d:\ConfigTool_DSS-C\release\ConfigTool.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-12_45bc9c3abf677d9c8cdc39786fe1ccdb_icedid.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-12_45bc9c3abf677d9c8cdc39786fe1ccdb_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-02-12_45bc9c3abf677d9c8cdc39786fe1ccdb_icedid
-
Size
2.6MB
-
MD5
45bc9c3abf677d9c8cdc39786fe1ccdb
-
SHA1
84ce1ca641862890bc78fb13ec54b95b2e6d0cbc
-
SHA256
1a4823fa877dd83861ce1379d62a3b427d3f12ea28fa28a397996e33ae425875
-
SHA512
f58026c353da3a55be33295289c6d2fcd863583ccf1bb44236e39796ba288e2b7a35cb72f2dbe5921b9b58b5ca9ca899a1d79a68a56fa386fb7900c4235ef1f9
-
SSDEEP
24576:hdmlOoKrQPNOa6gn0xnFCsRvuY/7wwrqtjtDFX3/49ILy2ktaM4kcOH5bzDK:wqQwpxgftjNJbk4M39z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-12_45bc9c3abf677d9c8cdc39786fe1ccdb_icedid
Files
-
2024-02-12_45bc9c3abf677d9c8cdc39786fe1ccdb_icedid.exe windows:4 windows x86 arch:x86
35576fe5a1e6e0923edecdaf0da1fcb6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LocalUnlock
LocalLock
MoveFileExA
GetSystemDirectoryA
OpenEventA
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
SetEnvironmentVariableA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
HeapReAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsValidCodePage
GetACP
LoadLibraryW
OutputDebugStringW
GetFileType
WriteConsoleW
GetStdHandle
DebugBreak
RaiseException
ExitThread
RtlUnwind
GetStartupInfoA
GetProcessHeap
HeapAlloc
HeapFree
GetCommandLineA
IsBadReadPtr
HeapValidate
VirtualQuery
GetSystemInfo
VirtualAlloc
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
FindResourceExA
GetDiskFreeSpaceA
GetTempFileNameA
lstrcpyW
lstrcpyA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileAttributesA
GetOEMCP
GetCPInfo
GetProfileIntA
VirtualProtect
GetAtomNameA
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
InterlockedIncrement
GetCurrentDirectoryA
InterlockedDecrement
GetModuleFileNameW
GlobalFlags
WaitForMultipleObjects
ReleaseMutex
CreateMutexA
ReleaseSemaphore
CreateSemaphoreA
GlobalReAlloc
SystemTimeToFileTime
FileTimeToSystemTime
GetShortPathNameA
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DuplicateHandle
GetHandleInformation
lstrcmpW
GlobalGetAtomNameA
GlobalFindAtomA
GetVersionExA
ResumeThread
GetThreadPriority
SetThreadPriority
MulDiv
CopyFileA
GlobalSize
FormatMessageA
LocalFree
GlobalUnlock
GlobalAddAtomA
FreeResource
GlobalFree
CreateEventA
SuspendThread
GlobalLock
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetLocaleInfoA
ConvertDefaultLocale
EnumResourceLanguagesA
SetLastError
DeleteCriticalSection
ResetEvent
PulseEvent
SetEvent
WaitForSingleObject
GetVersion
CompareStringW
lstrcmpiA
GetStringTypeExA
CompareStringA
lstrlenA
lstrlenW
InterlockedExchange
GetLastError
CloseHandle
GetCurrentThreadId
GetProcAddress
LoadLibraryA
ExitProcess
CreateFileA
GetModuleHandleA
GetCurrentProcessId
GetCurrentProcess
SetUnhandledExceptionFilter
SetErrorMode
LeaveCriticalSection
SizeofResource
EnterCriticalSection
GetPrivateProfileStringA
InitializeCriticalSection
GetTickCount
CreateThread
Sleep
GetPrivateProfileIntA
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringA
FindResourceA
WritePrivateProfileStringA
LoadResource
LockResource
lstrcpynA
user32
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
OpenIcon
CloseWindow
LoadIconA
LoadCursorA
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
GetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
IsChild
GetTopWindow
FindWindowExA
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
SetCapture
GetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
UnhookWindowsHookEx
ClientToScreen
MapWindowPoints
GetClientRect
GetWindowRect
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
IsIconic
HiliteMenuItem
GetSystemMenu
DrawMenuBar
SetMenu
GetMenu
DragDetect
MessageBoxA
GetLastActivePopup
GetWindowThreadProcessId
RemoveMenu
IsMenu
GetMenuItemCount
GetSubMenu
GetMenuState
GetMenuStringA
AppendMenuA
InsertMenuA
GetMenuItemID
EndDialog
GetDesktopWindow
GetActiveWindow
SetActiveWindow
EnableWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
SetCursor
SetWindowPos
GetWindow
SetWindowContextHelpId
IsClipboardFormatAvailable
IsRectEmpty
RegisterClipboardFormatA
GetSystemMetrics
PostMessageA
GetCursorPos
GetParent
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
ValidateRect
GetMessageA
TranslateMessage
DispatchMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
SetMenuItemBitmaps
GetFocus
TabbedTextOutA
MapDialogRect
GetWindowTextLengthA
SetWindowPlacement
TrackPopupMenuEx
WinHelpA
SetScrollInfo
GetScrollInfo
ScrollWindow
PostQuitMessage
MapVirtualKeyA
SetPropA
GetClassNameA
GetClassLongA
GetDlgCtrlID
ScreenToClient
GetWindowTextA
IsWindowUnicode
GetMessageW
DispatchMessageW
SubtractRect
UnionRect
InflateRect
SetRect
PtInRect
wsprintfA
TrackPopupMenu
IsWindow
DrawIconEx
GetSysColor
PostThreadMessageA
CharUpperA
SendMessageA
GetKeyNameTextA
UnregisterClassA
ReuseDDElParam
TranslateAcceleratorA
GetDialogBaseUnits
DestroyIcon
MessageBeep
CopyAcceleratorTableA
CharNextA
InSendMessage
UnpackDDElParam
GetClipboardFormatNameA
WaitMessage
ReleaseCapture
SetRectEmpty
GetAsyncKeyState
LoadAcceleratorsA
MsgWaitForMultipleObjects
DestroyMenu
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectA
LoadMenuA
ModifyMenuA
InsertMenuItemA
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
DeleteMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringA
GetTabbedTextExtentA
DrawTextExA
DrawTextA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
DeferWindowPos
EqualRect
AdjustWindowRectEx
SetFocus
SendDlgItemMessageA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
RegisterWindowMessageA
CheckDlgButton
gdi32
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
DeleteObject
GetClipRgn
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
UnrealizeObject
CreatePenIndirect
CreateBrushIndirect
CreateFontIndirectA
CreateFontA
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateCompatibleBitmap
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateICA
CreateCompatibleDC
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
SelectObject
SetBkMode
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetGraphicsMode
GetWorldTransform
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
FloodFill
ExtFloodFill
TextOutA
GetTextExtentPoint32A
GetTextAlign
GetTextFaceA
GetTextMetricsA
GetTextCharacterExtra
GetCharWidthA
GetFontLanguageInfo
GetCharacterPlacementA
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCA
GetOutlineTextMetricsA
GetCharABCWidthsA
GetFontData
GetKerningPairsA
GetGlyphOutlineA
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatA
RestoreDC
DeleteDC
GetObjectA
GetCharWidthFloatA
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
RealizePalette
SelectPalette
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
GetDeviceCaps
CreateDCA
CopyMetaFileA
CreateBitmap
ExtTextOutA
SaveDC
CloseEnhMetaFile
CreateEnhMetaFileA
CloseMetaFile
CreateMetaFileA
GetNearestColor
DeleteMetaFile
EnumFontFamiliesExA
StretchDIBits
PlayEnhMetaFile
GdiComment
WidenPath
StrokePath
GetStockObject
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
GetJobA
advapi32
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegCreateKeyA
SetFileSecurityA
GetFileSecurityA
SetThreadToken
RevertToSelf
OpenThreadToken
RegCloseKey
shell32
DragQueryFileA
DragFinish
ExtractIconA
SHGetFileInfoA
DragAcceptFiles
ShellExecuteA
comctl32
InitCommonControlsEx
shlwapi
PathIsUNCA
PathFindFileNameA
PathRemoveExtensionA
PathFindExtensionA
PathStripToRootA
oledlg
ord3
ord7
ord6
ord5
ord9
ord4
ord8
ole32
OleCreateFromFile
OleCreateLinkToFile
OleCreate
OleLoad
OleSave
StgIsStorageILockBytes
GetHGlobalFromILockBytes
OleGetIconOfClass
WriteClassStm
OleSaveToStream
OleIsRunning
OleQueryCreateFromData
OleQueryLinkFromData
OleGetClipboard
OleRegEnumVerbs
OleRegGetMiscStatus
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CreateOleAdviseHolder
CreateDataAdviseHolder
OleSetMenuDescriptor
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleLockRunning
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoGetMalloc
CreateStreamOnHGlobal
GetClassFile
CreateFileMoniker
CreateGenericComposite
CreateItemMoniker
OleFlushClipboard
OleSetClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CoRevokeClassObject
CoRegisterClassObject
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleRun
CoCreateInstance
StringFromGUID2
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemFree
OleDuplicateData
CLSIDFromString
CLSIDFromProgID
OleCreateStaticFromData
DoDragDrop
OleTranslateAccelerator
IsAccelerator
CoUnmarshalInterface
CoMarshalInterface
CoReleaseMarshalData
GetRunningObjectTable
CoLockObjectExternal
CoDisconnectObject
oleaut32
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
SystemTimeToVariantTime
LoadTypeLi
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VariantCopy
SafeArrayCreate
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElemsize
SafeArrayGetDim
SysAllocString
SafeArrayDestroy
OleCreateFontIndirect
VarDateFromStr
VariantInit
VariantChangeType
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString
logdll
?WriteLogA@@YAHW4LOGLEVEL@@PBD11ZZ
dhnetsdk
ord162
ord7
ord49
ord3
ord161
ord121
ord1
ord50
ord6
ord204
ord214
ord228
ord90
ord213
ord73
ord2
ord72
ord127
ord5
ord74
ord56
ord181
ws2_32
WSACleanup
inet_ntoa
gethostbyname
gethostname
WSAStartup
odbc32
ord41
ord10
ord16
ord72
ord4
ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord19
ord46
ord12
ord68
ord5
ord43
ord2
ord1
ord23
ord50
ord45
ord51
ord15
ord9
ord14
ord3
ord11
ord18
ord13
ord61
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 884KB - Virtual size: 882KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ