Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-25_730e2e4be47debe06b13636ad40fc110_icedid_vidar.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-25_730e2e4be47debe06b13636ad40fc110_icedid_vidar.exe
Resource
win10v2004-20231215-en
Target
2024-01-25_730e2e4be47debe06b13636ad40fc110_icedid_vidar
Size
5.2MB
MD5
730e2e4be47debe06b13636ad40fc110
SHA1
4151c7c5d4c5008accd284ffb44d2ab6f12e5f0a
SHA256
415200bac909ff0549db8ae94392a85d8ab3e0b0182daf0b2182e665682b975b
SHA512
44e0a7689417154f6993e1904e6fd9436fb61387b2f4fae07e4af9b1c2325f67d6760689582996eb772af44468a7a78f6ee4a34c8851dbb6461e9508ab158d2b
SSDEEP
98304:7hGavIL6TP31y+wCQ6qkax4vOkusa5KcoYnWndj4SCwJ4loj9ghi1RebMIg9Cboc:7hGUZ1XxIs1fndj4SCwJuojDIg9Cbo/0
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PathGetDriveNumberW
PathFileExistsW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathAppendW
PathRemoveFileSpecW
PathFindFileNameW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
win_sparkle_check_update_with_ui
win_sparkle_set_appcast_url
win_sparkle_init
win_sparkle_cleanup
PlaySoundW
timeGetTime
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
VirtualAlloc
VirtualQuery
HeapQueryInformation
SetStdHandle
LCMapStringW
GetCPInfo
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
HeapDestroy
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetTimeZoneInformation
SetConsoleCtrlHandler
IsValidCodePage
GetConsoleCP
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
WriteConsoleW
LockFileEx
HeapValidate
FormatMessageA
UnlockFileEx
GetFullPathNameA
GetDriveTypeW
PeekNamedPipe
GetFileInformationByHandle
FindFirstFileExA
GetDriveTypeA
ExitProcess
CreateThread
ExitThread
RtlUnwind
AreFileApisANSI
GetSystemTime
RaiseException
GetSystemTimeAsFileTime
GetOEMCP
GetDiskFreeSpaceA
CreateFileMappingW
GetLastError
FindResourceW
LoadResource
GlobalLock
GlobalAlloc
SizeofResource
GlobalUnlock
GlobalFree
LockResource
GetModuleHandleW
ActivateActCtx
LoadLibraryW
DeactivateActCtx
SetLastError
GetProcAddress
GetModuleFileNameW
CreateDirectoryW
InitializeCriticalSection
LeaveCriticalSection
GetFileAttributesW
EnterCriticalSection
DeleteCriticalSection
lstrlenW
lstrcpyW
GetVersion
GetLocaleInfoW
OutputDebugStringW
GetVersionExW
GlobalDeleteAtom
CreateMutexW
GetCurrentProcess
GlobalGetAtomNameW
ReleaseMutex
CloseHandle
GlobalAddAtomW
DeleteFileW
QueryPerformanceCounter
GetComputerNameW
GetTickCount
GetSystemInfo
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
OutputDebugStringA
GetStartupInfoW
HeapSetInformation
GetCommandLineW
DecodePointer
EncodePointer
GetStringTypeW
InterlockedCompareExchange
GetDiskFreeSpaceW
GetUserDefaultLCID
SearchPathW
GetProfileIntW
CopyFileW
CreateFileW
GetTempPathW
GetWindowsDirectoryW
Sleep
FreeLibrary
HeapAlloc
GetProcessHeap
HeapFree
lstrlenA
HeapSize
HeapReAlloc
lstrcatA
lstrcpyA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
SetErrorMode
GetNumberFormatW
GetTempFileNameW
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExW
FindResourceExW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiW
GetCurrentDirectoryW
GetSystemDirectoryW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GetVersionExA
GetFileSize
CreateFileA
LocalFree
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFlags
WaitForSingleObject
ResumeThread
SetThreadPriority
VirtualProtect
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
LoadLibraryExW
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GlobalFindAtomW
CompareStringW
InitializeCriticalSectionAndSpinCount
lstrcmpW
GlobalSize
FormatMessageW
MulDiv
FlushConsoleInputBuffer
GlobalMemoryStatus
GetCurrentProcessId
GetStdHandle
GetFileType
GetModuleHandleA
ExpandEnvironmentStringsA
FindResourceA
FreeResource
CreateFileMappingA
MapViewOfFile
GetTempPathA
GetTempFileNameA
CopyFileA
UnmapViewOfFile
WriteFile
SetFilePointer
ReadFile
lstrcmpA
GetModuleFileNameA
GetWindowsDirectoryA
SetFileAttributesA
DeleteFileA
MoveFileA
GetEnvironmentVariableA
CreateDirectoryA
LoadLibraryA
GetFileAttributesA
GetWindowRgn
DestroyCursor
CreateMenu
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
SubtractRect
CharUpperBuffW
FrameRect
RegisterClipboardFormatW
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
HideCaret
InvertRect
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
GetUpdateRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
DestroyAcceleratorTable
SetClassLongW
GetDoubleClickTime
CopyIcon
SetCursorPos
SetRect
LockWindowUpdate
GetMenuDefaultItem
CreatePopupMenu
IsZoomed
NotifyWinEvent
EmptyClipboard
SetClipboardData
CharUpperW
WindowFromPoint
DeleteMenu
PostThreadMessageW
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
UnregisterClassW
SetLayeredWindowAttributes
EnumDisplayMonitors
IntersectRect
RealChildWindowFromPoint
DestroyMenu
GetMenuItemInfoW
WaitMessage
GetMessageW
TranslateMessage
SetWindowContextHelpId
MapDialogRect
GetAsyncKeyState
GetSysColorBrush
SetWindowRgn
DrawFrameControl
DrawStateW
GetIconInfo
CopyImage
DrawIconEx
GetNextDlgGroupItem
SetCapture
DrawFocusRect
OffsetRect
IsRectEmpty
ShowOwnedPopups
ReleaseCapture
InflateRect
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
SetFocus
InvalidateRect
SetRectEmpty
DrawEdge
LoadCursorW
DrawTextW
FillRect
SetCursor
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
ValidateRect
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
PtInRect
GetWindow
GetMenuStringW
InsertMenuW
RemoveMenu
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
TabbedTextOutW
GetWindowThreadProcessId
GetWindowLongW
IsWindowEnabled
MapVirtualKeyW
GetKeyNameTextW
ReleaseDC
OpenClipboard
GetClipboardData
IsClipboardFormatAvailable
GetKeyState
CloseClipboard
SetMenuDefaultItem
IsWindow
MessageBoxW
EnableWindow
SendMessageW
GetClientRect
GetWindowRect
LoadIconW
PostQuitMessage
GetSystemMetrics
GetMenuItemCount
RedrawWindow
AppendMenuW
BringWindowToTop
LoadMenuW
GetMenu
DrawIcon
SetForegroundWindow
GetSubMenu
KillTimer
PostMessageW
EnumChildWindows
GetCursorPos
GetClassNameW
SystemParametersInfoW
FindWindowW
SetParent
LoadImageW
RegisterWindowMessageW
TrackPopupMenu
SetActiveWindow
DrawAnimatedRects
IsWindowVisible
BroadcastSystemMessageW
GetLastActivePopup
wsprintfA
GetUserObjectInformationW
GetMenuItemID
IsIconic
GetProcessWindowStation
SetTimer
GetSystemMenu
MessageBeep
DestroyIcon
GetParent
GetDesktopWindow
MessageBoxA
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuW
GetFocus
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetDC
LoadBitmapW
CopyRect
GetSysColor
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
CopyMetaFileW
CreateEllipticRgn
CreatePolygonRgn
CombineRgn
IntersectClipRect
GetTextColor
Polyline
Ellipse
Polygon
GetTextMetricsW
SetRectRgn
GetMapMode
DPtoLP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateDIBSection
SetDIBColorTable
RealizePalette
CreateRoundRectRgn
OffsetRgn
GetRgnBox
EnumFontFamiliesExW
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetWindowOrgEx
SetPixelV
GetTextFaceW
GetClipBox
ExcludeClipRect
SetMapMode
CreatePen
GetObjectW
Rectangle
CreateFontIndirectW
CreateSolidBrush
GetStockObject
GetPixel
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
DeleteObject
SetBkMode
SetPixel
StretchBlt
DeleteDC
SetTextColor
GetTextExtentPoint32W
BitBlt
EndDoc
ResetDCW
StartDocW
CreateDCW
GetDeviceCaps
StartPage
EndPage
CreateBitmap
CreateRectRgnIndirect
PatBlt
SaveDC
RestoreDC
SetBkColor
SetPolyFillMode
GetBkColor
SetROP2
AlphaBlend
TransparentBlt
GradientFill
GetFileTitleW
DocumentPropertiesW
OpenPrinterW
SetJobW
EnumPrintersW
ClosePrinter
RegQueryValueExW
RegDeleteValueW
RegCloseKey
OpenProcessToken
RegDeleteKeyW
LookupPrivilegeValueW
RegOpenKeyExW
RegEnumKeyExW
AdjustTokenPrivileges
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegisterEventSourceA
DeregisterEventSource
RegCreateKeyExW
FreeSid
SetEntriesInAclA
SetEntriesInAclW
SetSecurityInfo
AllocateAndInitializeSid
GetSecurityInfo
ReportEventA
RegisterEventSourceW
RegSetValueExW
DragQueryFileW
DragFinish
SHGetSpecialFolderLocation
Shell_NotifyIconW
SHAppBarMessage
SHGetFileInfoW
ord727
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFolderPathW
ShellExecuteW
InitCommonControlsEx
ImageList_GetIconSize
CoRegisterMessageFilter
CoRevokeClassObject
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoFreeUnusedLibraries
OleUninitialize
OleLockRunning
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoInitialize
CoTaskMemFree
CreateStreamOnHGlobal
CoUninitialize
CoCreateGuid
OleInitialize
OleCreateFontIndirect
VarBstrFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysAllocString
VariantCopy
SafeArrayDestroy
SysStringLen
OleUIBusyW
GdipCloneImage
GdipSetImageAttributesColorMatrix
GdipDrawImageRectRectI
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipDeleteBrush
GdipDeletePen
GdipCloneBrush
GdipCreateSolidFill
GdipFillRectangleI
GdipCreatePen1
GdipDrawRectangleI
GdiplusShutdown
GdiplusStartup
GdipCreateHICONFromBitmap
GdipLoadImageFromStream
GdipDrawImageRectRect
GdipGetImageHeight
GdipStringFormatGetGenericDefault
GdipMeasureString
GdipSetStringFormatLineAlign
GdipDeleteFont
GdipGetImageGraphicsContext
GdipLoadImageFromFile
GdipCreateFromHDC
GdipDeleteFontFamily
GdipGetImageEncodersSize
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipGetImageEncoders
GdipDrawString
GdipCreateFontFamilyFromName
GdipSaveImageToFile
GdipCreateStringFormat
GdipGetImageWidth
GdipDeleteStringFormat
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDisposeImage
GdipAlloc
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateBitmapFromStream
GdipSetStringFormatAlign
GdipFree
WSASetLastError
WSAAsyncSelect
htons
ioctlsocket
listen
WSAGetLastError
closesocket
socket
recv
accept
shutdown
select
connect
WSAStartup
WSACleanup
send
NetUserEnum
NetApiBufferFree
SendARP
GetAdaptersInfo
GetIpNetTable
WinHttpAddRequestHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpSetStatusCallback
WinHttpQueryHeaders
WinHttpConnect
WinHttpSendRequest
WinHttpSetOption
WinHttpReceiveResponse
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WSAAddressToStringA
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
pdfPrintSetLastPage
pdfPrintSetPrinter
pdfPrintSetFirstPage
pdfPrintToDC2
pdfLoadFileW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ