e:\LocalCVS\PJ06136\code\SPCA556Transcoding\Bin\TransMedia.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-10_2f16b5b4cd89ed77faab600d72f73e0e_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-10_2f16b5b4cd89ed77faab600d72f73e0e_icedid.exe
Resource
win10v2004-20240226-en
General
-
Target
2024-04-10_2f16b5b4cd89ed77faab600d72f73e0e_icedid
-
Size
1.2MB
-
MD5
2f16b5b4cd89ed77faab600d72f73e0e
-
SHA1
f08cc80fe4d9c047b8e86d0c2d84c9315d06a132
-
SHA256
a570c6e7868b323d34af4529f95281fc32b6c61cb69ade27c644f24687e944ab
-
SHA512
cc7d8b5e204a7094d47b4bc501710a1bef3716c09da4efd7a5cff4fe384c6676317a4513150686b0d725b0d361fbe32b565e9f84eb8b11a678c7e8f76c8d0032
-
SSDEEP
12288:gEqDAVBEe7hIdEhWX09astEuamkolT9KIWWSyFKyU:9BEe7hI21veAkWWWJFKyU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-10_2f16b5b4cd89ed77faab600d72f73e0e_icedid
Files
-
2024-04-10_2f16b5b4cd89ed77faab600d72f73e0e_icedid.exe windows:4 windows x86 arch:x86
3de46bb92d1c59926c5b26da247cefb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
transdll
DS_GetMediaTime
DS_Run
DS_HandleGraphEvent
FI_Convert
DS_MovieConvert
DS_GetMediaFormat
DS_Uninitialize
DS_CheckSoundDriver
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
kernel32
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
InterlockedIncrement
lstrlenA
SetErrorMode
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetDriveTypeW
RtlUnwind
HeapReAlloc
RaiseException
HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetCurrentDirectoryA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetDriveTypeA
CreateFileA
SetEnvironmentVariableA
GlobalHandle
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
FindResourceExW
GlobalGetAtomNameW
InterlockedDecrement
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
GetVersionExW
GetModuleHandleA
GetCurrentProcessId
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetThreadLocale
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
FormatMessageW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetVersionExA
VirtualProtect
LoadLibraryA
MulDiv
lstrlenW
lstrcpyW
FreeLibrary
GetProcAddress
GetModuleHandleW
LoadLibraryW
SetLastError
FileTimeToSystemTime
SystemTimeToFileTime
GetLocalTime
lstrcpynW
ReadFile
GetFileSize
GlobalReAlloc
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
WritePrivateProfileStringW
GetFullPathNameW
WideCharToMultiByte
MultiByteToWideChar
DeleteFileW
CreateFileW
LocalFree
LocalAlloc
GetSystemDirectoryW
Sleep
GetDiskFreeSpaceExW
SetCurrentDirectoryW
CloseHandle
GetLastError
CreateSemaphoreW
GetUserDefaultLangID
FindClose
FindNextFileW
GetPrivateProfileStringW
GetPrivateProfileIntW
FindFirstFileW
GetModuleFileNameW
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
user32
CharNextW
CopyAcceleratorTableW
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassW
RegisterClipboardFormatW
PostThreadMessageW
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
CreatePopupMenu
BringWindowToTop
SetMenu
TranslateAcceleratorW
SetRectEmpty
SystemParametersInfoW
DestroyMenu
InflateRect
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
FillRect
GetWindowThreadProcessId
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
ValidateRect
CharUpperW
SetWindowContextHelpId
PostQuitMessage
MoveWindow
IsDialogMessageW
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetMenu
GetMenuItemID
CreateWindowExW
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
DefWindowProcW
CallWindowProcW
SetWindowLongW
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetActiveWindow
MapDialogRect
SetWindowPos
GetAsyncKeyState
SetFocus
GetWindowLongW
GetDlgItem
IsWindowEnabled
SetWindowTextW
GetDlgCtrlID
GetMenuItemCount
SetMenuItemInfoW
GetMenuItemInfoW
EnumChildWindows
CheckMenuRadioItem
GetMenuStringW
GetKeyState
OffsetRect
DestroyIcon
UpdateWindow
GetSysColor
GetIconInfo
GetSysColorBrush
EqualRect
IsWindowVisible
LoadCursorW
GetFocus
LoadBitmapW
ReleaseDC
LoadImageW
CopyRect
SetRect
SetWindowRgn
PtInRect
ReleaseCapture
WindowFromPoint
ClientToScreen
SetCapture
GetCapture
GetParent
GetActiveWindow
DrawTextW
InvalidateRect
GetDC
GetSubMenu
LoadMenuW
GetCursorPos
RemovePropW
SetPropW
KillTimer
SetTimer
GetWindowRect
EnableMenuItem
DrawIcon
GetClientRect
GetSystemMetrics
GetSystemMenu
LoadIconW
GetLastActivePopup
SetForegroundWindow
ShowWindow
IsIconic
GetPropW
IsWindow
GetDesktopWindow
GetWindow
MessageBoxW
PostMessageW
EnableWindow
SendMessageW
RegisterClassW
UnregisterClassA
gdi32
ExtSelectClipRgn
CreatePatternBrush
CreatePen
CreateSolidBrush
ScaleViewportExtEx
GetMapMode
EnumFontFamiliesExW
GetTextColor
GetRgnBox
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
ScaleWindowExtEx
SetWindowExtEx
DeleteDC
CombineRgn
ExtCreateRegion
DeleteObject
CreateCompatibleBitmap
CreateDIBSection
BitBlt
SelectObject
CreateCompatibleDC
GetTextExtentPoint32W
CreateFontIndirectW
GetStockObject
PtVisible
GetWindowExtEx
GetViewportExtEx
GetBkColor
GetObjectW
MoveToEx
LineTo
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateICW
CreateDIBitmap
GetDeviceCaps
GetBitmapBits
SetPixel
CreateBitmapIndirect
StretchBlt
GetPixel
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
advapi32
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegOpenKeyExW
RegOpenKeyW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
shell32
SHCreateDirectoryExW
DragQueryFileW
DragFinish
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderW
SHGetPathFromIDListW
ExtractIconW
comctl32
InitCommonControlsEx
shlwapi
PathIsUNCW
PathFindFileNameW
PathStripToRootW
PathFindExtensionW
oledlg
OleUIBusyW
ole32
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
oleaut32
SysAllocString
OleCreateFontIndirect
VariantClear
SysStringLen
OleLoadPicture
SysAllocStringLen
VariantChangeType
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantInit
VariantCopy
Sections
.text Size: 456KB - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 640KB - Virtual size: 639KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ