C:\dev\winmerge-v2-jp\Build\Release\WinMergeU.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-28_26c5030760c1f014c9cd280c27993d13_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-28_26c5030760c1f014c9cd280c27993d13_icedid.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-02-28_26c5030760c1f014c9cd280c27993d13_icedid
-
Size
3.6MB
-
MD5
26c5030760c1f014c9cd280c27993d13
-
SHA1
1ec157ecbad8b1c1a657b334c57ec08e7cb77792
-
SHA256
4c7ab917c05e9c030f803eaa57a7056ed9b9a6bcfca2cc741a56c9a08e067ed2
-
SHA512
5e0c84692f660c7e264b7e4c011c760862efdb66333100f3d4e7e037802bee0d1de6cfceb67c967b43759daa572f2d7f6655dac593f7b6edd5747fa4eb7db593
-
SSDEEP
49152:s6FTVW1Pp9CXvelmIlxz1LG7EjnXrvWGfEuGbUPsh2nS05pR+XxLA:I/3lRlxzRhrzWG8IZ5pR+BLA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-02-28_26c5030760c1f014c9cd280c27993d13_icedid
Files
-
2024-02-28_26c5030760c1f014c9cd280c27993d13_icedid.exe windows:5 windows x86 arch:x86
4d2f12cba848b877e01da3ca48772ef1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
shlwapi
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
UrlUnescapeW
SHAutoComplete
PathIsDirectoryW
PathFindExtensionW
PathMatchSpecW
PathIsContentTypeW
StrCmpIW
SHStrDupW
PathCompactPathW
StrFormatByteSizeW
ord12
PathFileExistsW
PathFindFileNameW
StrTrimW
StrChrW
StrStrIW
imm32
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
kernel32
FlushFileBuffers
GetVolumeInformationW
LockFile
SetEndOfFile
SetFilePointer
UnlockFile
DuplicateHandle
GetStringTypeExW
GetDiskFreeSpaceW
ReplaceFileW
GetUserDefaultLCID
LocalAlloc
VirtualProtect
GetCurrentThread
CompareStringA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalReAlloc
GlobalFlags
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
SetErrorMode
FindResourceExW
GetCurrentDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetVersionExW
FreeLibraryAndExitThread
ExitThread
SetStdHandle
CreateProcessA
SystemTimeToTzSpecificLocalTime
ReadConsoleW
GetConsoleMode
VirtualQuery
VirtualAlloc
GetModuleHandleExW
ExitProcess
InterlockedPushEntrySList
RtlUnwind
WaitForMultipleObjects
CreatePipe
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GlobalGetAtomNameW
GetLongPathNameW
GetEnvironmentVariableW
CreateSemaphoreW
MoveFileExW
RemoveDirectoryW
GetCPInfo
LCMapStringW
SwitchToThread
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEnvironmentVariableA
SystemTimeToFileTime
SetFilePointerEx
GetConsoleCP
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
HeapQueryInformation
GetCommandLineA
SetFileAttributesW
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
QueryPerformanceFrequency
LockResource
GetProcAddress
GlobalSize
GlobalLock
GlobalUnlock
LoadResource
SizeofResource
LoadLibraryW
FindResourceW
MulDiv
lstrlenW
GlobalAlloc
GlobalFree
GetTickCount
GetACP
GetStringTypeW
FreeLibrary
GetPrivateProfileStringW
DeleteFileW
SearchPathW
GetThreadLocale
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
GetLastError
GetProfileIntW
GetCurrentProcessId
SetThreadPriority
CreateEventW
SetEvent
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
EncodePointer
lstrcmpA
GetModuleHandleA
OutputDebugStringA
ExpandEnvironmentStringsA
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetCompressedFileSizeW
IsValidCodePage
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
MoveFileW
GetDriveTypeW
lstrcmpiW
GetExitCodeThread
CreateThread
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
EnterCriticalSection
LeaveCriticalSection
GetFileAttributesExW
WritePrivateProfileStringW
GetPrivateProfileIntW
IsWow64Process
GetSystemWow64DirectoryW
GetCurrentProcess
GetFullPathNameW
CreateDirectoryW
ExpandEnvironmentStringsW
GetUserDefaultLangID
ResumeThread
SuspendThread
TerminateThread
WriteConsoleW
AttachConsole
FreeConsole
CreateMutexW
GetStdHandle
WaitForSingleObject
ReleaseMutex
GetCurrentThreadId
WideCharToMultiByte
lstrcpynW
FormatMessageW
LocalFree
GetNumberFormatW
GetDateFormatW
GetTimeFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
SetThreadLocale
ReadFile
GetFileSize
lstrcpyW
CopyFileW
GetWindowsDirectoryW
GetTempFileNameW
CreateProcessW
GetModuleFileNameW
LoadLibraryA
GetSystemDirectoryW
VerifyVersionInfoW
FindNextFileW
FindFirstFileW
FindFirstFileExW
FindClose
VerSetConditionMask
GetFileAttributesW
GlobalReAlloc
Sleep
ReleaseSemaphore
CreateFileW
GetTempPathW
CloseHandle
SetFileTime
WriteFile
GetShortPathNameW
GetLocaleInfoW
GetOEMCP
GetCommandLineW
GetModuleHandleW
GetSystemInfo
GlobalMemoryStatusEx
GetSystemDefaultLangID
SetLastError
InterlockedExchange
MultiByteToWideChar
FreeResource
InitializeCriticalSectionAndSpinCount
user32
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
MoveWindow
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
AdjustWindowRectEx
GetWindowTextLengthW
ShowScrollBar
GetScrollRange
SetScrollRange
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
SetActiveWindow
SetMenu
GetMenu
SetFocus
DeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
CreateWindowExW
GetClassInfoExW
DefWindowProcW
GetMessageTime
GetMessagePos
DispatchMessageW
RegisterWindowMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
UnhookWindowsHookEx
SetRectEmpty
SendDlgItemMessageA
GetClassNameW
UnregisterClassW
GetMonitorInfoW
MonitorFromPoint
GetScrollPos
IsRectEmpty
ClientToScreen
GetDCEx
EndDeferWindowPos
BeginDeferWindowPos
DestroyMenu
IsDialogMessageW
GetNextDlgTabItem
ChildWindowFromPointEx
IsChild
PostThreadMessageW
GetMessageW
MapDialogRect
GetIconInfo
GetLastActivePopup
FindWindowW
SetForegroundWindow
ShowWindow
GetUserObjectInformationW
GetThreadDesktop
DrawIconEx
GetTopWindow
DeleteMenu
GetMenuItemInfoW
SendDlgItemMessageW
IsWindowEnabled
GetClassLongW
EqualRect
GetSysColorBrush
TranslateMDISysAccel
GetSystemMenu
TrackMouseEvent
FindWindowExW
GetActiveWindow
CreateDialogIndirectParamW
IsMenu
GetClassInfoW
RegisterClassW
ReplyMessage
InflateRect
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetCapture
DrawIcon
SetWindowRgn
CharUpperW
UnionRect
PostQuitMessage
RemoveMenu
ShowOwnedPopups
RealChildWindowFromPoint
CopyAcceleratorTableW
LockWindowUpdate
EndDialog
GetWindow
GetWindowTextW
SetWindowTextW
GetMenuStringW
GetFocus
EnableMenuItem
TrackPopupMenu
CheckMenuItem
LoadMenuW
PeekMessageW
wsprintfA
SetParent
PtInRect
LoadImageW
FillRect
SetRect
DestroyIcon
PostMessageW
DrawMenuBar
LoadIconW
IsWindowVisible
GetWindowRect
GetParent
DrawFrameControl
CallWindowProcW
SetWindowPos
IsIconic
IsZoomed
TranslateMessage
GetWindowThreadProcessId
GetWindowDC
DestroyCursor
SetCursorPos
GetTabbedTextExtentW
BringWindowToTop
InsertMenuItemW
IsDlgButtonChecked
CharNextW
CharPrevW
GetKeyState
GetAsyncKeyState
EnableWindow
UpdateWindow
GetClientRect
MessageBoxW
CreateCaret
HideCaret
ShowCaret
SetCaretPos
wsprintfW
GetDesktopWindow
LoadBitmapW
GetDoubleClickTime
IsWindow
GetDlgItem
ReleaseCapture
KillTimer
LoadAcceleratorsW
TranslateAcceleratorW
GetDC
ReleaseDC
InvalidateRect
RedrawWindow
GetDlgCtrlID
EnableScrollBar
MessageBeep
SetCursor
GetCursorPos
GetCaretPos
ScreenToClient
GetSysColor
CopyRect
IntersectRect
UnpackDDElParam
ReuseDDElParam
WindowFromPoint
DefFrameProcW
FlashWindowEx
DefMDIChildProcW
OffsetRect
LoadCursorW
SystemParametersInfoW
OpenClipboard
CloseClipboard
SetClipboardData
DragDetect
GetClipboardData
RegisterClipboardFormatW
EmptyClipboard
IsClipboardFormatAvailable
SetCapture
SetTimer
SendMessageW
GetWindowLongW
GetSystemMetrics
DrawEdge
GetMenuState
CreateMenu
CreatePopupMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
ModifyMenuW
SetWindowLongW
MapWindowPoints
RemovePropW
GetPropW
SetPropW
gdi32
TextOutW
DPtoLP
LPtoDP
Polygon
SetBkMode
SetTextColor
CreateDCW
EnumFontFamiliesW
CopyMetaFileW
CreateBitmap
SetBkColor
CreatePatternBrush
CreateRectRgn
ExcludeClipRect
GetClipBox
GetCurrentPositionEx
IntersectClipRect
LineTo
RestoreDC
SaveDC
SelectClipRgn
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
Rectangle
StartDocW
MoveToEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
SetRectRgn
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetCharWidthW
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetWindowOrgEx
GetTextFaceW
CreateFontW
StretchDIBits
CreateEllipticRgn
EnumFontFamiliesExW
RectVisible
PtVisible
GetViewportExtEx
GetWindowExtEx
GetMapMode
Escape
CreateSolidBrush
GetTextMetricsW
ExtTextOutW
SetDIBColorTable
CreateDIBSection
SetBitmapBits
GetBitmapBits
DeleteDC
SetDIBits
PatBlt
GetPixel
GetDIBits
GetBkMode
Ellipse
GetObjectW
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
CreatePen
DeleteObject
GetBkColor
GetCharWidth32W
GetDeviceCaps
GetStockObject
GetTextColor
RoundRect
SelectObject
BitBlt
CreateRectRgnIndirect
GetTextExtentPoint32W
GetViewportOrgEx
msimg32
AlphaBlend
comdlg32
GetSaveFileNameW
GetOpenFileNameW
ChooseFontW
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
GetJobW
advapi32
SetFileSecurityW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegQueryValueExA
RegOpenKeyExA
RegSetValueW
RegQueryValueW
RegCloseKey
GetFileSecurityW
shell32
ExtractIconW
DragFinish
SHGetFileInfoW
SHGetDesktopFolder
SHGetMalloc
ShellExecuteExW
SHAddToRecentDocs
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW
SHParseDisplayName
SHCreateShellItem
SHFileOperationW
DragQueryFileW
ShellExecuteW
ord155
comctl32
ImageList_Draw
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_DrawIndirect
ImageList_Remove
ImageList_GetIcon
ImageList_Copy
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Add
ord17
ImageList_DrawEx
uxtheme
OpenThemeData
DrawThemeParentBackground
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeFont
GetThemeColor
CloseThemeData
IsThemeActive
GetThemeMargins
GetThemeInt
GetThemePartSize
DrawThemeBackground
ole32
CoRevokeClassObject
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoRegisterMessageFilter
CoFreeUnusedLibraries
CoCreateGuid
CoInitializeEx
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CoLockObjectExternal
OleGetClipboard
OleDuplicateData
CoTaskMemAlloc
StringFromCLSID
OleUninitialize
OleInitialize
CoUninitialize
CoInitialize
CoGetObject
CLSIDFromProgID
PropVariantClear
CreateStreamOnHGlobal
RevokeDragDrop
RegisterDragDrop
ReleaseStgMedium
OleRun
CoTaskMemFree
CoCreateInstance
oleaut32
SysAllocStringLen
VariantCopyInd
VariantChangeType
LoadTypeLi
VarBstrFromDate
SysStringLen
SafeArrayCreate
SafeArrayRedim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
SysReAllocStringLen
VariantClear
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
SysAllocString
oledlg
OleUIBusyW
gdiplus
GdipGetImageEncodersSize
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipSaveImageToStream
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipGetImageEncoders
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
wininet
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetOpenUrlW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 683KB - Virtual size: 683KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 950KB - Virtual size: 950KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ