D:\view\FS_New_Release_Emergency\FsCode_Vob\Rad_FB\src\Tools\AutoUpdate\bin\SfxUpdate.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-15_d9124473aeb867ebb8b999bb8acb2efb_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-15_d9124473aeb867ebb8b999bb8acb2efb_icedid.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-15_d9124473aeb867ebb8b999bb8acb2efb_icedid
-
Size
14.4MB
-
MD5
d9124473aeb867ebb8b999bb8acb2efb
-
SHA1
4233ca49be002003d6b53546d340aa76b65c9764
-
SHA256
948d0f896b0f37d326f5728a2aaa8a3d9163080e27b1d1194743dd962b4d22f9
-
SHA512
2fd9108c51b022856559077366ca5d4ae4084f7de51e888c8bac2640e77a651f0b0a8040bd435db31ffdf477ed1e1dae18c9438fc194469427ed1b730bf3c032
-
SSDEEP
393216:lHYvzrbs0uckeyNpLr4By2RXFAPZ5FPZ+Fp74:qHbkP7gyYXFAB5eFa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-15_d9124473aeb867ebb8b999bb8acb2efb_icedid
Files
-
2024-04-15_d9124473aeb867ebb8b999bb8acb2efb_icedid.exe windows:5 windows x86 arch:x86
dea2586a1494925575762f47f7cfca65
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFileExistsA
kernel32
GetFileAttributesA
GetFileSizeEx
GetFileTime
GetTickCount
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitThread
CreateThread
HeapAlloc
GetProcessHeap
CreateDirectoryA
GetSystemTimeAsFileTime
GetCommandLineA
GetStartupInfoA
ExitProcess
RtlUnwind
RaiseException
HeapSize
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
GetACP
IsValidCodePage
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
CompareStringW
SetEnvironmentVariableA
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
GetModuleHandleW
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GetOEMCP
GetCPInfo
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
FormatMessageA
LocalFree
GlobalFlags
WritePrivateProfileStringA
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GlobalAlloc
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
MultiByteToWideChar
lstrcmpW
GetVersionExA
lstrlenA
GetLastError
LoadLibraryA
FreeLibrary
SizeofResource
InterlockedDecrement
GetModuleFileNameW
GlobalFree
FindResourceA
LoadResource
LockResource
FreeResource
GetCurrentThreadId
ResumeThread
GlobalLock
GlobalUnlock
MulDiv
GetProcAddress
SetLastError
DeleteFileA
CloseHandle
DeleteCriticalSection
SetFileAttributesA
CreateEventA
InitializeCriticalSection
SetEvent
WaitForSingleObject
MoveFileExA
CreateToolhelp32Snapshot
GetCurrentDirectoryA
GetModuleHandleA
Process32NextW
GetModuleFileNameA
Process32FirstW
GetPrivateProfileStringA
EnterCriticalSection
SetCurrentDirectoryA
TerminateProcess
LeaveCriticalSection
Sleep
WideCharToMultiByte
GetPrivateProfileIntA
OpenProcess
GetCurrentProcess
user32
RegisterClipboardFormatA
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
CharUpperA
ReleaseCapture
SetCapture
DestroyMenu
UnregisterClassA
LoadCursorA
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
SetCursor
PostQuitMessage
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
PtInRect
GetMenu
EnableWindow
GetSystemMetrics
MessageBoxA
SendMessageA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
CopyRect
UnhookWindowsHookEx
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetWindowsHookExA
CallNextHookEx
GetClientRect
DrawIcon
LoadIconA
KillTimer
IsIconic
SetTimer
PostMessageA
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuA
GetParent
GetFocus
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
SetFocus
GetWindowLongA
GetWindow
GetWindowTextA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
GetSysColor
ValidateRect
GetCursorPos
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetPropA
gdi32
GetMapMode
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetDeviceCaps
GetStockObject
SaveDC
DeleteDC
ExtSelectClipRgn
GetRgnBox
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetObjectA
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
comctl32
InitCommonControlsEx
oledlg
ord8
ole32
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleIsCurrentClipboard
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleFlushClipboard
CoRegisterMessageFilter
oleaut32
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
Sections
.text Size: 330KB - Virtual size: 330KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ