Static task
static1
Behavioral task
behavioral1
Sample
2024-08-19_7064f1fd898ec0d326bf5009437e4139_http-browser_icedid.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2024-08-19_7064f1fd898ec0d326bf5009437e4139_http-browser_icedid.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-08-19_7064f1fd898ec0d326bf5009437e4139_http-browser_icedid
-
Size
6.3MB
-
MD5
7064f1fd898ec0d326bf5009437e4139
-
SHA1
d9aebe74b413cbdd806f7e925910467fd724ac47
-
SHA256
2dc8f2189a467c6f6f3e32baebe977ada7c20a37a76edd7532717ea272f14115
-
SHA512
5d11337368864c8660f271e166c9d916e5e1c6a7b10f86f31a471febd619f03a912655f24dcde150c711e5dd694d36ab689bd709d97a7d92195c1c8961455623
-
SSDEEP
196608:Riux7eOlCVhjErFR5zaqcvcU3PhXIVETtLIAhm:MkeKF7Gqcv/3pIAhm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-19_7064f1fd898ec0d326bf5009437e4139_http-browser_icedid
Files
-
2024-08-19_7064f1fd898ec0d326bf5009437e4139_http-browser_icedid.exe windows:4 windows x86 arch:x86
d601b6e3ee413aa77a73386be77c0a8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
IsBadWritePtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetModuleFileNameA
GetTimeZoneInformation
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetDriveTypeA
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
CreateThread
ExitThread
HeapReAlloc
ExitProcess
RtlUnwind
GetStartupInfoW
GetFileAttributesW
SetErrorMode
GetFullPathNameW
GetCurrentProcess
FlushFileBuffers
GlobalFlags
lstrcmpiW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
InterlockedDecrement
GetCurrentThread
lstrcmpA
GetModuleFileNameW
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
LoadLibraryA
lstrcatW
lstrcmpW
GetModuleHandleW
GetVersionExA
GetModuleHandleA
GlobalFree
MulDiv
lstrcpyW
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrcpynW
TerminateProcess
HeapAlloc
HeapFree
SetLastError
Process32FirstW
Process32NextW
GetWindowsDirectoryW
SetFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
SetFilePointer
CreateFileW
WriteFile
LoadLibraryW
GetProcAddress
FreeLibrary
WinExec
WideCharToMultiByte
lstrlenW
CreateDirectoryW
CreateMutexW
GetLastError
ReleaseMutex
CloseHandle
MultiByteToWideChar
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
WritePrivateProfileStringW
WaitForSingleObject
SetCurrentDirectoryW
SetEnvironmentVariableW
Sleep
GetVersionExW
FindResourceW
LoadResource
LockResource
GetSystemTimeAsFileTime
SizeofResource
user32
DestroyMenu
GetSysColorBrush
WindowFromPoint
PostQuitMessage
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
LoadIconW
PeekMessageW
MapWindowPoints
MessageBoxW
GetKeyState
SetForegroundWindow
GetMenu
AdjustWindowRectEx
GetClassInfoW
RegisterClassW
UnregisterClassW
DefWindowProcW
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
CopyRect
GetWindow
EndPaint
BeginPaint
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowTextLengthW
GetFocus
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
GetDlgCtrlID
SetWindowTextW
GetWindowLongW
IsDialogMessageW
IsDlgButtonChecked
SendDlgItemMessageW
GetDlgItem
CheckRadioButton
PostMessageW
RegisterWindowMessageW
SetWindowLongW
CopyIcon
DestroyCursor
MessageBeep
IsWindow
IsWindowVisible
GetSysColor
GetMessagePos
LoadCursorW
GetParent
KillTimer
SetTimer
RedrawWindow
ReleaseDC
GetDC
ScreenToClient
GetClientRect
InflateRect
PtInRect
SetCursor
InvalidateRect
UpdateWindow
GetWindowRect
wsprintfW
EnumChildWindows
GetWindowTextW
GetClassNameW
FindWindowW
EnableWindow
SendMessageW
gdi32
DeleteObject
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
CreateSolidBrush
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
GetTextExtentPoint32W
GetStockObject
GetObjectW
CreateFontIndirectW
CreateFontW
PtVisible
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegOpenKeyExW
RegQueryValueW
CloseServiceHandle
RegSetValueExW
RegCreateKeyExW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
OpenServiceW
OpenSCManagerW
QueryServiceStatus
shell32
SHBrowseForFolderW
SHGetMalloc
ShellExecuteExW
SHGetPathFromIDListW
ShellExecuteW
SHGetSpecialFolderLocation
comctl32
ord17
shlwapi
PathFindExtensionW
PathFindFileNameW
SHDeleteKeyW
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 168KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ