DllGetClassObject
DllRegisterServer
PluginInit
Behavioral task
behavioral1
Sample
icedid_first.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
icedid_first.dll
Resource
win10v2004-20230703-en
Target
icedid_first.dll
Size
16KB
MD5
c1dd6f3d2c3ee21ebb4d3e93b74cab74
SHA1
2fc6f0c1003d03f3fe8cab1a4c617e9bbb0eb18c
SHA256
9ff5c9ce0d1536ce8b043b10758453e3349a82cc31195ca57250a272e65b4da4
SHA512
799b3a71badf2eea132ab362c97df93273c65fc536b498702387c158826358939b88b340f4fda536272ce547d7cfba8a9bc8d964b99b86594c63d539377ee9c9
SSDEEP
192:4prWb8lpaJmJVM1z506jA3VHp7YBFT/gssU3mg28IFUlH:Qrhl0JYK1z506jWlYVND3MFqH
icedid
380132461
revedanstvy.bid
Checks for missing Authenticode signature.
resource |
---|
icedid_first.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
WinHttpSendRequest
WinHttpQueryOption
WinHttpSetOption
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpOpenRequest
WinHttpSetStatusCallback
SHGetFolderPathA
HeapFree
GetComputerNameExA
VirtualProtect
VirtualAlloc
lstrcatA
lstrcpyA
GetTempPathA
CreateDirectoryA
LoadLibraryA
GetProcAddress
GetComputerNameExW
GetTickCount64
Sleep
ExitProcess
CreateThread
CreateFileA
WriteFile
CloseHandle
HeapAlloc
HeapReAlloc
SwitchToThread
GetProcessHeap
GetLastError
GetUserNameA
LookupAccountNameW
wsprintfW
wsprintfA
memset
DllGetClassObject
DllRegisterServer
PluginInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE