Static task
static1
Behavioral task
behavioral1
Sample
2024-09-15_89ac7dcb0f4582d540fe6f6df73f77e8_icedid.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-15_89ac7dcb0f4582d540fe6f6df73f77e8_icedid.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-15_89ac7dcb0f4582d540fe6f6df73f77e8_icedid
-
Size
1.9MB
-
MD5
89ac7dcb0f4582d540fe6f6df73f77e8
-
SHA1
ab0cc578fa2dfb693a757fc3cbf5dfd63d49949b
-
SHA256
97b0dbddab9285a831ef4f6865076f5c0a51cb85495ac543d3947385ba749dbc
-
SHA512
7939cd46c1281b913d7aee5e948887646f4a0a6eca58bdb6f8a8aa1ccb71a7f6f52f021254feee5693f47c7ea607551c4f681df4564049f12a6e8d09f7cf52b0
-
SSDEEP
49152:XhY4O6sjgAvFUHbw6pH15L+qCXN+h05LlzRev/AO916diJehl02VpN8lN:Xy6sjgWUHbw6pHL+qCXN+h05LlzkR16E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-15_89ac7dcb0f4582d540fe6f6df73f77e8_icedid
Files
-
2024-09-15_89ac7dcb0f4582d540fe6f6df73f77e8_icedid.exe windows:5 windows x86 arch:x86
52c3aebd3172db0b95b7700e8066c52e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
waveInUnprepareHeader
waveInOpen
waveInStart
waveInReset
waveInStop
waveInClose
waveInPrepareHeader
waveInAddBuffer
waveInGetErrorTextA
mmioDescend
mmioOpenA
mmioCreateChunk
mmioRead
mmioWrite
mmioAscend
mmioClose
waveInGetNumDevs
waveInGetDevCapsA
PlaySoundA
msvfw32
ord2
ICSendMessage
ICGetInfo
ICOpen
ICInfo
ICClose
avifil32
AVIFileGetStream
AVIFileOpenA
AVIFileInit
AVIStreamWrite
AVIStreamSetFormat
AVIMakeCompressedStream
AVIFileCreateStreamA
AVIFileRelease
AVIFileExit
AVISaveOptionsFree
AVISaveVW
AVIStreamReadFormat
AVIStreamStart
AVIStreamInfoA
AVIStreamOpenFromFileA
AVIStreamRelease
CreateEditableStream
msacm32
acmFormatSuggest
acmFormatChooseA
acmFormatTagDetailsA
acmMetrics
kernel32
RaiseException
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
ExitThread
CreateThread
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsValidCodePage
IsProcessorFeaturePresent
LCMapStringW
GetStdHandle
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetStringTypeW
CompareStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
ExitProcess
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
RtlUnwind
HeapAlloc
FindResourceExW
VirtualProtect
SearchPathA
GetProfileIntA
GetTickCount
GetTempPathA
GetNumberFormatA
SetErrorMode
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExA
FileTimeToLocalFileTime
GetCurrentDirectoryA
FileTimeToSystemTime
GetSystemDirectoryW
GetOEMCP
GetCPInfo
GetACP
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalReAlloc
TlsGetValue
LocalAlloc
GetShortPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileA
lstrcmpiA
GetThreadLocale
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetStringTypeExA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
ReplaceFileA
SystemTimeToFileTime
GetFileAttributesA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
LoadLibraryExA
lstrcmpA
GetModuleHandleW
InterlockedExchange
GetCurrentProcessId
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
GetModuleHandleA
GetProcAddress
CompareStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryW
LoadLibraryA
ActivateActCtx
DeactivateActCtx
FreeLibrary
lstrcmpW
FindResourceA
FreeResource
GetLastError
SetLastError
GlobalSize
FormatMessageA
LocalFree
lstrlenW
MulDiv
GetSystemTime
GetCurrentThreadId
FindFirstFileA
FindClose
DeleteFileA
CreateFileA
CloseHandle
CopyFileA
GetModuleFileNameA
Sleep
lstrlenA
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
GetWindowsDirectoryA
OpenFile
WinExec
lstrcpyA
GlobalAlloc
GlobalLock
WideCharToMultiByte
GlobalHandle
GlobalUnlock
GlobalFree
FindResourceW
LoadResource
LockResource
SizeofResource
HeapFree
user32
MapVirtualKeyExA
UpdateLayeredWindow
MonitorFromPoint
IsMenu
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
SetMenuDefaultItem
FrameRect
GetUpdateRect
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
GetWindowRgn
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
GetAsyncKeyState
GetMenuDefaultItem
GetTabbedTextExtentW
PostThreadMessageA
CreateMenu
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
LoadMenuW
SetCapture
LockWindowUpdate
GetDCEx
UnionRect
UnregisterClassA
SetLayeredWindowAttributes
EnumDisplayMonitors
CopyImage
SystemParametersInfoA
GetMenuItemInfoA
InflateRect
RealChildWindowFromPoint
GetSysColorBrush
LoadCursorW
DestroyCursor
CharUpperA
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
GetMessageA
PostQuitMessage
WindowFromPoint
KillTimer
SetTimer
SetParent
GetSystemMenu
DeleteMenu
IsZoomed
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
LoadImageA
DestroyIcon
SetCursor
ReleaseCapture
LoadAcceleratorsA
IsIconic
InsertMenuItemA
CreatePopupMenu
IntersectRect
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
GetWindowThreadProcessId
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
MapVirtualKeyA
GetKeyNameTextA
MoveWindow
IsDialogMessageA
SetDlgItemTextA
IsCharLowerA
CheckDlgButton
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
LoadIconW
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
RedrawWindow
IsWindowVisible
ValidateRect
GetClassInfoExA
GetClassInfoA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
PtInRect
GetWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
RegisterWindowMessageA
SetRect
MessageBoxA
SetWindowTextA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
WaitMessage
IsClipboardFormatAvailable
RegisterClipboardFormatA
SetCursorPos
CreateAcceleratorTableA
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFrameControl
GetDesktopWindow
GetIconInfo
DrawIcon
DispatchMessageA
PeekMessageA
TranslateMessage
DestroyWindow
RegisterClassA
CreateWindowExA
DefWindowProcA
DrawEdge
DrawStateA
SetClassLongA
DestroyAcceleratorTable
DrawIconEx
NotifyWinEvent
GetCursorPos
CopyRect
PostMessageA
wsprintfA
LoadBitmapA
IsWindow
OffsetRect
IsRectEmpty
InvalidateRect
GetSystemMetrics
GetClientRect
GetWindowRect
GetDC
LoadCursorA
SetWindowRgn
ShowWindow
UpdateWindow
LoadCursorFromFileA
GetCursor
LoadIconA
ReleaseDC
GetWindowDC
EnableWindow
SendMessageA
SetMenuItemBitmaps
LoadAcceleratorsW
gdi32
CreateDCA
CreateBitmap
CreateRectRgnIndirect
SaveDC
RectVisible
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
StartDocA
GetCharWidthA
CreateFontA
StretchDIBits
GetTextMetricsA
GetBkColor
CreateFontIndirectA
TextOutA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetViewportOrgEx
CreateDIBitmap
EnumFontFamiliesA
CopyMetaFileA
SetRectRgn
GetMapMode
GetTextColor
GetRgnBox
CreateEllipticRgn
LPtoDP
CreateDIBSection
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPoint32W
GetWindowOrgEx
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateRoundRectRgn
CreatePolygonRgn
Polyline
Polygon
SetDIBColorTable
StretchBlt
SetPixel
EnumFontFamiliesExA
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetPixel
GetWindowExtEx
GetViewportExtEx
GetTextCharsetInfo
GetTextExtentPoint32A
GetObjectA
GetDIBits
GetDeviceCaps
GetTextExtentPointA
SetTextColor
SetBkColor
SetBkMode
RoundRect
ExtTextOutA
CreateHatchBrush
PatBlt
OffsetRgn
CombineRgn
CreateRectRgn
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetStockObject
CreatePen
CreateSolidBrush
Rectangle
Ellipse
DeleteObject
BitBlt
DPtoLP
DeleteDC
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
PtVisible
RestoreDC
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
GetJobA
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegOpenKeyExA
RegQueryValueA
RegSetValueA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExW
GetFileSecurityA
SetFileSecurityA
RegCloseKey
shell32
DragFinish
DragQueryFileA
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
SHAppBarMessage
SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecW
PathIsUNCA
ole32
OleLockRunning
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CoInitialize
CoTaskMemFree
RevokeDragDrop
RegisterDragDrop
CoRegisterMessageFilter
CoRevokeClassObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
CoLockObjectExternal
oleaut32
VariantTimeToSystemTime
SafeArrayDestroy
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
VariantCopy
SysStringLen
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
oledlg
ord8
hook
UninstallMyHook
InstallMyHook
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
gdiplus
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown
GdipDrawImageI
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ