Static task
static1
Behavioral task
behavioral1
Sample
2025-01-06_29f7f83f624e07a2da8d3e35353bf383_floxif_icedid.exe
Resource
win7-20240903-en
General
-
Target
2025-01-06_29f7f83f624e07a2da8d3e35353bf383_floxif_icedid
-
Size
1.5MB
-
MD5
29f7f83f624e07a2da8d3e35353bf383
-
SHA1
e09cbff27200043eb64e4584cbe79ca7831782db
-
SHA256
3e9af220ca5f256923ee7c5579705d953ddef41fe9c5c0fb4bd722843c901826
-
SHA512
38a3d6d4041c59dcaaa5671f1316bc12c32d336a82ac297e58f98b2d6ff17db52c195d9edaa2af94d998747b6653487ed9b8edc755c86408689f1a1b1aac50e3
-
SSDEEP
12288:nzrbFCn7wSPOKIKQKI8WwIYyEckUeGO6GJWqwh+qT3TT3jT3j8uBjvrEH7N0:n3bFjKmKI8RITFrEH72
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-01-06_29f7f83f624e07a2da8d3e35353bf383_floxif_icedid
Files
-
2025-01-06_29f7f83f624e07a2da8d3e35353bf383_floxif_icedid.exe windows:4 windows x86 arch:x86
bd5583374642135df1d68451c9af5b91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GetCPInfo
GetOEMCP
FileTimeToSystemTime
SetErrorMode
FileTimeToLocalFileTime
GetFileTime
GetTickCount
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
ExitThread
CreateThread
HeapSize
TerminateProcess
LocalAlloc
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
InterlockedIncrement
GlobalFlags
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetThreadLocale
DeleteFileA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
WaitForSingleObject
SetThreadPriority
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
CopyFileA
GetFileAttributesA
GetTempPathA
GetCommModemStatus
GetVersionExA
ExitProcess
GetModuleFileNameA
GetPrivateProfileStringA
GetSystemDefaultLangID
WritePrivateProfileStringA
GetFileSize
FreeLibrary
lstrlenA
CompareStringW
CompareStringA
GetVersion
MultiByteToWideChar
InterlockedExchange
WaitForMultipleObjects
WaitCommEvent
GetCommMask
InitializeCriticalSection
CloseHandle
Sleep
CreateFileA
SetCommTimeouts
SetCommMask
GetCommState
BuildCommDCBA
SetCommState
SuspendThread
ResumeThread
ReadFile
ResetEvent
EnterCriticalSection
LeaveCriticalSection
ClearCommError
FormatMessageA
LocalFree
SetEvent
CreateEventA
PurgeComm
WriteFile
GetOverlappedResult
Beep
MulDiv
GetLastError
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
UnhandledExceptionFilter
SizeofResource
user32
LoadCursorA
UnregisterClassA
SetCapture
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRgn
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
SetWindowContextHelpId
IsWindowVisible
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RedrawWindow
GetWindowTextA
FindWindowExA
SendNotifyMessageA
GetDlgItem
ShowWindow
IsIconic
GetSystemMenu
EnableWindow
SendMessageA
DestroyIcon
DrawStateA
CopyRect
PtInRect
AppendMenuA
DrawIcon
FindWindowA
IsWindow
SetMenuDefaultItem
SetForegroundWindow
LoadMenuA
RemoveMenu
ModifyMenuA
LoadIconA
CharUpperA
MapDialogRect
SetCursor
PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
GetWindowThreadProcessId
DestroyMenu
EndPaint
BeginPaint
ClientToScreen
WindowFromPoint
GetKeyState
InflateRect
FillRect
DrawFocusRect
GetSubMenu
GetWindowRect
GetClientRect
ScreenToClient
UpdateWindow
InvalidateRect
SetTimer
KillTimer
GetParent
ReleaseCapture
GetMessagePos
GetIconInfo
LoadImageA
GetSysColor
GetSysColorBrush
GetWindowLongA
LoadBitmapA
GetSystemMetrics
GetCursorPos
ReleaseDC
GetDC
GetWindowDC
OffsetRect
BringWindowToTop
GetNextDlgGroupItem
TrackPopupMenu
SetWindowPos
MessageBoxA
PostMessageA
MapWindowPoints
gdi32
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePen
GetMapMode
GetTextColor
GetRgnBox
SelectClipRgn
MoveToEx
LineTo
CreateSolidBrush
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateRectRgn
GetBkColor
SelectObject
CreateFontA
BitBlt
GetNearestColor
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
GetStockObject
DeleteObject
GetTextExtentPoint32A
SetPixel
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegOpenKeyA
RegOpenKeyExA
RegCloseKey
shell32
Shell_NotifyIconA
ShellExecuteExA
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromProgID
oleaut32
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
VariantClear
Sections
.text Size: 276KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ