Static task
static1
Behavioral task
behavioral1
Sample
2025-02-02_b63ba173024e59fb83cf1ed06e1c5204_icedid_wapomi.exe
Resource
win7-20240708-en
General
-
Target
2025-02-02_b63ba173024e59fb83cf1ed06e1c5204_icedid_wapomi
-
Size
1.0MB
-
MD5
b63ba173024e59fb83cf1ed06e1c5204
-
SHA1
597cb9eb8dbed8ef1f9a364215b8710f21502c6c
-
SHA256
17f27aa3436e657d5012647e4232f9836f9848983d37d79dd99f44b5ac153197
-
SHA512
4d185c22d24eb500c39722cee9c34f7db7f6ebdbbebe6009a7d544cd9f9aa82fa84ad9d7d2b161a09af80f6fbe3c5513c52076fcbb33770dc825cea994f2028a
-
SSDEEP
24576:FDTss+PJ1RAdH1B8gIVhYgdG7ynoPiLd:lbQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-02-02_b63ba173024e59fb83cf1ed06e1c5204_icedid_wapomi
Files
-
2025-02-02_b63ba173024e59fb83cf1ed06e1c5204_icedid_wapomi.exe windows:4 windows x86 arch:x86
2770fa767bf27693b6000e453167ec23
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
RtlUnwind
RaiseException
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
HeapSize
HeapReAlloc
GetStartupInfoA
CreateThread
ExitThread
SetStdHandle
GetFileType
GetACP
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
Sleep
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetEnvironmentVariableA
WriteFile
CloseHandle
CreateFileA
IsBadReadPtr
GetModuleFileNameA
LocalFree
FormatMessageA
GetLastError
lstrcpynA
GetModuleHandleA
GetFileTime
GetCommandLineA
SetFileApisToANSI
MultiByteToWideChar
FindNextFileA
FreeLibrary
GetProcAddress
LoadLibraryA
FindFirstFileA
LoadLibraryExA
IsBadWritePtr
lstrcpyA
lstrlenA
lstrcmpA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
lstrcmpiA
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedExchange
GetProfileStringA
GlobalSize
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GlobalFlags
SetErrorMode
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
GetCurrentThread
MulDiv
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetFileAttributesA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindClose
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
InterlockedDecrement
InterlockedIncrement
GetCurrentDirectoryA
GetUserDefaultLangID
FindResourceExA
EnumResourceNamesA
EnumResourceTypesA
GetWindowsDirectoryA
WideCharToMultiByte
SetLastError
IsBadStringPtrA
ReadFile
SetEndOfFile
SetFilePointer
VirtualAlloc
VirtualFree
VirtualQueryEx
VirtualProtectEx
WriteProcessMemory
CopyFileA
EnumResourceLanguagesA
TerminateProcess
WaitForSingleObject
ReadProcessMemory
CompareStringA
GetVersion
OpenProcess
GetTickCount
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteFileA
GlobalFree
lstrcatA
WinExec
CompareStringW
user32
GetClassNameA
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
PostThreadMessageA
DrawTextA
TabbedTextOutA
GetWindowDC
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetDlgItemTextA
CheckRadioButton
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetFocus
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
RegisterClassA
TrackPopupMenu
GetWindowTextLengthA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
DestroyMenu
GetMessageTime
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
GetLastActivePopup
IsWindowEnabled
DialogBoxParamA
GetDlgItem
TrackPopupMenuEx
GetAsyncKeyState
DrawIconEx
DestroyWindow
DestroyIcon
CreateIconFromResourceEx
EndDialog
SetClipboardData
PostQuitMessage
GetMessagePos
GetUpdateRect
BeginPaint
EndPaint
GetCursorPos
CallWindowProcA
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsClipboardFormatAvailable
GetMessageA
OpenClipboard
GetClipboardData
CloseClipboard
CopyIcon
GetDC
ReleaseDC
DefDlgProcA
IsWindowUnicode
SetWindowLongA
SetCursor
MessageBeep
EmptyClipboard
GetNextDlgTabItem
GetKeyState
KillTimer
SetTimer
GetCapture
SetCapture
DestroyCaret
CreateCaret
SetCaretPos
ShowCaret
EnableScrollBar
ShowScrollBar
PostMessageA
GetClassInfoA
LoadCursorA
DefWindowProcA
RegisterClipboardFormatA
LoadStringA
MapDialogRect
SetWindowContextHelpId
TranslateMessage
ValidateRect
RemovePropA
ScreenToClient
UnionRect
EqualRect
ShowWindow
IsWindowVisible
MoveWindow
LoadBitmapA
ClientToScreen
WindowFromPoint
ReleaseCapture
CopyRect
FillRect
GetWindowLongA
InflateRect
OffsetRect
DrawFrameControl
FrameRect
DrawStateA
DrawEdge
GetFocus
DrawFocusRect
UpdateWindow
InvalidateRect
RedrawWindow
GetSysColor
CreatePopupMenu
GetMenuStringA
DeleteMenu
InsertMenuA
GetMenu
IsMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
IsWindow
IsIconic
GetSystemMetrics
DrawIcon
SetRect
GetSystemMenu
AppendMenuA
LoadIconA
GetDesktopWindow
GetParent
GetClientRect
GetWindowRect
EnableWindow
SendMessageA
MessageBoxA
PtInRect
wsprintfA
ExcludeUpdateRgn
HideCaret
CharUpperA
GrayStringA
UnregisterClassA
GetWindowTextA
gdi32
SetBkMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
CreateRectRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
SetRectRgn
CombineRgn
GetTextColor
GetBkColor
LPtoDP
CopyMetaFileA
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
DPtoLP
GetMapMode
GetViewportOrgEx
SetViewportOrgEx
DeleteObject
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
CreateRectRgnIndirect
BitBlt
Polygon
Polyline
CreateSolidBrush
GetCharWidthA
CreateFontA
GetObjectA
SetPixel
GetStockObject
Rectangle
GetTextExtentPoint32A
GetTextExtentPointA
CreatePen
comdlg32
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryValueA
shell32
SHGetFileInfoA
ShellExecuteA
DragQueryFileA
comctl32
ImageList_GetImageInfo
ord17
ImageList_Destroy
ImageList_LoadImageA
ImageList_DrawIndirect
ImageList_Draw
oledlg
ord8
ole32
OleDuplicateData
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
OleFlushClipboard
ReleaseStgMedium
CoTaskMemFree
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleGetClipboard
CoRevokeClassObject
OleSetClipboard
olepro32
ord253
oleaut32
SysStringLen
VariantTimeToSystemTime
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
VariantClear
SysFreeString
SysAllocStringLen
imagehlp
CheckSumMappedFile
Sections
.text Size: 688KB - Virtual size: 686KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
lDaңuM Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE