c:\src\GNR-606\mapi\out\ZCOLogCtl\dbg\usa\ZCOLogCtl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_502e45289d5998d0a6bb3e3c446ee90a_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_502e45289d5998d0a6bb3e3c446ee90a_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-12_502e45289d5998d0a6bb3e3c446ee90a_icedid
-
Size
1.5MB
-
MD5
502e45289d5998d0a6bb3e3c446ee90a
-
SHA1
9765554320d8790f592869b2efe9e35ab7ca7245
-
SHA256
176b0cf7b3c763db19c79140caf83883133596aa213b28b76af49e5234fa49ab
-
SHA512
a73efe14eb75cb3a75acf2cf36d3a74d2137f7099ec98d43d4e664484e5e5a1c9677b184043053898cb3d9e3b3db33d4c35391c1d46655aa09c9ecc68a90b4ff
-
SSDEEP
24576:IrO3x+EqlLvfaMA3XUz/JeaFpemYX+rAi3Fg+Cu9a2uTh:6KIVgXze5fMh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-12_502e45289d5998d0a6bb3e3c446ee90a_icedid
Files
-
2024-02-12_502e45289d5998d0a6bb3e3c446ee90a_icedid.exe windows:4 windows x86 arch:x86
070514c22a9a3be1f76eac254efff03b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
winhttp
WinHttpQueryHeaders
WinHttpConnect
WinHttpSetTimeouts
WinHttpOpen
WinHttpOpenRequest
WinHttpSetOption
WinHttpSetStatusCallback
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpCloseHandle
kernel32
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
FindResourceW
SizeofResource
LockResource
LoadResource
GetVersionExW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
FindClose
FindFirstFileW
GetTempPathW
CloseHandle
WideCharToMultiByte
DeleteFileW
ReadFile
GetFileSize
CreateFileW
SetCurrentDirectoryW
TerminateThread
CreateThread
FreeResource
GlobalFree
GlobalUnlock
GetLastError
GlobalLock
SetThreadPriority
GetThreadPriority
ResumeThread
SuspendThread
GetVersionExA
GetProcAddress
GetModuleHandleW
MultiByteToWideChar
lstrcmpW
OpenEventA
lstrcpyA
OutputDebugStringW
FileTimeToLocalFileTime
UnmapViewOfFile
LCMapStringW
LCMapStringA
GetTimeZoneInformation
CreateFileA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
GetDateFormatA
GetTimeFormatA
SetStdHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
GetProcessHeap
IsBadCodePtr
GetCPInfo
GetOEMCP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
HeapReAlloc
HeapAlloc
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
FatalAppExitA
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualQuery
GetSystemInfo
VirtualAlloc
ExitThread
TerminateProcess
ExitProcess
HeapValidate
GetModuleFileNameA
OutputDebugStringA
GetStdHandle
DebugBreak
RtlUnwind
GetStartupInfoW
LocalLock
LocalUnlock
GetTickCount
SetFileAttributesW
LocalFileTimeToFileTime
GetDiskFreeSpaceW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
FindResourceExW
GetShortPathNameW
GetStringTypeExW
GetFullPathNameW
GetVolumeInformationW
MoveFileW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
DuplicateHandle
GetCurrentDirectoryW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
SystemTimeToFileTime
FileTimeToSystemTime
GetProfileIntW
VirtualProtect
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
IsBadReadPtr
IsBadWritePtr
IsBadStringPtrA
SetErrorMode
GlobalFlags
RaiseException
DeleteCriticalSection
CreateEventW
SetEvent
WaitForSingleObject
lstrcmpA
lstrcmpiA
GetModuleFileNameW
GetCurrentThread
GetLocaleInfoW
LoadLibraryW
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
SetLastError
MulDiv
lstrcpyW
CopyFileW
GlobalSize
GlobalAlloc
FormatMessageW
LocalFree
lstrcpynW
GetModuleHandleA
GlobalDeleteAtom
lstrlenA
LoadLibraryA
FreeLibrary
lstrlenW
lstrcatW
GetCurrentThreadId
GlobalGetAtomNameW
lstrcmpiW
GlobalAddAtomW
GlobalFindAtomW
user32
TranslateAcceleratorW
LoadAcceleratorsW
GetWindowThreadProcessId
WaitMessage
ReleaseCapture
SetRectEmpty
GetAsyncKeyState
UnpackDDElParam
GetClipboardFormatNameW
GetClipboardFormatNameA
wsprintfA
SystemParametersInfoW
DestroyMenu
GetDialogBaseUnits
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectW
LoadMenuW
ModifyMenuW
InsertMenuItemW
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
DeleteMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringW
GetTabbedTextExtentW
DrawTextExW
DrawTextW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateW
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
MapVirtualKeyW
GetKeyNameTextW
GetCursorPos
GetMessageW
TranslateMessage
SetCursor
PostQuitMessage
RemoveMenu
IsMenu
GetMenuItemCount
GetSubMenu
GetMenuState
GetMenuStringW
AppendMenuW
InsertMenuW
GetMenuItemID
TabbedTextOutW
GetMenuCheckMarkDimensions
LoadBitmapW
SetMenuItemBitmaps
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
GetSysColor
PeekMessageW
DispatchMessageW
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
WinHelpW
GetClassInfoW
RegisterClassW
UnregisterClassW
TrackPopupMenuEx
ReuseDDElParam
SetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetKeyState
GetDlgCtrlID
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassInfoExW
GetClassNameW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
OpenIcon
CloseWindow
LoadIconW
LoadCursorW
PostThreadMessageW
SetScrollRange
GetScrollRange
MsgWaitForMultipleObjects
PeekMessageA
IsWindowUnicode
GetMessageA
DispatchMessageA
SubtractRect
UnionRect
InflateRect
SetRect
PtInRect
UnregisterClassA
GetSystemMetrics
SendMessageW
wsprintfW
MessageBoxW
SetScrollPos
GetScrollPos
MapDialogRect
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageW
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
CharUpperW
DestroyIcon
CharNextW
CopyAcceleratorTableW
MessageBeep
RegisterClipboardFormatW
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
GetParent
IsChild
GetLastActivePopup
GetTopWindow
GetWindow
FindWindowExW
FindWindowW
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExW
DlgDirSelectExW
DlgDirListComboBoxW
DlgDirListW
GetFocus
SetCapture
GetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
IsClipboardFormatAvailable
InSendMessage
IsRectEmpty
GetTabbedTextExtentA
TrackPopupMenu
IsWindowEnabled
GetDlgItem
GetWindowLongW
DestroyWindow
CreateDialogIndirectParamW
EnableWindow
IsWindow
SetActiveWindow
GetActiveWindow
GetDesktopWindow
EndDialog
PostMessageW
DragDetect
GetMenu
SetMenu
DrawMenuBar
GetSystemMenu
HiliteMenuItem
IsIconic
IsZoomed
ArrangeIconicWindows
SetWindowRgn
GetWindowRgn
BringWindowToTop
GetWindowRect
GetClientRect
MapWindowPoints
ClientToScreen
ScreenToClient
BeginPaint
EndPaint
GetDC
GetWindowDC
ReleaseDC
UpdateWindow
GetUpdateRect
GetUpdateRgn
InvalidateRect
InvalidateRgn
ValidateRect
gdi32
SetTextColor
GetClipBox
GetRgnBox
PtInRegion
RectInRegion
CreateICW
CreateCompatibleDC
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
SelectObject
GetNearestColor
RealizePalette
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
GetCurrentPositionEx
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
FloodFill
ExtFloodFill
TextOutW
GetTextExtentPoint32W
GetTextAlign
GetTextFaceW
GetTextMetricsW
GetTextCharacterExtra
GetCharWidthW
GetFontLanguageInfo
GetCharacterPlacementW
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCW
GetOutlineTextMetricsW
GetCharABCWidthsW
GetFontData
GetKerningPairsW
GetGlyphOutlineW
StartDocW
StartPage
SetBkColor
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatW
GetCharWidthFloatW
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
DeleteDC
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
DeleteObject
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
StretchDIBits
EnumFontFamiliesExW
DeleteMetaFile
GetObjectW
CreateBitmap
CreateMetaFileW
CloseMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
ExtTextOutW
CopyMetaFileW
CreateDCW
GetDeviceCaps
GetStockObject
UnrealizeObject
GetObjectType
CreatePen
CreatePenIndirect
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateBrushIndirect
CreatePatternBrush
CreateDIBPatternBrushPt
CreateFontIndirectW
CreateFontW
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateCompatibleBitmap
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
GetDCOrgEx
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
EndPage
OffsetRgn
comdlg32
FindTextW
CommDlgExtendedError
ReplaceTextW
ChooseColorW
GetFileTitleW
PrintDlgW
PageSetupDlgW
GetSaveFileNameW
GetOpenFileNameW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
GetJobW
advapi32
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
OpenThreadToken
RevertToSelf
SetThreadToken
RegSetValueW
RegOpenKeyW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyW
SetFileSecurityW
GetFileSecurityW
RegQueryValueExW
shell32
DragFinish
DragQueryFileW
SHGetFileInfoW
ExtractIconW
DragAcceptFiles
comctl32
ImageList_SetImageCount
ImageList_Copy
PropertySheetW
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_ReplaceIcon
ImageList_Replace
ord8
ImageList_AddMasked
ImageList_Add
ImageList_GetImageCount
ord14
ImageList_Write
ImageList_Read
ImageList_Merge
ImageList_LoadImageW
ImageList_Create
ImageList_Destroy
ord13
ord17
ImageList_DragLeave
ImageList_DragEnter
ImageList_GetDragImage
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_DrawEx
ImageList_Draw
ImageList_Remove
ImageList_DragShowNolock
ImageList_GetIcon
shlwapi
PathRemoveExtensionW
PathFindFileNameW
PathIsUNCW
PathFindExtensionW
PathStripToRootW
oledlg
OleUIInsertObjectW
OleUIConvertW
OleUIChangeIconW
OleUIEditLinksW
OleUIUpdateLinksW
OleUIPasteSpecialW
OleUIBusyW
ole32
OleQueryLinkFromData
OleGetClipboard
OleSetMenuDescriptor
DoDragDrop
OleRegEnumVerbs
OleRegGetMiscStatus
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CreateOleAdviseHolder
CreateDataAdviseHolder
OleTranslateAccelerator
IsAccelerator
GetRunningObjectTable
CoLockObjectExternal
OleFlushClipboard
OleSetClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoRegisterClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleSetContainedObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleQueryCreateFromData
StringFromGUID2
CoCreateInstance
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
ReleaseStgMedium
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CreateBindCtx
CoTaskMemAlloc
OleDuplicateData
OleLockRunning
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoUnmarshalInterface
CoMarshalInterface
CoReleaseMarshalData
CoGetMalloc
OleIsRunning
OleSaveToStream
WriteClassStm
OleGetIconOfClass
CreateStreamOnHGlobal
GetClassFile
CreateFileMoniker
GetHGlobalFromILockBytes
StgIsStorageILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
CoGetClassObject
OleCreateFromData
CreateGenericComposite
OleRun
CreateItemMoniker
oleaut32
VarDateFromUdate
LoadTypeLi
OleCreateFontIndirect
VarBstrFromDate
VarDateFromStr
VarDecFromStr
VarBstrFromDec
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
SysAllocString
VariantCopy
SafeArrayCreate
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElemsize
SafeArrayGetDim
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
SystemTimeToVariantTime
VariantClear
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 352KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ