Static task
static1
Behavioral task
behavioral1
Sample
2024-08-24_40adc5324248b4ee6a7a691f44c2facb_floxif_icedid.exe
Resource
win7-20240705-en
General
-
Target
2024-08-24_40adc5324248b4ee6a7a691f44c2facb_floxif_icedid
-
Size
2.0MB
-
MD5
40adc5324248b4ee6a7a691f44c2facb
-
SHA1
d1620d1aa5da231c65e7e84354df9c4df09966aa
-
SHA256
17a0277fb48c5055f384fde0bb329acc4bfab8bdbeab40a378ede2b1ee31d2f3
-
SHA512
a5754e5b5fd4708ca96e1c21f2efcabb1369644bccfd1832d7a0f63054624703ef06f0469cc48fb3dc77c9105aa356e01c57cd90ee1cb93ad819f15543030c53
-
SSDEEP
24576:bDAZKeMDTN65firjXBD6pOaBb9A3rULt6tSr5+be0FUpp3pwBkIrEH7W:lqCWOo9A3rULt7ree0FVku
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-08-24_40adc5324248b4ee6a7a691f44c2facb_floxif_icedid
Files
-
2024-08-24_40adc5324248b4ee6a7a691f44c2facb_floxif_icedid.exe windows:4 windows x86 arch:x86
32f58bfad2fd2e5713f69d7d6fc962b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
CreateMutexA
ReleaseMutex
FindResourceExA
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
GetFileTime
GetCurrentDirectoryA
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
LocalAlloc
FreeResource
GetSystemDefaultLangID
lstrcatA
WinExec
GetFileAttributesA
GetWindowsDirectoryA
lstrcpyA
IsBadReadPtr
LeaveCriticalSection
EnterCriticalSection
FormatMessageA
LocalFree
SetThreadLocale
lstrcpynA
SetProcessWorkingSetSize
DuplicateHandle
VirtualLock
SetEnvironmentVariableA
GetLocaleInfoW
IsBadCodePtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
CompareStringW
CompareStringA
lstrlenA
lstrlenW
GetVersion
MultiByteToWideChar
GetLocalTime
GetModuleFileNameA
GetCurrentProcessId
InterlockedDecrement
InterlockedIncrement
GetFileSize
ReadFile
SetFilePointer
QueryPerformanceFrequency
QueryPerformanceCounter
WriteFile
GetSystemDirectoryA
QueryDosDeviceA
CreateEventA
ResetEvent
WaitForSingleObject
lstrcmpiA
GetModuleHandleA
GetProcAddress
GetLastError
GetLogicalDrives
GetDriveTypeA
DeviceIoControl
CreateFileA
CloseHandle
GetCurrentProcess
SetPriorityClass
HeapAlloc
GetProcessHeap
HeapFree
Sleep
GlobalSize
GlobalReAlloc
GlobalFree
LoadLibraryA
FreeLibrary
GetTickCount
GetSystemTime
GetTempPathA
CopyFileA
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetStdHandle
GetFileType
GetStdHandle
SetHandleCount
WritePrivateProfileStringA
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
ExitThread
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetTimeZoneInformation
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
HeapSize
TerminateProcess
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
VirtualProtect
SetLastError
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
SetThreadPriority
ResumeThread
SetEvent
SuspendThread
FindClose
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
DeleteFileA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
EnumResourceLanguagesA
GetVolumeInformationA
GetFullPathNameA
CreateThread
user32
SetWindowTextA
GetDesktopWindow
GetDlgCtrlID
GetWindowTextA
IsWindowEnabled
IsDialogMessageA
GetDlgItem
SetFocus
GetAsyncKeyState
SetActiveWindow
GetActiveWindow
GetCapture
ShowWindow
GetMenuState
UnhookWindowsHookEx
BeginPaint
EndPaint
GetWindowPlacement
IntersectRect
DefWindowProcA
RegisterClassA
GetClassInfoA
EqualRect
AdjustWindowRectEx
SetForegroundWindow
MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextLengthA
SendDlgItemMessageA
RemovePropA
GetClassInfoExA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
CheckRadioButton
MoveWindow
GetMenuCheckMarkDimensions
CheckMenuItem
SetMenuItemBitmaps
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
ValidateRect
GetMessageA
PostQuitMessage
SetWindowContextHelpId
DestroyMenu
WindowFromPoint
CallWindowProcA
CharNextA
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
IsWindowVisible
MapDialogRect
MessageBeep
CopyIcon
DrawFocusRect
DestroyCursor
SetRectEmpty
WinHelpA
IsChild
PostMessageA
SystemParametersInfoA
IsWindow
DestroyWindow
InflateRect
GetSysColorBrush
CopyRect
IsMenu
GetClassNameA
GetWindow
RegisterWindowMessageA
GetFocus
ScreenToClient
DrawEdge
FillRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
CharUpperA
RemoveMenu
SetCursor
RedrawWindow
UpdateWindow
GetDialogBaseUnits
LoadImageA
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
TranslateMessage
MessageBoxA
GetCursorPos
TrackPopupMenu
LoadMenuA
wsprintfA
DrawStateA
GetKeyState
LoadCursorA
IsIconic
GetSystemMenu
GetMenu
ModifyMenuA
GetSubMenu
GetMenuStringA
GetMenuItemID
GetMenuItemCount
EnableMenuItem
AppendMenuA
DrawIcon
LoadBitmapA
DrawIconEx
SendMessageA
GetWindowRect
InvalidateRect
GetParent
EnableWindow
LoadIconA
UnregisterClassA
GetClientRect
GetSysColor
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
SetTimer
SetPropA
ClientToScreen
ReleaseCapture
SetCapture
SetWindowLongA
DrawFrameControl
SetRect
KillTimer
IsRectEmpty
GetDC
ReleaseDC
GetPropA
SetWindowPos
GetSystemMetrics
GetWindowLongA
OffsetRect
PtInRect
GetWindowDC
gdi32
CreateRectRgn
Escape
ExtTextOutA
RectVisible
PtVisible
GetCurrentObject
GetBkColor
DeleteDC
GetStockObject
MoveToEx
LineTo
Polygon
SetTextColor
SetPixel
Ellipse
SetBkColor
CreatePen
CreateRectRgnIndirect
CombineRgn
GetSystemPaletteEntries
GetDIBits
GetBitmapBits
DeleteObject
BitBlt
RealizePalette
CreateCompatibleDC
CreatePalette
GetObjectA
GetDeviceCaps
SetBkMode
GetTextExtentPoint32A
SetTextAlign
TextOutA
Rectangle
SelectObject
CreateFontIndirectA
CreateSolidBrush
SaveDC
RestoreDC
SetMapMode
GetClipBox
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreateBitmap
SelectPalette
GetMapMode
DPtoLP
SetTextJustification
GetTextExtentPointA
CreateCompatibleBitmap
GetRgnBox
GetTextColor
EnumFontFamiliesExA
advapi32
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegEnumKeyExA
shell32
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
SHGetMalloc
ole32
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
SysAllocStringLen
SysFreeString
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect
comctl32
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetImageInfo
ord17
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Destroy
ImageList_Create
ImageList_DrawIndirect
ImageList_Draw
shlwapi
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFileExistsA
oledlg
ord8
oleacc
LresultFromObject
CreateStdAccessibleObject
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
comdlg32
GetSaveFileNameA
GetFileTitleA
ChooseColorA
GetOpenFileNameA
Sections
.text Size: 744KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 988KB - Virtual size: 985KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ