Static task
static1
Behavioral task
behavioral1
Sample
2024-10-09_af367fb5a92158e306e73658237cee67_floxif_icedid.exe
Resource
win7-20240729-en
General
-
Target
2024-10-09_af367fb5a92158e306e73658237cee67_floxif_icedid
-
Size
11.9MB
-
MD5
af367fb5a92158e306e73658237cee67
-
SHA1
de7773e133830a17d74c6f09ddbb88f15dffe44c
-
SHA256
2e4270ea6e60c84e128f935343f98db7690decff3d04ba31ac05fa65b9d7640b
-
SHA512
34c73cb4169cfac0526d8bcc6a0ab4abddf7db85b161937e2ff057628082c907638116ea560cd9613528adafc951ce5f89074c05d4a6f446aa332a2ff061766b
-
SSDEEP
98304:NcuvLGiC1Q0x8JaAQuwdlenw6SKT7ZolhgRYv6vLGiC1Q0x8JaAQW:NcuvLGRQaAQ3r2wuEiRYv6vLGRQaAQW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-09_af367fb5a92158e306e73658237cee67_floxif_icedid
Files
-
2024-10-09_af367fb5a92158e306e73658237cee67_floxif_icedid.exe windows:4 windows x86 arch:x86
516093d93052eabbff2922df1c1a02ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetEnvironmentVariableA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
SetEndOfFile
MulDiv
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
SetHandleCount
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeResource
lstrcmpA
EnumResourceLanguagesA
ConvertDefaultLocale
GlobalReAlloc
GlobalHandle
LocalReAlloc
GlobalFlags
GetThreadLocale
WritePrivateProfileStringA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStdHandle
DeleteCriticalSection
HeapCreate
HeapDestroy
RaiseException
RtlUnwind
VirtualQuery
HeapReAlloc
GetStartupInfoA
GetProcessHeap
GetCommandLineA
HeapAlloc
HeapFree
LocalFree
LocalAlloc
InterlockedDecrement
GetWindowsDirectoryA
GetVolumeInformationA
GetDiskFreeSpaceExA
GetLocalTime
GetLogicalDrives
TerminateThread
ResumeThread
GetCurrentProcess
ReadProcessMemory
TlsGetValue
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
TlsAlloc
GetTickCount
ExitThread
CreateSemaphoreA
ReleaseSemaphore
CreateMutexA
CreateEventA
CreateThread
WaitForSingleObject
SetEvent
WaitForMultipleObjects
ReleaseMutex
GetModuleHandleA
GetSystemTime
SetErrorMode
QueryDosDeviceA
lstrlenA
CompareStringW
CompareStringA
OpenFile
SetFileAttributesA
GetCurrentThread
SetThreadPriority
ExitProcess
VirtualAlloc
VirtualFree
DeviceIoControl
Sleep
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
GetFileSize
GetVersionExA
WriteFile
DeleteFileA
LoadLibraryA
GetProcAddress
FreeLibrary
GetDriveTypeA
GetModuleFileNameA
CreateFileA
SetFilePointer
ReadFile
GlobalFree
CloseHandle
user32
DestroyMenu
ClientToScreen
GetSysColorBrush
GetWindowThreadProcessId
SetCursor
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
IsWindowEnabled
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
TabbedTextOutA
GetLastActivePopup
SetActiveWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
PostMessageA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
GetParent
CreateIconFromResourceEx
SendMessageA
GetDlgItem
MapWindowPoints
SetWindowTextA
SetDlgItemTextA
CopyRect
PtInRect
GetDlgCtrlID
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
GetMenuState
GetMenuItemID
DrawTextA
DrawTextExA
UnregisterClassA
GetForegroundWindow
GrayStringA
EndDialog
DestroyIcon
DialogBoxParamA
MessageBoxA
EnableWindow
GetDC
RegisterClassExA
LoadCursorA
UpdateWindow
ShowWindow
SetWindowPos
SetWindowLongA
CreateWindowExA
AdjustWindowRectEx
DestroyWindow
DispatchMessageA
GetMessageA
GetWindowLongA
GetWindowRect
GetClientRect
GetMenuItemCount
GetSubMenu
GetKeyboardState
ToAscii
InvalidateRect
PostThreadMessageA
DefWindowProcA
BeginPaint
EndPaint
ReleaseDC
gdi32
SetWindowExtEx
ScaleWindowExtEx
GetStockObject
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
CreateDIBitmap
SetMapMode
RestoreDC
SaveDC
ExtTextOutA
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
StretchBlt
DeleteObject
DeleteDC
CreateCompatibleDC
CreateDIBSection
SelectObject
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
OpenSCManagerA
OpenServiceA
CloseServiceHandle
ControlService
StartServiceA
ole32
CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx
StgCreateDocfile
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
SysFreeString
SysAllocStringLen
VariantClear
SysAllocString
SysStringLen
VariantChangeType
VariantInit
Sections
.text Size: 264KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ