Static task
static1
Behavioral task
behavioral1
Sample
2024-08-02_409aaba0fab4db8fe57e2cc444397661_icedid.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-08-02_409aaba0fab4db8fe57e2cc444397661_icedid.exe
Resource
win10v2004-20240730-en
General
-
Target
2024-08-02_409aaba0fab4db8fe57e2cc444397661_icedid
-
Size
1.2MB
-
MD5
409aaba0fab4db8fe57e2cc444397661
-
SHA1
9218dd634e64db40bec350066f9cb0a6028a1dd2
-
SHA256
cc7844608f100bec9fbd934059c499de259d55b9ce50cc0f2f154857aa01c3ef
-
SHA512
5d8b032fcfdfd77b647ce049fb2cd91edc2aa3d6394405152c8a14d38e2fac045f3324defbabe332705f3f1fb37069813c20c76683a78ba2242c04336045c642
-
SSDEEP
12288:sQexke4uakE2iTRc5Nqkv+/7UM96bA1qDHdVzHVnAOsXeDuUlc:vkWTRcHwjUMt1qDH7ZAOq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-02_409aaba0fab4db8fe57e2cc444397661_icedid
Files
-
2024-08-02_409aaba0fab4db8fe57e2cc444397661_icedid.exe windows:4 windows x86 arch:x86
5da7389a16be0781ce29bbbbf54e8b26
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
OpenMutexA
RaiseException
InterlockedIncrement
GlobalUnlock
GlobalLock
FreeResource
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetModuleFileNameW
InterlockedDecrement
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GetThreadLocale
FileTimeToSystemTime
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
FileTimeToLocalFileTime
GetCurrentProcessId
ReadFile
SetFilePointer
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetVolumeInformationA
GlobalFlags
GetCPInfo
GetOEMCP
CreateMutexA
SetErrorMode
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
HeapReAlloc
VirtualProtect
VirtualAlloc
VirtualQuery
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
HeapSize
GetACP
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetUserDefaultLangID
FormatMessageA
GetSystemInfo
GetFileTime
CompareFileTime
WritePrivateProfileStringA
GetSystemDefaultLangID
GetSystemDirectoryA
GetShortPathNameA
GetLocaleInfoA
GetStartupInfoA
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
CreateDirectoryA
GetTempPathA
FlushFileBuffers
GlobalAlloc
GlobalFree
GetVersionExA
HeapFree
GetProcessHeap
HeapAlloc
GetDriveTypeA
InitializeCriticalSection
GetFileSize
DeleteCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
WriteFile
OutputDebugStringA
CreateFileA
CopyFileA
MoveFileA
GetEnvironmentVariableA
CompareStringW
CompareStringA
GetVersion
InterlockedExchange
GetCommandLineA
TerminateProcess
OpenProcess
SetFileAttributesA
DeleteFileA
lstrcmpA
Sleep
CloseHandle
LocalAlloc
LocalFree
FindResourceExA
SetLastError
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetPrivateProfileStringA
GetCurrentDirectoryA
MulDiv
GetProcAddress
GetCurrentProcess
FreeLibrary
LoadLibraryA
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThreadId
GetTickCount
GetLastError
GetModuleHandleA
GetModuleFileNameA
lstrlenA
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
GetFullPathNameA
GetFileAttributesA
FindResourceA
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
user32
BeginPaint
EndPaint
CharNextA
FindWindowA
DrawIcon
SetWindowRgn
SetTimer
KillTimer
LoadCursorA
SetCursor
GetCursorPos
ValidateRect
GetActiveWindow
GetMessageA
ShowOwnedPopups
EndDialog
CreateDialogIndirectParamA
InflateRect
RegisterClipboardFormatA
TranslateAcceleratorA
SetMenu
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
DestroyMenu
LoadMenuA
ReuseDDElParam
UnpackDDElParam
GetSysColorBrush
UnregisterClassA
GetMenuItemInfoA
PostThreadMessageA
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
ShowWindow
MoveWindow
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
GetPropA
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
GetWindowPlacement
UnhookWindowsHookEx
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
IsDialogMessageA
MessageBeep
IsChild
GetTopWindow
GetNextDlgGroupItem
SetWindowContextHelpId
MapDialogRect
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
AdjustWindowRectEx
ReleaseCapture
SetFocus
SetWindowPos
GetDesktopWindow
GetFocus
SetCapture
InvalidateRgn
InvalidateRect
EqualRect
IntersectRect
OffsetRect
SetRect
IsRectEmpty
CopyRect
IsWindowEnabled
IsWindowVisible
CopyAcceleratorTableA
MessageBoxA
IsWindow
SetWindowTextA
GetSystemMetrics
WaitForInputIdle
MsgWaitForMultipleObjects
PostQuitMessage
GetWindowThreadProcessId
CharUpperA
LoadImageA
LoadIconA
IsIconic
LoadBitmapA
GetDC
SetWindowLongA
ReleaseDC
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA
RegisterWindowMessageA
SendMessageA
GetSysColor
GetWindowLongA
EnableWindow
GetParent
GetNextDlgTabItem
GetClientRect
GetWindowRect
GetKeyState
GetWindow
SetPropA
gdi32
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
CreateSolidBrush
GetBkColor
GetTextColor
CreateEllipticRgn
LPtoDP
Ellipse
CreateFontIndirectA
GetMapMode
GetTextExtentPoint32A
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetRgnBox
CreateRectRgnIndirect
StretchBlt
BitBlt
GetObjectA
CreateFontA
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
oledlg
ord8
ole32
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromProgID
oleaut32
VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocStringByteLen
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeType
VariantInit
SafeArrayDestroy
SysStringLen
SystemTimeToVariantTime
SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
Sections
.text Size: 444KB - Virtual size: 442KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 656KB - Virtual size: 655KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ