c:\itech\Able2Extract\Debug\SonicPDF_UI_98.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-23_93fd91df3dc1157d858c3b5acde9272c_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-23_93fd91df3dc1157d858c3b5acde9272c_icedid.exe
Resource
win10v2004-20240412-en
General
-
Target
2024-04-23_93fd91df3dc1157d858c3b5acde9272c_icedid
-
Size
7.8MB
-
MD5
93fd91df3dc1157d858c3b5acde9272c
-
SHA1
1abde92d52eb16855e81ac2ba8bfd8999f76b688
-
SHA256
e7cc05cdd52a8d63a2e06e6f57087dee41716333a90c99524e018387ff24f83b
-
SHA512
c53dfcae2d734b7fa26b782ffe1e1104346ad1cd63575be70109564943be5aa7c47cccb3f2d42112a1a08b57289fba64bd8fadcce638cd42baaa41909bc8297d
-
SSDEEP
98304:3/ieW1nfUq/YrhFv9R0ezy3hobeJ8MYBi4ZJ5A5g95YPwvWvnKmF:vieWF/EhFv9ieOhCByeOhH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-23_93fd91df3dc1157d858c3b5acde9272c_icedid
Files
-
2024-04-23_93fd91df3dc1157d858c3b5acde9272c_icedid.exe windows:4 windows x86 arch:x86
539ab5f0b89b4c494a9410b7cfb5cd8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shfolder
SHGetFolderPathA
shlwapi
PathFindExtensionA
PathFindFileNameA
PathIsUNCA
PathStripToRootA
PathAppendA
StrRChrA
PathFileExistsA
PathRemoveExtensionA
comctl32
ord17
ord8
ImageList_SetImageCount
ImageList_Copy
ord13
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Write
ord14
ImageList_GetImageCount
ImageList_Add
ImageList_AddMasked
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Draw
ImageList_DrawEx
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_SetOverlayImage
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_DragShowNolock
ImageList_GetDragImage
ImageList_DragEnter
ImageList_DragLeave
DestroyPropertySheetPage
CreatePropertySheetPageA
PropertySheetA
kernel32
GetCurrentDirectoryA
LockResource
LoadResource
DeleteFileA
GetFullPathNameA
MulDiv
IsBadStringPtrA
lstrlenA
OutputDebugStringA
lstrcpyA
Sleep
LoadLibraryA
FreeLibrary
FindResourceA
GetTickCount
SetLastError
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GlobalAlloc
GlobalFree
lstrcpynA
GetModuleFileNameA
GetVersion
GetEnvironmentVariableA
CompareStringA
GetStringTypeExA
lstrcmpiA
GetLastError
GetSystemInfo
CloseHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetSystemDirectoryA
OpenProcess
GlobalMemoryStatus
lstrcatA
CreateProcessA
lstrcmpA
GetExitCodeProcess
GlobalUnlock
GlobalLock
GlobalSize
GetModuleHandleA
WinExec
OpenEventA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
PulseEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
CreateMutexA
ReleaseMutex
WaitForMultipleObjects
IsDBCSLeadByte
GetWindowsDirectoryA
FreeResource
SetThreadPriority
GetThreadPriority
ResumeThread
SuspendThread
GetLocaleInfoW
SetEnvironmentVariableA
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
GetDateFormatA
GetTimeFormatA
IsBadCodePtr
GetStringTypeW
GetStringTypeA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetHandleCount
SetUnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
HeapReAlloc
LCMapStringW
LCMapStringA
GetProcessHeap
HeapAlloc
HeapFree
SetConsoleCtrlHandler
FatalAppExitA
SetStdHandle
ExitThread
CreateThread
GetCommandLineA
GetStartupInfoA
VirtualQuery
VirtualAlloc
ExitProcess
TerminateProcess
GetFileType
FileTimeToLocalFileTime
FindNextFileA
HeapValidate
GetDriveTypeA
GetSystemTimeAsFileTime
GetStdHandle
DebugBreak
RtlUnwind
lstrcpynW
LocalLock
LocalUnlock
SetFileAttributesA
LocalFileTimeToFileTime
lstrcmpW
FindResourceExA
GetShortPathNameA
GetVolumeInformationA
MoveFileA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
DuplicateHandle
GetProfileIntA
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetOEMCP
GetCPInfo
SetErrorMode
GlobalFlags
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
GetFileAttributesA
CreateEventA
SetEvent
WaitForSingleObject
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
VirtualProtect
IsBadReadPtr
IsBadWritePtr
RaiseException
DeleteCriticalSection
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
SystemTimeToFileTime
FileTimeToSystemTime
InterlockedIncrement
InterlockedDecrement
CopyFileA
FormatMessageA
LocalFree
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SizeofResource
user32
GetDialogBaseUnits
RegisterClipboardFormatA
GetMessageA
TranslateMessage
GetAsyncKeyState
UnpackDDElParam
ReuseDDElParam
SetCursor
ReleaseCapture
LoadAcceleratorsA
DefMDIChildProcA
TranslateAcceleratorA
TranslateMDISysAccel
DefFrameProcA
MapVirtualKeyA
GetKeyNameTextA
PostQuitMessage
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectA
RemoveMenu
ModifyMenuA
InsertMenuItemA
InsertMenuA
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringA
GetTabbedTextExtentA
DrawTextExA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
TabbedTextOutA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ShowWindow
IsDialogMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageA
SendDlgItemMessageA
DispatchMessageA
AdjustWindowRectEx
EqualRect
ScrollWindow
GetScrollInfo
SetScrollInfo
WinHelpA
RegisterClassA
UnregisterClassA
TrackPopupMenuEx
SetWindowPlacement
GetWindowTextLengthA
GetKeyState
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
OpenIcon
CloseWindow
EndDeferWindowPos
DeferWindowPos
RedrawWindow
GetClipboardFormatNameA
BeginDeferWindowPos
GetFocus
GetSystemMetrics
EnumChildWindows
MsgWaitForMultipleObjects
SubtractRect
UnionRect
PtInRect
InflateRect
GetCursor
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
SetRect
DrawIconEx
CreateIconIndirect
CreateAcceleratorTableA
LoadImageA
DestroyCursor
PostThreadMessageA
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
MapDialogRect
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageA
GetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
GetLastActivePopup
GetTopWindow
FindWindowExA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
SetRectEmpty
IsClipboardFormatAvailable
MessageBeep
InSendMessage
MessageBoxA
PeekMessageA
GetWindowRect
IsChild
IsMenu
GetCursorPos
PostMessageA
GetClientRect
ScreenToClient
InvalidateRect
IsWindowVisible
GetWindow
GetClassNameA
SendMessageA
LoadIconA
InvertRect
SetWindowPos
LoadCursorA
DefWindowProcA
GetClassInfoA
GetDC
LoadBitmapA
DestroyIcon
DestroyMenu
TrackPopupMenu
SetForegroundWindow
GetSubMenu
LoadMenuA
CharLowerA
CharUpperA
GetSysColor
GetDesktopWindow
OffsetRect
CopyRect
BringWindowToTop
SetActiveWindow
GetParent
GetDlgItem
wsprintfA
SendMessageTimeoutA
FindWindowA
WaitForInputIdle
GetWindowThreadProcessId
SetFocus
GetWindowTextA
SetWindowTextA
EndDialog
ReleaseDC
GetIconInfo
DrawTextA
IsWindowEnabled
DestroyWindow
CopyAcceleratorTableA
WaitMessage
IsRectEmpty
MoveWindow
CreateDialogIndirectParamA
GetActiveWindow
DragDetect
IsWindow
GetMenu
SetMenu
DrawMenuBar
GetSystemMenu
HiliteMenuItem
IsIconic
IsZoomed
ArrangeIconicWindows
SetWindowRgn
GetWindowRgn
MapWindowPoints
ClientToScreen
BeginPaint
EndPaint
GetWindowDC
UpdateWindow
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
SetCapture
GetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
LockWindowUpdate
GetDCEx
ShowOwnedPopups
ValidateRgn
ValidateRect
InvalidateRgn
GetUpdateRgn
GetUpdateRect
gdi32
CloseEnhMetaFile
CreateEnhMetaFileA
CloseMetaFile
CreateMetaFileA
GetDCOrgEx
CreateRectRgn
CombineRgn
CreateFontIndirectA
SetTextColor
StretchDIBits
RectVisible
CreateCompatibleBitmap
CreateBitmap
SetBkColor
StretchBlt
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
SetDIBitsToDevice
DeleteObject
GetObjectA
RealizePalette
GetDIBits
CreateDIBSection
CreateDIBitmap
SelectObject
Rectangle
BitBlt
EnumFontFamiliesExA
PatBlt
CreateCompatibleDC
DeleteDC
SetBkMode
GetStockObject
FrameRgn
InvertRgn
PaintRgn
PtVisible
GetCurrentPositionEx
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
RoundRect
GetPixel
SetPixel
FloodFill
ExtFloodFill
TextOutA
GetTextExtentPoint32A
GetTextAlign
GetTextFaceA
GetTextMetricsA
GetTextCharacterExtra
GetCharWidthA
GetFontLanguageInfo
GetCharacterPlacementA
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCA
GetOutlineTextMetricsA
GetCharABCWidthsA
GetFontData
GetKerningPairsA
RectInRegion
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
ExtTextOutA
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatA
GetCharWidthFloatA
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
SaveDC
RestoreDC
SelectPalette
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
CreateDCA
CreateICA
GetDeviceCaps
GetBrushOrgEx
GetTextCharset
EnumFontFamiliesA
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
PlayMetaFileRecord
EnumMetaFile
UnrealizeObject
GetObjectType
CreatePen
CreatePenIndirect
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateBrushIndirect
CreatePatternBrush
CreateDIBPatternBrushPt
CreateFontA
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
EqualRgn
PlayMetaFile
CopyMetaFileA
DeleteMetaFile
SetBrushOrgEx
EnumObjects
GetNearestColor
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetViewportOrgEx
FillRgn
GetRgnBox
AngleArc
PtInRegion
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
GetGlyphOutlineA
OffsetRgn
comdlg32
CommDlgExtendedError
PrintDlgA
PageSetupDlgA
FindTextA
ReplaceTextA
ChooseColorA
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
DocumentPropertiesA
GetJobA
AbortPrinter
ord202
ord201
ClosePrinter
EnumJobsA
OpenPrinterA
ReadPrinter
EndDocPrinter
WritePrinter
StartDocPrinterA
advapi32
GetFileSecurityA
SetFileSecurityA
RegEnumKeyA
RegQueryValueA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA
RegEnumKeyExA
GetUserNameA
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
EqualSid
FreeSid
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryInfoKeyA
SetThreadToken
RevertToSelf
OpenThreadToken
RegCreateKeyA
shell32
ShellExecuteA
Shell_NotifyIconA
ShellExecuteExA
DragAcceptFiles
DragFinish
DragQueryFileA
SHGetFileInfoA
ExtractIconA
oledlg
ord4
ord9
ord5
ord6
ord7
ord3
ord8
ole32
StgCreateDocfileOnILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleLockRunning
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoGetMalloc
CreateStreamOnHGlobal
GetClassFile
CreateFileMoniker
CreateGenericComposite
CreateItemMoniker
OleFlushClipboard
OleSetClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleRun
CLSIDFromString
StringFromGUID2
CoDisconnectObject
ReleaseStgMedium
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CreateBindCtx
CoTaskMemAlloc
OleDuplicateData
CLSIDFromProgID
CoCreateInstance
StgOpenStorageOnILockBytes
StgIsStorageILockBytes
GetHGlobalFromILockBytes
OleGetIconOfClass
WriteClassStm
OleSaveToStream
OleQueryCreateFromData
OleQueryLinkFromData
OleGetClipboard
OleSetMenuDescriptor
DoDragDrop
OleRegEnumVerbs
OleRegGetMiscStatus
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CreateOleAdviseHolder
CreateDataAdviseHolder
OleTranslateAccelerator
IsAccelerator
GetRunningObjectTable
CoLockObjectExternal
CoReleaseMarshalData
CoMarshalInterface
CoUnmarshalInterface
CreateDataCache
RegisterDragDrop
RevokeDragDrop
ReadClassStm
OleLoadFromStream
CreateILockBytesOnHGlobal
OleIsRunning
oleaut32
OleTranslateColor
VarDateFromUdate
SystemTimeToVariantTime
VarUdateFromDate
VariantTimeToSystemTime
DosDateTimeToVariantTime
LoadTypeLi
VarBstrFromDate
VarDateFromStr
VarDecFromStr
VarBstrFromDec
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VariantCopy
SafeArrayCreate
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
OleCreatePropertyFrame
OleLoadPicture
OleCreateFontIndirect
OleCreatePictureIndirect
SysFreeString
SysAllocString
VariantInit
VariantClear
GetActiveObject
SysAllocStringLen
VariantChangeType
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayCopy
ws2_32
WSACleanup
WSAStartup
gdiplus
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipCreateMatrix
GdipCreateMatrix2
GdipDeleteMatrix
GdipGetMatrixElements
GdipSetMatrixElements
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreatePen1
GdipDeletePen
GdipSetPenLineCap197819
GdipSetPenLineJoin
GdipSetPenMiterLimit
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipCreatePath
GdipDeletePath
GdipResetPath
GdipBitmapSetPixel
GdipSetPathFillMode
GdipStartPathFigure
GdipClosePathFigure
GdipAddPathLine
GdipAddPathLineI
GdipAddPathBezier
GdipFlattenPath
GdipGetPointCount
GdipGetPathTypes
GdipGetPathPoints
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetCompositingMode
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipSetWorldTransform
GdipResetWorldTransform
GdipMultiplyWorldTransform
GdipGetWorldTransform
GdipDrawLineI
GdipDrawPath
GdipFillPath
GdipDrawString
GdipDrawImageRectRectI
GdipSetClipPath
GdipSetClipRegion
GdipResetClip
GdipGetClip
GdipCreateRegionRectI
GdipDeleteRegion
GdipSetInfinite
GdipCombineRegionRegion
GdipCreateFont
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipDeleteFont
GdipGetImageWidth
GdipGetImageHeight
GdipCreateRegion
GdipCreateBitmapFromGraphics
GdiplusShutdown
GdipImageRotateFlip
GdipDrawImageRectI
GdipCreateHBITMAPFromBitmap
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipAlloc
GdipFree
GdipGetPathFillMode
GdiplusStartup
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
winmm
PlaySoundA
urlmon
CreateURLMoniker
CreateAsyncBindCtx
RegisterBindStatusCallback
IsAsyncMoniker
Exports
Exports
j2k_decode
j2k_destroy
j2k_encode
Sections
.text Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 788KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ