E:\JG152014new0811A\Release\UVLasCut.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_00a730f31d33ac6ee346eef2de257ebb_icedid.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
2024-04-10_00a730f31d33ac6ee346eef2de257ebb_icedid.exe
Resource
win10v2004-20240319-en
General
-
Target
2024-04-10_00a730f31d33ac6ee346eef2de257ebb_icedid
-
Size
1.8MB
-
MD5
00a730f31d33ac6ee346eef2de257ebb
-
SHA1
a3e4fd53ad8e016d1a6bbb64d66a7dc4a86d4f75
-
SHA256
40d435560bb273aab2bf64a59822a1dda0d384d496fd4fcc0b753d27d221a778
-
SHA512
92773fd97b88acd0b8bc56ee909d91322f5686e9147d082a6a91743db92b6f54ad220e07d16b3f3525d2d9d2abe1bfdbaf793a8345a51dc96cea78ce3505bb0e
-
SSDEEP
49152:0zE3omETseQ0Ugota2AozYpi7p74j87qH4g1:0zE3oyootJ7p74j87m4g1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-10_00a730f31d33ac6ee346eef2de257ebb_icedid
Files
-
2024-04-10_00a730f31d33ac6ee346eef2de257ebb_icedid.exe windows:5 windows x86 arch:x86
2a47c5156ef26df5378c65a76f2e771b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
device
?InitDevice@@YAHHHH@Z
?ReleaseDevice@@YAHXZ
?g_pIUVIO@@3PAVIUVIO@@A
?g_pIScanner@@3PAVIScanner@@A
?LaserOff@CLaser@@QAE_NXZ
?g_pLaser@@3PAVCLaser@@A
?ScannerGetVel@IScanner@@QAEHAAN0@Z
?GetCurrentPosOrigin@IScanner@@QAEHAAN0@Z
?GetArea@IScanner@@QAENH@Z
?ScannerUpdateLaserPowerMode@IScanner@@QAEHHNN@Z
?ScannerUpdateLaserDelay@IScanner@@QAEHFFF@Z
?ScannerUpdateCorrectPara@IScanner@@QAEHNNNNFF@Z
?ScannerUpdateCorrectFile@IScanner@@QAEHPAD@Z
?ScannerUpdateDelayFile@IScanner@@QAEHPAD@Z
?g_pIMotor@@3PAVIMotor@@A
?ScannerUpdateScanDelay@IScanner@@QAEHNNN@Z
?ScannerUpdateVel@IScanner@@QAEHNN@Z
?ScannerUpdateEqu@IScanner@@QAEHNN@Z
?ScannerUpdateArea@IScanner@@QAEHNN@Z
?GetErrorMsg@CLaser@@QAEPADXZ
?GetFrequence@CLaser@@QAEHXZ
?GetDiodeHours@CLaser@@QAENXZ
?GetCurrent@CLaser@@QAENXZ
?GetShutterState@CLaser@@QAE_NXZ
?GetExternalState@CLaser@@QAE_NXZ
?GetQSwitchState@CLaser@@QAE_NXZ
?GetDiodeState@CLaser@@QAE_NXZ
?SetPower@CLaser@@QAE_NN@Z
?SetCurrent@CLaser@@QAEXN@Z
?SetFreq@CLaser@@QAEXI@Z
?CloseLaser@CLaser@@QAE_NAAN@Z
?OpenLaser@CLaser@@QAE_NNAAN@Z
?FreeDevice@CLaser@@QAE_NXZ
?InitDevice@CLaser@@QAE_NPAD@Z
?GetAxisState@IMotor@@QAEHXZ
?GetCurrentPos@IMotor@@QAEHAAN00@Z
?GetOrg@IMotor@@QAE_NH@Z
?GetOverLimit_@IMotor@@QAE_NH@Z
?GetOverLimit@IMotor@@QAE_NH@Z
?GetAlarm@IMotor@@QAE_NH@Z
?SetLimitSoft@IMotor@@QAEXHNN@Z
?GetLimitSoft@IMotor@@QAENH@Z
?GetLimitSoft_@IMotor@@QAENH@Z
?GetAxisVel@IMotor@@QAENH@Z
?GetAxisAcc@IMotor@@QAENH@Z
?GetCCDDevice@@YAPAVICCDDevice@@H@Z
?ScannerUpdateDelayMode@IScanner@@QAEHGNGN@Z
?g_pCCDDevice@@3PAVICCDDevice@@A
languagelib
ord2
ord1
opencv_core231
cvConvertScale
cvNormalize
cvMinMaxLoc
cvResetImageROI
cvSetImageROI
cvCreateImage
cvReleaseImageHeader
cvSetData
cvCreateImageHeader
cvReleaseImage
opencv_imgproc231
cvMatchTemplate
cvResize
cvCanny
cvSmooth
kernel32
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
SetFileTime
GetFileTime
GetTempFileNameW
GetDiskFreeSpaceW
FileTimeToSystemTime
SystemTimeToFileTime
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
SetErrorMode
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetFileSizeEx
GetStartupInfoW
CompareStringA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
CreateThread
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetTimeFormatA
GetDateFormatA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetProcessHeap
SetEnvironmentVariableA
GetDiskFreeSpaceA
GetFullPathNameA
FormatMessageA
GetTempPathW
GetTempPathA
LockFileEx
GetSystemTime
DeleteFileA
GetFileAttributesA
AreFileApisANSI
InterlockedCompareExchange
SizeofResource
LockResource
LoadResource
FindResourceW
Sleep
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
lstrlenW
WideCharToMultiByte
lstrlenA
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
GetModuleHandleW
CreateFileW
WriteFile
CloseHandle
WaitForSingleObject
InterlockedExchange
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
MulDiv
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiW
CreateFileA
lstrcpynW
GetTickCount
WinExec
GetThreadLocale
GetStringTypeExW
MoveFileW
GlobalGetAtomNameW
ResumeThread
GetModuleHandleA
GetCurrentProcessId
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
LoadLibraryW
FreeLibrary
CompareStringW
LoadLibraryA
lstrcmpW
GetProcAddress
GetVersionExA
FreeResource
GetLastError
SetLastError
FormatMessageW
LocalFree
InterlockedIncrement
InterlockedDecrement
SetEvent
SetCurrentDirectoryW
ReleaseMutex
CreateMutexW
OpenMutexW
CreateEventW
GetModuleFileNameW
GetModuleFileNameA
ReadFile
ClearCommError
PurgeComm
DeleteCriticalSection
InitializeCriticalSection
lstrcpyW
DeleteFileW
CopyFileW
GetFileAttributesW
TerminateProcess
user32
GetSystemMenu
IsZoomed
GetMenuItemInfoW
SystemParametersInfoW
DrawIcon
SetWindowRgn
RegisterClipboardFormatW
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
UnregisterClassW
PostThreadMessageW
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
DestroyIcon
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorW
TranslateMessage
ValidateRect
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetDlgItemInt
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
SetWindowsHookExW
CallNextHookEx
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetLastActivePopup
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
DeleteMenu
GetScrollRange
SetForegroundWindow
ShowScrollBar
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
DefWindowProcW
CallWindowProcW
GetMenu
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
SetFocus
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMenuState
AppendMenuW
GetMenuItemID
LoadMenuW
SetRect
GetForegroundWindow
UpdateWindow
wsprintfW
GetDCEx
GetWindowLongW
EndDeferWindowPos
BeginDeferWindowPos
SetWindowLongW
SetCursor
DrawMenuBar
GetSubMenu
ModifyMenuW
EnableMenuItem
GetMenuItemCount
LoadBitmapW
RedrawWindow
GetDC
SetWindowPos
GetTopWindow
GetDlgItem
EqualRect
WindowFromPoint
InflateRect
ClientToScreen
DispatchMessageW
ReleaseCapture
GetMessageW
SetCapture
GetParent
PostQuitMessage
LockWindowUpdate
CharUpperW
ReleaseDC
GetClassLongW
LoadIconW
TranslateMDISysAccel
DefFrameProcW
UnpackDDElParam
ReuseDDElParam
DestroyMenu
SetScrollRange
IsChild
IsWindow
DrawFrameControl
ScreenToClient
LoadCursorW
GetSysColorBrush
GetClientRect
SetParent
IsRectEmpty
IsWindowVisible
DrawIconEx
SetRectEmpty
GetFocus
GetCapture
PtInRect
GetKeyState
GetCursorPos
SendMessageW
GetWindow
FillRect
GetSysColor
CopyRect
InvalidateRect
OffsetRect
SetTimer
KillTimer
GetWindowRect
GetSystemMetrics
MessageBoxW
PostMessageW
EnableWindow
GetDlgCtrlID
gdi32
SetPixel
LineTo
MoveToEx
CreateBrushIndirect
CreateSolidBrush
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetROP2
SetMapMode
ExcludeClipRect
IntersectClipRect
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateFontIndirectW
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
GetBkColor
GetCharWidthW
GetTextMetricsW
CreateEllipticRgn
LPtoDP
Ellipse
GetRgnBox
DPtoLP
GetObjectW
PatBlt
AngleArc
DeleteObject
GetStockObject
CreatePen
GetDeviceCaps
GetTextColor
CreatePalette
StretchDIBits
SelectPalette
BitBlt
Rectangle
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontW
ExtTextOutW
GetTextExtentPoint32W
GetClipBox
SelectObject
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegDeleteValueW
RegCreateKeyW
RegCloseKey
RegSetValueW
RegQueryValueExW
RegOpenKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
GetFileSecurityW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
SetFileSecurityW
shell32
DragFinish
SHGetFileInfoW
ExtractIconW
DragQueryFileW
comctl32
_TrackMouseEvent
InitCommonControlsEx
shlwapi
PathFileExistsW
PathRemoveFileSpecW
PathFindExtensionW
PathRemoveExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
oledlg
OleUIBusyW
ole32
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitializeEx
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CoGetClassObject
CoRevokeClassObject
OleFlushClipboard
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
oleaut32
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
OleCreateFontIndirect
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysAllocString
SysStringLen
SysAllocStringByteLen
vcomp90
_vcomp_barrier
_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_reduction_r8
_vcomp_reduction_i4
_vcomp_set_num_threads
_vcomp_for_dynamic_next
_vcomp_for_dynamic_init
_vcomp_fork
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 275KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 190KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ