowWindow
SetForegroundWindow
SetParent
GetWindowRect
GetParent
IsWindow
RegisterWindowMessageA
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
GetMenuStringW
InvertRect
GetDCEx
LockWindowUpdate
DrawStateA
DrawFocusRect
DrawIconEx
gdi32
CreateDIBitmap
GetTextExtentPointA
GetTextAlign
GetCharWidthA
ExtTextOutW
GetClipBox
CloseFigure
EndPath
StrokeAndFillPath
FillPath
StrokePath
Ellipse
ExtFloodFill
RoundRect
CreatePolygonRgn
GetRgnBox
GetWindowOrgEx
GetViewportOrgEx
Polyline
CreateFontA
ExtCreateRegion
GetBitmapBits
GetCurrentObject
PtInRegion
CreateDIBSection
Polygon
EnumFontFamiliesExA
SetPixel
GetPixel
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
SetBkColor
GetTextExtentPoint32W
SetTextColor
GetDeviceCaps
CreatePalette
StretchDIBits
GetSystemPaletteEntries
GetDIBits
GetObjectA
StretchBlt
CreateCompatibleDC
PolyBezierTo
CreateCompatibleBitmap
SetBitmapDimensionEx
GetBitmapDimensionEx
BeginPath
GetBkColor
GetTextColor
GetTextMetricsA
GetTextExtentPoint32A
CopyMetaFileA
CreateFontIndirectA
CreateRectRgnIndirect
CombineRgn
SetRectRgn
PatBlt
GetMapMode
DPtoLP
LPtoDP
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreatePatternBrush
CreateSolidBrush
CreatePen
GetWindowExtEx
GetViewportExtEx
ExtSelectClipRgn
CreateRectRgn
GetClipRgn
DeleteObject
GetStockObject
GetCurrentPositionEx
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetBkMode
BitBlt
comdlg32
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
ChooseColorA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
shell32
ShellExecuteA
DragQueryFileA
DragFinish
comctl32
InitCommonControlsEx
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Remove
ImageList_Draw
ImageList_GetImageInfo
ImageList_Add
ImageList_ReplaceIcon
ImageList_DrawEx
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_AddMasked
ImageList_GetIcon
_TrackMouseEvent
ord17
oledlg
ord1
ord8
ole32
CoRevokeClassObject
ReleaseStgMedium
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
OleDuplicateData
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoDisconnectObject
CoTaskMemFree
OleGetClipboard
olepro32
ord253
oleaut32
LoadTypeLi
SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
VariantClear
OleLoadPicturePath
wsock32
recv
gethostbyname
closesocket
htonl
htons
bind
ioctlsocket
accept
send
WSAGetLastError
WSASetLastError
WSAStartup
WSACleanup
connect
sendto
recvfrom
socket
inet_ntoa
WSAAsyncSelect
wininet
InternetFindNextFileA
FtpFindFirstFileA
FtpGetFileA
FtpPutFileA
FtpOpenFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
InternetGetLastResponseInfoA
FtpCreateDirectoryA
FtpDeleteFileA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetCloseHandle
InternetOpenA
InternetSetOptionA
winmm
PlaySoundA
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 200KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ