Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
2024-03-26_a7591082d2009ec3c5618234761bfe0c_icedid.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2024-03-26_a7591082d2009ec3c5618234761bfe0c_icedid.exe
Resource
win10v2004-20231215-en
Target
2024-03-26_a7591082d2009ec3c5618234761bfe0c_icedid
Size
1.6MB
MD5
a7591082d2009ec3c5618234761bfe0c
SHA1
11c2c4bea59dae4bcf5e8b7743a1ea7d07055b36
SHA256
e88f70067b864d6f44b6cf72c4c51196d1a47d686630123b7893b59d11bcc93d
SHA512
12b77cd2ef8d4125a3da267647cfcbeab432ab8d392847a3d32ad72ee2b63853fce617ff21c0457dde42a6ccc17a94d838ece0996e3d3a3c54eae3dab6a45308
SSDEEP
24576:Ujl2nPjTPxVeZOeiVVCmBgt93g/Chm5xSMhbMXVERl1r8Vn9T+L89n:oKbTPxVe5cCm40kkAfTs89n
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
e:\PCRiLi\RenMin\1.0.2.5\Temp\Release\UserLogin.pdb
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetCPInfo
GetOEMCP
CreateFileA
GetProcessHeap
SetEnvironmentVariableA
VirtualFree
HeapCreate
GetStartupInfoA
GetCurrentDirectoryA
GetFullPathNameA
GetFileInformationByHandle
FindFirstFileA
GetDriveTypeA
ExpandEnvironmentStringsW
WaitForMultipleObjects
PeekNamedPipe
GetSystemDirectoryA
SleepEx
WriteConsoleW
GetACP
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
HeapSize
VirtualQuery
VirtualAlloc
ExitThread
ExitProcess
HeapReAlloc
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
RaiseException
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetStartupInfoW
SetErrorMode
GetFileSizeEx
FileTimeToLocalFileTime
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
MoveFileW
lstrlenA
GetFullPathNameW
GetFileTime
GetFileAttributesW
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
GlobalGetAtomNameW
GetModuleHandleA
GetThreadLocale
InterlockedIncrement
InterlockedDecrement
MulDiv
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
SetLastError
lstrcmpW
GetVersionExA
OpenFileMappingW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
AreFileApisANSI
GetModuleHandleW
CreateThread
GetSystemDirectoryW
GetVolumeInformationW
DeviceIoControl
ReleaseMutex
CreateMutexW
FindFirstFileW
FindNextFileW
FindClose
RemoveDirectoryW
GetSystemInfo
lstrcpyW
GetFileSize
ReadFile
FormatMessageW
LocalFree
GetTempPathW
MoveFileExW
DeleteFileW
CopyFileW
OpenProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetLastError
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetWindowsDirectoryW
GetTimeZoneInformation
GetTickCount
WideCharToMultiByte
CreateDirectoryW
GetLocalTime
SystemTimeToFileTime
FileTimeToSystemTime
GetEnvironmentVariableW
GetVersionExW
QueryPerformanceCounter
GetPrivateProfileStringW
QueryPerformanceFrequency
LoadResource
LockResource
SizeofResource
FindResourceW
MultiByteToWideChar
lstrlenW
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
GetPrivateProfileIntW
SetUnhandledExceptionFilter
VirtualProtect
WriteProcessMemory
GetProcAddress
GetModuleFileNameW
CreateFileW
WritePrivateProfileStringW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
CloseHandle
LoadLibraryW
FreeLibrary
Sleep
GetPrivateProfileStringA
GetConsoleOutputCP
GetCursorPos
ReleaseCapture
SetCursor
SetCapture
KillTimer
SetTimer
InvalidateRect
ClientToScreen
SetWindowRgn
DrawIcon
FillRect
IsRectEmpty
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextLengthW
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
SetWindowContextHelpId
TabbedTextOutW
GetTopWindow
UnhookWindowsHookEx
ShowWindow
EnableWindow
PostMessageW
SetFocus
GetMessageTime
GetMessagePos
PeekMessageW
DrawTextW
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
UpdateWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
GetClassInfoExW
IsDialogMessageW
SetWindowTextW
MapDialogRect
IsWindowEnabled
GetClassInfoW
RegisterClassW
SetRect
CopyAcceleratorTableW
GetDC
ReleaseDC
InvalidateRgn
CharNextW
GetWindowTextW
DrawTextExW
GrayStringW
GetWindowDC
FindWindowW
AdjustWindowRectEx
IsWindow
GetClientRect
PostQuitMessage
IsZoomed
DispatchMessageW
TranslateMessage
GetMessageW
RegisterClassExW
DefWindowProcW
LoadCursorW
LoadIconW
GetWindowRect
GetDesktopWindow
SystemParametersInfoW
CharLowerBuffW
CloseClipboard
GetSysColorBrush
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
BringWindowToTop
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
GetSystemMetrics
GetParent
GetMonitorInfoW
EnumDisplayMonitors
PtInRect
SetWindowLongW
BeginPaint
EndPaint
TranslateAcceleratorW
SetRectEmpty
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
GetActiveWindow
DestroyMenu
LoadMenuW
ReuseDDElParam
UnpackDDElParam
ValidateRect
ShowOwnedPopups
InflateRect
GetMenuItemInfoW
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
UnregisterClassW
RegisterClipboardFormatW
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
CharUpperW
MapWindowPoints
GetWindowLongW
CreateWindowExW
DestroyWindow
SetWindowPos
MoveWindow
GetWindow
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
GetMenu
CopyRect
CallWindowProcW
SendMessageW
GetDlgCtrlID
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
ScreenToClient
GetSysColor
ExtSelectClipRgn
CreatePatternBrush
CreateCompatibleBitmap
CreateFontIndirectW
GetMapMode
StretchDIBits
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
SetMapMode
SetStretchBltMode
SetBkMode
RestoreDC
SaveDC
GetTextColor
GetBkColor
GetDeviceCaps
GetStockObject
GetRgnBox
CreateRectRgnIndirect
Ellipse
LPtoDP
CreateEllipticRgn
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateDIBSection
CreateCompatibleDC
SelectObject
DeleteObject
DeleteDC
TextOutW
CreateSolidBrush
SetDIBitsToDevice
GetTextExtentPoint32W
AlphaBlend
GetFileTitleW
ClosePrinter
OpenPrinterW
DocumentPropertiesW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
CreateProcessAsUserW
DuplicateTokenEx
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
OpenProcessToken
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueW
ShellExecuteW
ShellExecuteExW
DragFinish
DragQueryFileW
SHGetSpecialFolderPathW
InitCommonControlsEx
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFileExistsW
PathFindExtensionW
OleUIBusyW
CoFreeUnusedLibraries
CoRevokeClassObject
OleIsCurrentClipboard
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
CreateStreamOnHGlobal
CoInitialize
OleInitialize
OleUninitialize
CoUninitialize
OleFlushClipboard
CoRegisterMessageFilter
SafeArrayCreateVector
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
OleCreateFontIndirect
SafeArrayDestroy
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysAllocString
SysFreeString
SafeArrayRedim
send
recvfrom
sendto
connect
WSASetLastError
getpeername
getsockname
WSAGetLastError
bind
select
socket
accept
ioctlsocket
htons
htonl
closesocket
gethostbyname
WSACleanup
WSAStartup
inet_addr
ntohs
recv
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?OnClick@WindowImplBase@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
??0WindowImplBase@DuiLib@@QAE@XZ
??1WindowImplBase@DuiLib@@UAE@XZ
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?Term@CPaintManagerUI@DuiLib@@SAXXZ
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
??1CDuiString@DuiLib@@QAE@XZ
??BCDuiString@DuiLib@@QBEPB_WXZ
??0CDuiString@DuiLib@@QAE@PB_WH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
?HandleMessage@CWindowWnd@DuiLib@@MAEJIIJ@Z
?TranslateMessage@CPaintManagerUI@DuiLib@@SA_NQAUtagMSG@@@Z
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?PostMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
GetAdaptersInfo
setsockopt
gethostbyaddr
getservbyport
listen
__WSAFDIsSet
ioctlsocket
getservbyname
gethostname
getsockopt
ord14
ord145
ord216
ord208
ord46
ord41
ord27
ord301
ord167
ord147
ord79
ord142
ord127
ord133
ord26
ord118
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ