Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-10_0bf6322e33d43e50fd31900a296c1d59_icedid.exe
Resource
win7-20231215-en
Target
2024-01-10_0bf6322e33d43e50fd31900a296c1d59_icedid
Size
15.2MB
MD5
0bf6322e33d43e50fd31900a296c1d59
SHA1
beb4733db74f2316881eb306988279974f0f1b7e
SHA256
5401f43f910bf41bc5ef76b6d258212f0516ac4b175e66f3018aea1cef4247bb
SHA512
51124a1111fbb2d2c85e7d2ea753d5ae95eadfc3aa2ca53aa01b33b3d25dbcce824fa2ffe08d5b7ba53bb3d4faa8051b44634a8cab461ea4656d570d93499e75
SSDEEP
393216:F2Pa3Weo8ehKvz3VgjZeQESTDBqVELglFgYoOyvmBVzS+j:cP+WhKpu3ESY0d1lCVznj
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CertVerifyCertificateChainPolicy
CertCloseStore
CertNameToStrA
CertFreeCertificateContext
CertCreateCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateChain
CryptDecodeObject
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
InterlockedIncrement
GetCPInfo
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GlobalReAlloc
SetErrorMode
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetTimeFormatA
GetDateFormatA
RaiseException
ExitThread
HeapSize
LCMapStringA
LCMapStringW
GetStdHandle
VirtualFree
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetEnvironmentVariableA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
TlsGetValue
GetCurrentProcessId
CreateEventA
SuspendThread
SetEvent
SetThreadPriority
GetCurrentThread
LoadLibraryW
AreFileApisANSI
LockFileEx
GetPrivateProfileSectionA
GlobalMemoryStatus
GetWindowsDirectoryA
GetLongPathNameA
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
InterlockedDecrement
GlobalAlloc
MulDiv
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetLastError
lstrcmpW
GetModuleHandleA
CreateThread
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
IsBadReadPtr
FindNextFileW
FindFirstFileW
DosDateTimeToFileTime
LocalFileTimeToFileTime
FileTimeToDosDateTime
SetEndOfFile
CompareFileTime
GetVersionExA
CreateFileW
GetTickCount
SetFileAttributesW
SetFileTime
CreateDirectoryW
GetFileAttributesW
DeleteFileW
CopyFileW
MoveFileA
MoveFileW
GetModuleFileNameW
GetTempPathW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetFullPathNameW
GetTimeZoneInformation
GetOEMCP
GetACP
GetSystemDirectoryA
FileTimeToSystemTime
OpenEventA
GetProcAddress
LoadLibraryA
FreeLibrary
GetPrivateProfileStringA
ResumeThread
GetFileSize
SetFilePointer
WriteFile
ReadFile
RemoveDirectoryA
DeleteFileA
GetTempFileNameA
GetSystemTime
CreateDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetTempPathA
GetShortPathNameA
GetFullPathNameA
GetModuleFileNameA
SetFileAttributesA
GetFileAttributesA
Module32Next
Module32First
GetExitCodeProcess
TerminateProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
WaitForSingleObject
CreateProcessA
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalFree
FormatMessageA
LocalAlloc
lstrlenW
GetVersion
MultiByteToWideChar
ResetEvent
CompareStringW
lstrlenA
CompareStringA
InterlockedExchange
ReleaseMutex
WritePrivateProfileStringA
CreateMutexA
CloseHandle
CreateFileA
GetPrivateProfileIntA
CopyFileA
FileTimeToLocalFileTime
GetFileTime
SystemTimeToFileTime
GetLocalTime
GetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
Sleep
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
ReleaseDC
GetDC
RegisterWindowMessageA
WinHelpA
IsChild
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
EnableMenuItem
SetWindowPlacement
DefWindowProcA
GetDesktopWindow
SetWindowPos
IntersectRect
IsIconic
TabbedTextOutA
GetSystemMetrics
ShowScrollBar
DrawEdge
DrawTextA
DrawTextExA
GrayStringA
GetMenuState
ChildWindowFromPoint
GetCursorPos
CopyRect
PtInRect
GetClassNameA
GetWindow
GetSysColor
SetCursor
LoadImageA
MapDialogRect
ClientToScreen
LoadCursorA
GetDlgCtrlID
GetWindowLongA
DialogBoxParamA
SetWindowLongA
EndDialog
WaitForInputIdle
SystemParametersInfoA
OffsetRect
SetCapture
ReleaseCapture
GetCapture
SetClassLongA
GetParent
GetWindowRect
InvalidateRect
ScreenToClient
SetForegroundWindow
GetWindowThreadProcessId
IsWindowEnabled
EnumWindows
wsprintfA
CharUpperA
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetClientRect
LoadIconA
IsDialogMessageA
MoveWindow
CallWindowProcA
CheckMenuItem
PostQuitMessage
TranslateMessage
ValidateRect
GetMessageA
ShowOwnedPopups
SetScrollInfo
FillRect
SetTimer
SendMessageA
UpdateWindow
KillTimer
RedrawWindow
EnableWindow
IsWindow
EnumDisplaySettingsA
DestroyWindow
CreateDialogParamA
SetWindowTextA
ShowWindow
GetDlgItem
SendDlgItemMessageA
MessageBoxA
IsWindowVisible
PostMessageA
GetWindowDC
BeginPaint
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
RegisterClipboardFormatA
SetWindowContextHelpId
CharNextA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
InvalidateRgn
SetRect
CopyAcceleratorTableA
UnregisterClassA
GetSysColorBrush
DestroyMenu
GetMenuItemInfoA
WindowFromPoint
SetWindowRgn
DrawIcon
IsRectEmpty
FindWindowA
InflateRect
GetWindowPlacement
EndPaint
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
GetMapMode
CreateEllipticRgn
LPtoDP
Ellipse
GetTextExtentPoint32A
GetRgnBox
GetBkColor
GetTextColor
GetPixel
GetWindowExtEx
GetViewportExtEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
CreateRectRgnIndirect
SetTextColor
GetClipBox
CreateCompatibleBitmap
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
DeleteObject
GetStockObject
CreateFontIndirectA
GetObjectA
CreateSolidBrush
SetBkColor
GetFileTitleA
OpenPrinterA
DocumentPropertiesA
ClosePrinter
GetSidSubAuthority
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegCloseKey
OpenSCManagerA
OpenServiceA
CloseServiceHandle
GetUserNameA
RegCreateKeyExA
CryptReleaseContext
CryptAcquireContextA
CryptGenRandom
RegDeleteValueA
RegSetValueExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
OpenProcessToken
GetTokenInformation
IsValidSid
GetSidIdentifierAuthority
CreateProcessAsUserA
SetTokenInformation
DuplicateTokenEx
GetLengthSid
GetSidSubAuthorityCount
DragQueryFileA
DragFinish
ShellExecuteExA
SHGetSpecialFolderPathA
InitCommonControlsEx
PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathCombineA
PathRenameExtensionA
PathStripPathA
PathRemoveFileSpecA
PathIsUNCA
ord8
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoCreateInstance
OleUninitialize
CoInitializeSecurity
OleInitialize
CreateILockBytesOnHGlobal
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoFreeUnusedLibraries
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
SafeArrayDestroy
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringByteLen
VariantChangeType
SysAllocString
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayCreateVector
SysStringLen
VariantClear
VariantInit
SysAllocStringLen
OleCreateFontIndirect
gethostbyname
connect
ioctlsocket
select
closesocket
shutdown
send
recv
WSAStartup
htons
inet_addr
socket
WSAGetLastError
InternetConnectA
InternetOpenA
InternetSetStatusCallback
InternetCloseHandle
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpAddRequestHeadersA
HttpSendRequestA
HttpQueryInfoA
InternetReadFileExA
InternetCombineUrlA
InternetSetCookieA
InternetGetCookieA
HttpOpenRequestA
URLDownloadToFileA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ