Static task
static1
Behavioral task
behavioral1
Sample
2024-06-29_1cd9fc4cf9f85f777e60a994fc705208_icedid.exe
Resource
win7-20240611-en
windows7-x64
General
-
Target
2024-06-29_1cd9fc4cf9f85f777e60a994fc705208_icedid
-
Size
21.8MB
-
MD5
1cd9fc4cf9f85f777e60a994fc705208
-
SHA1
ea129535780075708285c11221a7f4e5aad22059
-
SHA256
2fa0119c42af70f6df2723082af718a9be89e3b88a1e748b09ce61e0ece87441
-
SHA512
18a58b8761c37ba0bd5f69ea9f67c956f9a02bf3cd056c745a653d12e7865dea5aa62ef7619143fdb91cb664d9183fa0a05bb766e291e398a8193f576ce44b53
-
SSDEEP
393216:NIIgLGRXzFimEAJ+RPJ3mxyR1GHep4bogBTihxn5njHmVlECtFM3W0:OIgLwRifS+RB2xyR1G+prTxn5SVlTtF0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2024-06-29_1cd9fc4cf9f85f777e60a994fc705208_icedid
Files
-
2024-06-29_1cd9fc4cf9f85f777e60a994fc705208_icedid.exe windows:4 windows x86 arch:x86
b1172cbbe39a62a426fe28fbe7467aa2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
RaiseException
GetConsoleCP
GetConsoleMode
HeapReAlloc
HeapSize
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
HeapFree
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
VirtualAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetErrorMode
lstrlenA
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
GetThreadLocale
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFlags
WritePrivateProfileStringW
InterlockedDecrement
GetModuleHandleA
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
LocalFree
MulDiv
GlobalUnlock
GlobalFree
FreeResource
SetLastError
GlobalAddAtomW
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
GlobalDeleteAtom
GetModuleFileNameW
GetCurrentProcessId
OpenProcess
WriteFile
ReadFile
MoveFileW
ExitProcess
LoadLibraryW
GetProcAddress
DeleteFileW
FreeLibrary
FormatMessageW
CreateDirectoryW
GetLastError
GetModuleHandleW
CreateFileW
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CloseHandle
SetFileAttributesW
GetFileAttributesW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
lstrcatW
lstrlenW
WinExec
lstrcpyW
GetSystemTimeAsFileTime
WideCharToMultiByte
user32
UnregisterClassW
DestroyMenu
GetSysColorBrush
WindowFromPoint
ShowWindow
SetWindowTextW
IsDialogMessageW
EndPaint
BeginPaint
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MapWindowPoints
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
CopyRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
PostMessageW
PostQuitMessage
PeekMessageW
GetDesktopWindow
GetWindow
LoadBitmapW
GetSystemMetrics
LoadIconW
SetForegroundWindow
IsIconic
DrawIcon
MessageBeep
SetWindowLongW
IsWindow
GetSysColor
GetMessagePos
EnableWindow
GetParent
KillTimer
SetTimer
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
GetClientRect
GetWindowRect
SendMessageW
InflateRect
PtInRect
LoadCursorW
SetCursor
GetClassInfoW
UnregisterClassA
gdi32
DeleteDC
DeleteObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetStockObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateBitmap
GetTextExtentPoint32W
GetObjectW
CreateFontIndirectW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
InitializeAcl
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
OpenProcessToken
GetTokenInformation
InitializeSecurityDescriptor
RegCloseKey
CreateWellKnownSid
AddAccessAllowedAceEx
SetSecurityDescriptorDacl
SetFileSecurityW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegQueryValueW
shell32
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
PathFindExtensionW
ole32
CoInitialize
CoCreateInstance
oleaut32
SysFreeString
VariantInit
VariantClear
SysAllocString
VariantChangeType
Sections
.text Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21.4MB - Virtual size: 21.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hfgfnnl Size: 76KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE