Static task
static1
Behavioral task
behavioral1
Sample
2024-10-10_a0e61f628bb291aba5e4aa81cb3a88ed_floxif_icedid.exe
Resource
win7-20240708-en
General
-
Target
2024-10-10_a0e61f628bb291aba5e4aa81cb3a88ed_floxif_icedid
-
Size
936KB
-
MD5
a0e61f628bb291aba5e4aa81cb3a88ed
-
SHA1
e049302b05c872133459d23754eca37c998d0119
-
SHA256
2d3ecaeb2adc31161dfe6a4178e8afcefb5ee5426686023ade1f710be7a8cfd7
-
SHA512
5ca19a06280e1d2a67216c542ffbe462f6b6f5d4fb795e75d6c1998ee9c350b2bc504d986425a88a8c23418fbf2fc8efb5fcef74718b722c572927593a4af692
-
SSDEEP
12288:Arc9hoxDskkUQHYf17IPzJQ52rlkO0o/YT7RsBkFJBjvrEH7V:YskCH817352rlx0n5UkFXrEH7V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-10_a0e61f628bb291aba5e4aa81cb3a88ed_floxif_icedid
Files
-
2024-10-10_a0e61f628bb291aba5e4aa81cb3a88ed_floxif_icedid.exe windows:4 windows x86 arch:x86
6efb5ba8bcb762b4c10fe7220b0f0b81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
LCMapStringW
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
LCMapStringA
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetTimeZoneInformation
SetUnhandledExceptionFilter
InterlockedExchange
HeapSize
TerminateProcess
ExitProcess
HeapReAlloc
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
RtlUnwind
GetTickCount
WritePrivateProfileStringA
SetErrorMode
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SystemTimeToFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
GlobalFlags
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
DeleteFileA
MoveFileA
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
lstrcmpA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
InterlockedDecrement
SetLastError
FormatMessageA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
lstrcpynA
GetModuleHandleA
GetProcAddress
FreeResource
CreateFileA
WriteFile
CloseHandle
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
Sleep
LocalSize
LocalLock
LocalUnlock
LocalAlloc
LocalFree
GlobalReAlloc
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpyA
MulDiv
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
IsBadReadPtr
user32
PostThreadMessageA
IsRectEmpty
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
PostQuitMessage
DestroyMenu
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
BringWindowToTop
SetMenu
TranslateAcceleratorA
GetMessageA
TranslateMessage
ValidateRect
SetMenuItemBitmaps
ModifyMenuA
CheckMenuItem
GetMenuCheckMarkDimensions
EndPaint
BeginPaint
GetMenuState
GetMenuStringA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetKeyState
GetMenu
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
IntersectRect
GetWindowPlacement
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetNextDlgGroupItem
LoadImageA
GetIconInfo
ClientToScreen
WindowFromPoint
GetWindowLongA
DrawFrameControl
SetRectEmpty
CopyRect
PtInRect
OffsetRect
WinHelpA
LoadBitmapA
EnableMenuItem
SendMessageA
IsZoomed
SetWindowRgn
GetWindowRect
GetClientRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
DrawStateA
GetCursorPos
DestroyIcon
DrawIconEx
LoadMenuA
GetSubMenu
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
AppendMenuA
RegisterClipboardFormatA
MessageBeep
CreatePopupMenu
GetFocus
MessageBoxA
GetWindowDC
FillRect
GetMessagePos
SystemParametersInfoA
GetCapture
DrawEdge
FrameRect
IsWindow
GetParent
RedrawWindow
CharUpperA
InvalidateRgn
CopyAcceleratorTableA
CharNextA
UpdateWindow
EnableWindow
GetSystemMetrics
ReleaseDC
GetDC
SetRect
InflateRect
SetCursor
LoadCursorA
PostMessageA
GetSysColor
InvalidateRect
UnionRect
EqualRect
SetCapture
ShowCursor
ReleaseCapture
wsprintfA
DrawIcon
IsIconic
IsWindowVisible
SetForegroundWindow
LoadIconA
UnregisterHotKey
RegisterHotKey
gdi32
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetRgnBox
SetMapMode
SetROP2
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
MoveToEx
LineTo
PatBlt
GetTextColor
CreateBitmap
CreateFontIndirectA
GetPixel
CreateSolidBrush
StretchBlt
LPtoDP
DPtoLP
CreateFontA
DeleteObject
RoundRect
Rectangle
Ellipse
Polyline
SelectObject
CreateDCA
CreateBrushIndirect
CreatePenIndirect
CreatePen
GetTextExtentPoint32A
SetStretchBltMode
SetDIBitsToDevice
StretchDIBits
GetSystemPaletteEntries
GetStockObject
SelectPalette
RealizePalette
GetDIBits
CreatePalette
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
GetDeviceCaps
CreateCompatibleDC
CreateRoundRectRgn
CreateCompatibleBitmap
GetObjectA
CreateDIBitmap
comdlg32
ChooseColorA
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
SetFileSecurityA
GetFileSecurityA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
shell32
DragQueryFileA
DragFinish
comctl32
ord17
_TrackMouseEvent
ImageList_AddMasked
ImageList_GetIcon
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Create
shlwapi
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA
oledlg
ord8
ole32
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
StgOpenStorageOnILockBytes
CoTaskMemFree
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
oleaut32
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect
Sections
.text Size: 268KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 508KB - Virtual size: 505KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ