d:\make_bt\8.7.0.48\Dev\Package\HG42_RuntimeUtils\OskOdbcConfig\Release\OskOdbcConfig.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-28_ff254321298a54731ce3522f324eab18_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-01-28_ff254321298a54731ce3522f324eab18_icedid.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-01-28_ff254321298a54731ce3522f324eab18_icedid
-
Size
5.4MB
-
MD5
ff254321298a54731ce3522f324eab18
-
SHA1
e51ae42643d1d5b3eaa25f24b1f6c7312c86368e
-
SHA256
4620e3a5180d26f1339f3e0799b5101af59e1567622957793a4a27aed2deed16
-
SHA512
c01e126206c3955e76444d7b3aa3e41fd1f57d34acc11554b3274a127473a261cfc458ef593609aa845fb4d3f868a311ddd45e6962e87c23c8d439bc246b893f
-
SSDEEP
49152:O+gJA5lWNnf646mjm7IDGuJsIwje3DTQqI/SMsaSy6keOzusPs/Ob6l6HKZyDBSH:TnUh72pjerf6J5PRg2QUmQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-28_ff254321298a54731ce3522f324eab18_icedid
Files
-
2024-01-28_ff254321298a54731ce3522f324eab18_icedid.exe windows:6 windows x86 arch:x86
e64935680f20cc65cf3df08c2a144f7b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLastError
GetModuleFileNameA
GetModuleHandleA
LoadResource
LockResource
SizeofResource
FindResourceW
GetPrivateProfileStringA
WritePrivateProfileStringA
CopyFileA
WideCharToMultiByte
SearchPathA
DecodePointer
RaiseException
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
GetProcAddress
GetEnvironmentVariableA
MultiByteToWideChar
CreateProcessA
WaitForMultipleObjects
GetModuleFileNameW
GetSystemDirectoryW
LoadLibraryExW
SetLastError
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
LocalFree
MulDiv
FormatMessageA
OutputDebugStringA
GetModuleHandleW
LoadLibraryA
LoadLibraryW
EncodePointer
GetCurrentThreadId
FreeLibrary
FreeResource
GlobalDeleteAtom
lstrcmpW
SetEnvironmentVariableA
CreateFileW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetTimeZoneInformation
HeapQueryInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetFileAttributesW
GetFileAttributesExW
DeleteFileW
IsValidCodePage
CreateSemaphoreW
GetStartupInfoW
TerminateProcess
CreateEventW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
SetConsoleCtrlHandler
FatalAppExitA
SetStdHandle
GetSystemTimeAsFileTime
WriteConsoleW
OutputDebugStringW
GetFileType
GetStdHandle
ExitThread
CreateThread
AreFileApisANSI
ExitProcess
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapValidate
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
GetModuleHandleExW
LocalUnlock
LocalLock
GetTickCount
Sleep
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
lstrcpyA
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
SetFileTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
GetWindowsDirectoryA
CreateSemaphoreA
lstrlenA
CreateMutexA
ReleaseMutex
ReleaseSemaphore
FindResourceExW
GetStringTypeExA
GetVolumeInformationA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetCurrentProcess
GetHandleInformation
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
DeleteFileA
GetCurrentDirectoryA
GetACP
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
PulseEvent
ResetEvent
GlobalFlags
FindResourceA
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
VirtualProtect
GetProfileIntA
GetAtomNameA
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetPrivateProfileIntA
CreateEventA
WaitForSingleObject
SetEvent
CloseHandle
lstrcmpA
GetCurrentThread
GetVersionExA
ResumeThread
SuspendThread
GetThreadPriority
SetThreadPriority
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
user32
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
LoadImageW
EmptyClipboard
SetClipboardData
CloseClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
MessageBeep
GetIconInfo
DrawIconEx
UnionRect
MsgWaitForMultipleObjectsEx
IsRectEmpty
ReuseDDElParam
GetMenuBarInfo
LoadImageA
TranslateAcceleratorA
LoadAcceleratorsA
CharUpperA
DestroyIcon
LoadAcceleratorsW
WaitMessage
GetDialogBaseUnits
UnpackDDElParam
GetClipboardFormatNameA
CopyImage
RealChildWindowFromPoint
IntersectRect
SystemParametersInfoA
DestroyMenu
MapVirtualKeyA
GetKeyNameTextA
GetAsyncKeyState
InflateRect
ReleaseCapture
SetRectEmpty
OffsetRect
SetRect
GetWindowThreadProcessId
SetCursor
GetCursorPos
TranslateMessage
GetMessageA
PostQuitMessage
EndDialog
CreateDialogIndirectParamA
NotifyWinEvent
ArrangeIconicWindows
DlgDirSelectComboBoxExA
DlgDirListComboBoxA
DlgDirSelectExA
DlgDirListA
LoadCursorW
LoadCursorA
GetLastActivePopup
FindWindowExA
FindWindowA
GetDesktopWindow
ChildWindowFromPointEx
ChildWindowFromPoint
WindowFromPoint
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
CreateCaret
GetWindowContextHelpId
SetWindowContextHelpId
EnableScrollBar
ShowScrollBar
LockWindowUpdate
RedrawWindow
ValidateRgn
InvalidateRgn
ValidateRect
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRgn
GetUpdateRect
GetDCEx
SetForegroundWindow
GetForegroundWindow
UpdateWindow
DragDetect
GetSystemMenu
DrawMenuBar
HiliteMenuItem
KillTimer
SetTimer
SetCapture
GetActiveWindow
GetOpenClipboardWindow
ChangeClipboardChain
GetClipboardViewer
SetClipboardViewer
GetClipboardOwner
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
GetKeyboardLayout
CloseWindow
OpenIcon
ShowOwnedPopups
FlashWindow
PostThreadMessageA
SendNotifyMessageA
DrawAnimatedRects
DrawCaption
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsWindowEnabled
EnableWindow
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetTopWindow
GetClassNameA
GetParent
GetClassLongA
SetWindowLongA
GetWindowLongA
PtInRect
EqualRect
MapWindowPoints
MessageBoxA
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
GetMenuCheckMarkDimensions
GetFocus
CopyRect
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
LoadBitmapW
LoadBitmapA
CheckMenuRadioItem
InvertRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
GetMenuContextHelpId
SetMenuContextHelpId
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
SetCursorPos
SetClassLongA
GetDoubleClickTime
CopyIcon
RegisterClipboardFormatA
CharUpperBuffA
EnumChildWindows
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
IsClipboardFormatAvailable
SubtractRect
InSendMessage
DestroyCursor
GetTabbedTextExtentW
IsWindowVisible
ScrollDC
ExcludeUpdateRgn
WindowFromDC
GetTabbedTextExtentA
DrawStateA
GrayStringA
DrawTextExA
DrawTextA
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuItemA
SetMenuItemBitmaps
DeleteMenu
ModifyMenuA
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuIndirectA
LoadMenuW
LoadMenuA
DrawFrameControl
DrawEdge
MapDialogRect
TabbedTextOutA
IsWindow
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
IsMenu
SendMessageA
RegisterWindowMessageA
MessageBoxW
UnregisterClassA
GetSystemMetrics
PostMessageA
SetParent
gdi32
CreateCompatibleBitmap
CreateDiscardableBitmap
CreateCompatibleDC
CreateDIBPatternBrushPt
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateFontIndirectA
CreateFontA
CreateHatchBrush
CreateICA
CreatePalette
CreatePen
CreatePenIndirect
CreatePolyPolygonRgn
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DrawEscape
Ellipse
EnumObjects
EqualRgn
Escape
ExtEscape
ExtCreateRegion
ExtFloodFill
FillRgn
FloodFill
FrameRgn
GetROP2
GetAspectRatioFilterEx
GetBkColor
GetBkMode
GetBitmapBits
GetBitmapDimensionEx
GetBoundsRect
GetBrushOrgEx
GetCharWidthA
GetCharWidthFloatA
GetCharABCWidthsA
GetCharABCWidthsFloatA
GetCurrentObject
GetCurrentPositionEx
GetFontData
GetGlyphOutlineA
GetGraphicsMode
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetOutlineTextMetricsA
GetPaletteEntries
GetPixel
GetPolyFillMode
GetRegionData
GetRgnBox
GetStockObject
GetStretchBltMode
GetTextCharacterExtra
GetTextAlign
GetTextColor
GetTextExtentPoint32A
GetFontLanguageInfo
GetCharacterPlacementA
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
InvertRgn
MaskBlt
PlgBlt
OffsetRgn
PatBlt
Pie
PaintRgn
PolyPolygon
PtInRegion
PtVisible
RectInRegion
RectVisible
Rectangle
ResetDCA
RealizePalette
RoundRect
ResizePalette
SelectObject
SetBitmapBits
SetBoundsRect
SetPaletteEntries
SetPixel
SetPixelV
StretchBlt
SetRectRgn
UpdateColors
PlayEnhMetaFile
GdiComment
GetTextMetricsA
CreateBrushIndirect
PolyPolyline
GetWorldTransform
GetColorAdjustment
CreateHalftonePalette
StartDocA
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetPath
PathToRegion
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
ExtCreatePen
GetMiterLimit
GetArcDirection
GetObjectA
TextOutA
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
PolyBezier
SetBitmapDimensionEx
SetBrushOrgEx
GetTextFaceA
GetKerningPairsA
UnrealizeObject
DeleteDC
DeleteObject
ExcludeClipRect
GetClipBox
GetClipRgn
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
StretchDIBits
EnumFontFamiliesExA
GetSystemPaletteEntries
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
CreateDIBSection
SetDIBColorTable
DeleteMetaFile
GetTextExtentPointA
GetTextExtentPoint32W
CreateBitmapIndirect
CreateBitmap
CombineRgn
Chord
BitBlt
Arc
AnimatePalette
ExtTextOutA
CreateEnhMetaFileA
CloseEnhMetaFile
CreateMetaFileA
CloseMetaFile
GetDeviceCaps
CopyMetaFileA
AngleArc
CreateDCA
msimg32
TransparentBlt
AlphaBlend
GradientFill
winspool.drv
GetJobA
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
SetFileSecurityA
RegEnumKeyExA
RegOpenKeyExW
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegCloseKey
GetFileSecurityA
shell32
SHGetMalloc
DragAcceptFiles
SHAddToRecentDocs
ExtractIconA
SHGetFileInfoA
DragQueryFileA
DragFinish
ShellExecuteExA
SHAppBarMessage
SHBrowseForFolderA
SHGetFolderPathA
ShellExecuteA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
shlwapi
PathFindFileNameA
PathRemoveExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
PathFindExtensionA
StrFormatKBSizeA
uxtheme
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
DrawThemeText
DrawThemeParentBackground
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
CloseThemeData
DrawThemeBackground
OpenThemeData
ole32
GetClassFile
StgCreateDocfileOnILockBytes
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CreateStreamOnHGlobal
PropVariantCopy
CoRevokeClassObject
CoRegisterClassObject
OleRun
CLSIDFromProgID
CLSIDFromString
StringFromGUID2
CoDisconnectObject
CoRegisterMessageFilter
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
WriteClassStg
ReadClassStg
CreateBindCtx
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoGetClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateOleAdviseHolder
CreateDataAdviseHolder
GetRunningObjectTable
OleQueryCreateFromData
OleQueryLinkFromData
OleRegEnumVerbs
OleRegGetMiscStatus
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLoad
CreateFileMoniker
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoGetMalloc
OleSetMenuDescriptor
CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
OleGetIconOfClass
OleLockRunning
OleIsRunning
OleSetContainedObject
OleSaveToStream
OleSave
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
WriteClassStm
CreateItemMoniker
CreateGenericComposite
StgIsStorageILockBytes
CoInitialize
StgOpenStorageOnILockBytes
oleaut32
SafeArrayGetElemsize
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysStringLen
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayGetDim
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SysAllocString
VarDecFromStr
VarBstrFromDec
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
oledlg
ord9
ord7
ord6
ord5
ord4
ord3
ord8
oleacc
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
gdiplus
GdipFree
GdipAlloc
GdipGetImageHeight
GdiplusStartup
GdipCloneImage
GdipGetImagePalette
GdipGetImagePaletteSize
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageWidth
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdipCreateFromHDC
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundA
Sections
.text Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 658KB - Virtual size: 658KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ