d:\MyProg\MyPrj\tv\tv\Release\tv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-03_06a94085029a22fb1ee0e4f934691f91_icedid.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-02-03_06a94085029a22fb1ee0e4f934691f91_icedid.exe
Resource
win10v2004-20231222-en
General
-
Target
2024-02-03_06a94085029a22fb1ee0e4f934691f91_icedid
-
Size
3.1MB
-
MD5
06a94085029a22fb1ee0e4f934691f91
-
SHA1
da8a30f508f0658b6f79f632d13f68a532f3d099
-
SHA256
4df09a9da6e9fd3c9e4d1d163d0b6895af8e75abf66188cb6612e5665564e798
-
SHA512
e9cff64bd308246da1e33d50f72fd49b69c55fc225d3552d82e90d75eca3550717c7361fc2db67bfb3134151b4dfc10cb92bcee5c5482bfe40588445a51c6be3
-
SSDEEP
98304:OvX5tmNOZM1TDIxVpx/XxzAVlkZnLESWf0:OvX5ZskYSo90
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-03_06a94085029a22fb1ee0e4f934691f91_icedid
Files
-
2024-02-03_06a94085029a22fb1ee0e4f934691f91_icedid.exe windows:5 windows x86 arch:x86
775b1f6538956fff97811d45b1c17fb3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
libvlc
libvlc_video_get_spu_count
libvlc_video_get_spu
libvlc_video_set_spu
libvlc_video_set_subtitle_file
libvlc_media_player_event_manager
libvlc_event_detach
libvlc_media_list_player_event_manager
libvlc_event_attach
libvlc_media_player_set_time
libvlc_media_player_get_time
libvlc_media_player_get_length
libvlc_media_player_set_position
libvlc_media_player_get_position
libvlc_media_player_is_seekable
libvlc_media_player_set_rate
libvlc_video_get_size
libvlc_media_list_player_get_state
libvlc_media_player_get_state
libvlc_audio_get_track_description
libvlc_audio_get_track_count
libvlc_audio_set_track
libvlc_audio_get_track
libvlc_new
libvlc_get_version
libvlc_release
libvlc_video_get_spu_description
libvlc_video_take_snapshot
libvlc_audio_output_get_device_type
libvlc_audio_output_set_device_type
libvlc_media_get_stats
libvlc_media_get_meta
libvlc_media_player_set_hwnd
libvlc_media_list_release
libvlc_media_release
libvlc_media_player_release
libvlc_media_list_player_release
libvlc_media_list_player_set_media_list
libvlc_media_list_add_media
libvlc_media_list_set_media
libvlc_media_list_new
libvlc_media_list_player_set_media_player
libvlc_media_list_player_new
libvlc_media_player_set_media
libvlc_media_player_new
libvlc_media_new_path
libvlc_media_new_location
libvlc_video_get_track_count
libvlc_video_get_track
libvlc_video_set_track
libvlc_video_get_track_description
libvlc_media_player_pause
libvlc_media_list_player_pause
libvlc_media_player_play
libvlc_media_list_player_play
libvlc_media_player_stop
libvlc_media_list_player_stop
libvlc_get_input_thread
libvlc_video_set_adjust_float
libvlc_video_set_adjust_int
libvlc_video_set_deinterlace
libvlc_audio_set_mute
libvlc_audio_set_volume
libvlc_video_get_scale
libvlc_video_set_scale
libvlc_video_get_aspect_ratio
libvlc_video_set_aspect_ratio
libvlc_media_player_has_vout
libvlc_video_get_crop_geometry
libvlc_video_set_crop_geometry
libvlc_add_intf
libvlccore
vlc_object_hold
vlc_object_release
var_FreeList
var_Change
var_Get
var_GetChecked
input_Control
vlc_object_find_name
aout_EnableFilter
var_SetChecked
var_Set
input_item_GetURI
vlc_release
vlc_hold
input_GetItem
var_AddCallback
vlc_mutex_lock
var_DelCallback
vlc_mutex_unlock
dsound
ord3
iphlpapi
GetAdaptersInfo
powrprof
SetSuspendState
GetPwrCapabilities
uxtheme
DrawThemeBackground
GetThemePartSize
OpenThemeData
SetWindowTheme
CloseThemeData
lua51
lua_toboolean
lua_tointeger
luaL_loadfile
lua_pushnil
lua_pushnumber
lua_pushinteger
lua_pcall
lua_tolstring
lua_tonumber
lua_close
luaL_newstate
luaL_openlibs
lua_setfield
luaL_register
lua_pushlightuserdata
lua_gettop
lua_getfield
lua_pushstring
lua_gettable
lua_topointer
lua_settop
lua_isnumber
lua_isstring
lua_isuserdata
luaL_error
lua_touserdata
lua_next
lua_pushboolean
lua_type
wininet
InternetCrackUrlW
HttpOpenRequestW
DeleteUrlCacheEntryW
InternetGetCookieW
InternetSetOptionExW
InternetSetCookieW
InternetQueryDataAvailable
HttpQueryInfoW
InternetCloseHandle
InternetGetLastResponseInfoW
InternetOpenW
InternetSetStatusCallbackW
InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpSendRequestW
InternetConnectW
winmm
waveOutGetNumDevs
PlaySoundW
waveOutGetDevCapsW
kernel32
ResumeThread
SetThreadPriority
GetTempFileNameW
GlobalFree
GetCommandLineW
SetUnhandledExceptionFilter
InterlockedExchange
FileTimeToSystemTime
FileTimeToLocalFileTime
FreeLibrary
SetFileAttributesW
GetFileSizeEx
CreateDirectoryW
CopyFileW
GetLocaleInfoW
CancelWaitableTimer
WaitForMultipleObjects
SetWaitableTimer
CreateWaitableTimerW
GetCurrentProcess
GetExitCodeThread
WriteFile
GetEnvironmentVariableW
lstrlenW
MulDiv
LocalFree
FormatMessageW
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GetVersionExA
lstrcmpW
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
FreeResource
TerminateThread
CompareStringA
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
RaiseException
GetThreadLocale
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
GlobalGetAtomNameW
GetFileTime
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
lstrlenA
GlobalFlags
GetPrivateProfileIntW
WritePrivateProfileStringW
GetCurrentDirectoryW
lstrcpyW
SetErrorMode
SearchPathW
GetProfileIntW
VirtualProtect
FindResourceExW
GetStartupInfoW
ResetEvent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
ExitThread
SetStdHandle
GetFileType
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
LCMapStringW
GetStringTypeA
GetStringTypeW
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
TerminateProcess
SystemTimeToFileTime
LocalFileTimeToFileTime
WriteProcessMemory
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateThread
GetModuleHandleW
LoadLibraryW
GetProcAddress
GetLastError
SetLastError
DeleteFileW
GetTempPathW
GetSystemDirectoryW
RemoveDirectoryW
WideCharToMultiByte
MultiByteToWideChar
SetEvent
FindFirstFileW
FindNextFileW
FindClose
CreateFileW
GetFileAttributesW
GetModuleFileNameW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
GetCurrentThreadId
GetVersionExW
ExitProcess
GetCurrentProcessId
LoadResource
LockResource
SizeofResource
FindResourceW
SetThreadExecutionState
OpenProcess
ReadProcessMemory
CloseHandle
lstrcpynW
GetTickCount
CreateEventW
InterlockedIncrement
InterlockedDecrement
RtlUnwind
Sleep
GetModuleHandleA
user32
GetScrollRange
SetScrollRange
SetMenu
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
DestroyWindow
GetTopWindow
GetDlgItem
GetLastActivePopup
GetWindowTextW
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
RegisterWindowMessageW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
IsWindowEnabled
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
GetActiveWindow
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
BeginPaint
EndPaint
DestroyMenu
MapVirtualKeyW
PostQuitMessage
MessageBeep
ShowOwnedPopups
RegisterClipboardFormatW
MsgWaitForMultipleObjects
CharUpperW
GetSysColorBrush
UnregisterClassW
PostThreadMessageW
WaitMessage
CopyAcceleratorTableW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
GetAsyncKeyState
DestroyAcceleratorTable
LoadAcceleratorsW
CreateAcceleratorTableW
NotifyWinEvent
SetParent
SetClassLongW
BringWindowToTop
EnumChildWindows
DrawStateW
CopyImage
DestroyIcon
SetClipboardData
EmptyClipboard
InvalidateRgn
CharNextW
MapDialogRect
DefWindowProcW
DrawIconEx
DrawEdge
DrawFocusRect
GetIconInfo
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
UpdateLayeredWindow
GetMenuDefaultItem
IsCharLowerW
MapVirtualKeyExW
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
FrameRect
GetUpdateRect
CharUpperBuffW
CopyIcon
SubtractRect
GetNextDlgGroupItem
GetDoubleClickTime
CreateMenu
GetWindowRgn
DestroyCursor
DrawIcon
SetScrollPos
GetMenu
SystemParametersInfoA
GetWindowPlacement
GetMenuState
GetMenuItemID
RemoveMenu
RegisterHotKey
UnregisterHotKey
GetKeyNameTextW
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
FillRect
SetCursorPos
CallWindowProcW
GetComboBoxInfo
GetScrollInfo
SystemParametersInfoW
GetClassNameW
GetScrollBarInfo
ShowScrollBar
EnableScrollBar
ClipCursor
GetFocus
SetFocus
MessageBoxW
LoadBitmapW
GetDlgCtrlID
SetWindowPos
FindWindowExW
SetMenuItemInfoW
ValidateRect
TrackMouseEvent
GetMessageW
TranslateMessage
DispatchMessageW
GetSystemMetrics
ChildWindowFromPointEx
GetWindowDC
GetWindow
GetSysColor
IntersectRect
SetCursor
SetLayeredWindowAttributes
ValidateRgn
InvalidateRect
UnionRect
EqualRect
SetRectEmpty
GetDC
ReleaseDC
IsRectEmpty
DrawFrameControl
InflateRect
GetSystemMenu
GetParent
RedrawWindow
LoadImageW
FindWindowW
GetWindowThreadProcessId
AllowSetForegroundWindow
EnumDisplayMonitors
LoadIconW
EnableWindow
SetForegroundWindow
WindowFromPoint
GetDesktopWindow
SetCapture
GetCapture
SetActiveWindow
KillTimer
SetTimer
LockWindowUpdate
IsWindowVisible
UpdateWindow
ScreenToClient
ClientToScreen
GetClientRect
GetWindowRect
SetWindowRgn
IsZoomed
IsIconic
DrawMenuBar
PostMessageW
SendMessageW
LoadMenuW
ModifyMenuW
InsertMenuW
GetMenuItemInfoW
GetMenuStringW
GetMenuItemCount
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
AppendMenuW
DeleteMenu
CreatePopupMenu
OffsetRect
SetRect
PtInRect
ReleaseCapture
GetForegroundWindow
GetSubMenu
IsMenu
MonitorFromPoint
GetMonitorInfoW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
PeekMessageW
GetWindowLongW
SetWindowLongW
GetCursorPos
ShowCursor
GetKeyState
LoadCursorW
MonitorFromRect
IsWindow
GetScrollPos
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
SetScrollInfo
SetWindowPlacement
CopyRect
SetWindowContextHelpId
gdi32
GetTextExtentPoint32W
CreateRoundRectRgn
CombineRgn
Polygon
GetObjectA
GetClipRgn
CreateCompatibleBitmap
CreateCompatibleDC
GetWindowOrgEx
SetWindowOrgEx
GetCurrentObject
BitBlt
OffsetRgn
SetBrushOrgEx
CreatePen
Rectangle
StretchBlt
GetDIBits
CreateBrushIndirect
ExtCreateRegion
GetGraphicsMode
GetWorldTransform
RoundRect
GetTextColor
GetPixel
DeleteDC
SetDIBColorTable
GetDIBColorTable
CopyMetaFileW
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
SetPixelV
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
GetBoundsRect
FrameRgn
CreateDIBSection
SetTextAlign
GetTextFaceW
FillRgn
PtInRegion
GetPaletteEntries
CreatePalette
SelectObject
GetObjectW
CreateFontIndirectW
SaveDC
CreateFontW
GetDeviceCaps
CreateSolidBrush
CreateRectRgn
DeleteObject
GetBkColor
GetViewportOrgEx
SelectClipRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
EnumFontFamiliesExW
GetSystemPaletteEntries
GetNearestPaletteIndex
SetPaletteEntries
ExtFloodFill
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
ExtSelectClipRgn
CreatePatternBrush
GetStockObject
SelectPalette
GetObjectType
ExtCreatePen
CreateHatchBrush
CreateRectRgnIndirect
PatBlt
SetRectRgn
GetMapMode
DPtoLP
GetTextMetricsW
GetRgnBox
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
RealizePalette
SetPixel
CreateEllipticRgn
CreatePolygonRgn
Polyline
Ellipse
LPtoDP
msimg32
AlphaBlend
GradientFill
TransparentBlt
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegEnumKeyExW
RegDeleteValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownW
RegCreateKeyExW
RegSetValueExW
RegOpenCurrentUser
RegOpenKeyW
RegQueryValueExW
shell32
DragFinish
DragQueryFileW
SHCreateDirectoryExW
CommandLineToArgvW
SHGetMalloc
Shell_NotifyIconW
SHAppBarMessage
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW
DragAcceptFiles
ShellExecuteW
SHGetFileInfoW
comctl32
InitCommonControlsEx
ImageList_GetIconSize
ord17
shlwapi
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
PathFindFileNameW
PathStripPathW
PathRemoveExtensionW
PathFindExtensionW
oledlg
OleUIBusyW
ole32
CoTaskMemFree
CoCreateInstance
CoInitialize
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoUninitialize
CoGetClassObject
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoInitializeEx
CLSIDFromString
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
OleLockRunning
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
DoDragDrop
OleGetClipboard
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CreateStreamOnHGlobal
oleaut32
OleCreateFontIndirect
SysFreeString
SysAllocString
VariantClear
VarUdateFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromUdate
VariantInit
VariantChangeType
SysStringLen
SysAllocStringLen
VariantCopy
DispCallFunc
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayCreate
SafeArrayDestroy
urlmon
URLDownloadToFileW
IsValidURL
gdiplus
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromHBITMAP
GdipSetStringFormatTrimming
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipDrawLineI
GdipSetPenDashStyle
GdipAddPathArcI
GdipResetPath
GdipCreatePath2I
GdipCreatePath2
GdipGetFontSize
GdipGetFontStyle
GdipGetFamily
GdipDeleteFontFamily
GdipMeasureString
GdipFillPath
GdipDrawPath
GdipGetPageUnit
GdipSetPageUnit
GdipSetSmoothingMode
GdipGetSmoothingMode
GdipFlush
GdipCreateFromHWNDICM
GdipCreateFromHWND
GdipCreateFromHDC2
GdipSetPathGradientFocusScales
GdipSetPathGradientCenterPointI
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterColor
GdipCreatePathGradientFromPath
GdipAddPathString
GdipDeletePath
GdipCreatePath
GdipStringFormatGetGenericTypographic
GdipSetPenMode
GdipDeletePen
GdipCreatePen1
GdipCreateLineBrushFromRectI
GdipCreateMatrix2
GdipCloneBitmapAreaI
GdipGetImageGraphicsContext
GdipTranslateMatrix
GdipRotateMatrix
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipDrawImagePointRectI
GdipScaleWorldTransform
GdipSetImageAttributesColorMatrix
GdipResetClip
GdipGetWorldTransform
GdipSetWorldTransform
GdipTranslateWorldTransform
GdipAddPathPolygonI
GdipAddPathRectangleI
GdipClosePathFigure
GdipDeleteMatrix
GdipCreateMatrix
GdipDrawString
GdipSetTextRenderingHint
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipGetStringFormatFlags
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromResource
GdipCreateBitmapFromScan0
GdipCloneImage
GdipDisposeImage
GdipGetImagePixelFormat
GdipDeleteCachedBitmap
GdipCreateCachedBitmap
GdipSetClipRectI
GdipDrawImageI
GdipDrawCachedBitmap
GdipDrawImageRectI
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDeleteRegion
GdipCreateRegion
GdipGetClip
GdipSetClipHrgn
GdipSetClipRegion
GdipDrawImageRectRectI
GdipFillRectangleI
GdipGraphicsClear
GdipSetInterpolationMode
GdipGetInterpolationMode
GdipGetCompositingQuality
GdipSetCompositingQuality
GdipGetCompositingMode
GdipSetCompositingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetImageAttributesColorKeys
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipFree
GdiplusShutdown
GdiplusStartup
ws2_32
send
ntohl
setsockopt
WSAStringToAddressW
bind
recv
GetAddrInfoW
socket
FreeAddrInfoW
WSAGetLastError
connect
select
closesocket
WSAStartup
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 559KB - Virtual size: 558KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 227KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ