Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-26_5c96e7e61e4dbcfd20f2ba23c340b14f_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-26_5c96e7e61e4dbcfd20f2ba23c340b14f_icedid.exe
Resource
win10v2004-20240226-en
Target
2024-04-26_5c96e7e61e4dbcfd20f2ba23c340b14f_icedid
Size
11.9MB
MD5
5c96e7e61e4dbcfd20f2ba23c340b14f
SHA1
b39f06938f9d7b24bcae5848ad24cd22c1dcc237
SHA256
d5414e443f76961721f90987b1963694b215e35b61cec675b71bc527c412eea5
SHA512
4130f52a7eaf637cf2662612dc4eae16bc879be5b826d21766febc722c192fa6977cad1a334e500babef1cb1acaf36577d17bb9cdb380552c09bc2b097af97be
SSDEEP
196608:WlQcH3afM1L6V4gggygggDXgggCgggcggggggPgggCgggUXgggegggtggggtgggp:WhXgMgggygggDXgggCgggcggggggPggx
resource | yara_rule |
---|---|
sample | INDICATOR_SUSPICIOUS_Binary_References_Browsers |
resource | yara_rule |
---|---|
sample | INDICATOR_SUSPICIOUS_EXE_SQLQuery_ConfidentialDataStore |
resource | yara_rule |
---|---|
sample | INDICATOR_SUSPICIOUS_EXE_References_Confidential_Data_Store |
resource | yara_rule |
---|---|
sample | INDICATOR_SUSPICIOUS_EXE_References_Messaging_Clients |
resource | yara_rule |
---|---|
sample | INDICATOR_SUSPICIOUS_EXE_Referenfces_File_Transfer_Clients |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\projects\windows\XenArmorAllInOnePasswordRecoveryPro\Release\AllInOnePasswordRecoveryPro.pdb
GetEnvironmentStringsW
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
LCMapStringW
CompareStringW
GetStdHandle
SetEnvironmentVariableW
HeapQueryInformation
GetCommandLineW
VirtualQuery
VirtualAlloc
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
InterlockedPushEntrySList
RtlUnwind
QueryPerformanceFrequency
GetStringTypeW
RaiseException
FreeEnvironmentStringsW
WriteConsoleW
SetStdHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
GetLogicalDrives
Process32First
GetCurrentProcess
GetDriveTypeA
FindResourceA
GetModuleHandleA
GetSystemWindowsDirectoryA
CreateToolhelp32Snapshot
GetFileAttributesA
LoadLibraryA
GetVersionExA
LockResource
GlobalAlloc
Process32Next
CloseHandle
LoadResource
GetProcAddress
GlobalLock
VerSetConditionMask
WideCharToMultiByte
lstrcmpiA
VerifyVersionInfoW
CreateProcessA
GlobalUnlock
MultiByteToWideChar
lstrcpynA
FreeLibrary
GetModuleFileNameA
SizeofResource
FindResourceW
ReadFile
FindFirstFileA
FindNextFileA
InitializeCriticalSectionAndSpinCount
FindClose
GetVolumeInformationA
GetStartupInfoW
WaitForSingleObject
UnmapViewOfFile
OpenProcess
GetCommandLineA
Sleep
GetTempPathA
GetTickCount64
CopyFileA
CreateFileA
DeleteFileA
CreateThread
GetWindowsDirectoryA
GetLocalTime
CreateFileMappingA
LocalFree
GetFileSize
ExitProcess
GetComputerNameExA
MapViewOfFile
GetPrivateProfileStringA
GetFileAttributesExA
FileTimeToLocalFileTime
SystemTimeToFileTime
GetSystemTime
SetDllDirectoryA
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
CreateFileW
GetFileAttributesW
GetCurrentThreadId
HeapValidate
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
WaitForSingleObjectEx
DeleteFileW
GetSystemInfo
LoadLibraryW
HeapCompact
UnlockFile
LockFileEx
GetCurrentProcessId
GetSystemTimeAsFileTime
FormatMessageA
CreateFileMappingW
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
SetFileTime
GetCurrentDirectoryA
DuplicateHandle
GetFileType
CreateDirectoryA
DosDateTimeToFileTime
GlobalSize
GlobalFree
MulDiv
SetLastError
EncodePointer
GetSystemDirectoryW
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CompareStringA
SetEvent
CreateEventA
SetThreadPriority
SuspendThread
ResumeThread
GetCurrentThread
lstrcmpA
GetPrivateProfileIntA
WritePrivateProfileStringA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
GetOEMCP
GetCPInfo
FileTimeToSystemTime
GetThreadLocale
GetACP
lstrcpyA
VerifyVersionInfoA
FindResourceExW
SetErrorMode
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
SearchPathA
GetProfileIntA
GetTempFileNameA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
HeapFree
CopyImage
GetSysColorBrush
IntersectRect
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
GetSystemMetrics
MapDialogRect
SetWindowContextHelpId
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
GetWindowThreadProcessId
ShowOwnedPopups
PostQuitMessage
TranslateMessage
GetMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
CheckMenuItem
FillRect
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
MapVirtualKeyA
GetKeyNameTextA
IsDialogMessageA
SetWindowTextA
IsWindowEnabled
SendDlgItemMessageA
CheckDlgButton
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
GetAsyncKeyState
DeleteMenu
SetTimer
DefMDIChildProcA
UnregisterClassA
SetClipboardData
GetSysColor
EmptyClipboard
TrackPopupMenu
SetMenu
GetMenu
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
UnhookWindowsHookEx
RemoveMenu
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
InflateRect
PostMessageA
GetIconInfo
KillTimer
WaitMessage
LoadCursorW
CharUpperA
CharNextA
CopyAcceleratorTableA
InvalidateRgn
SetRect
IsRectEmpty
MessageBeep
TrackMouseEvent
LoadImageW
SetLayeredWindowAttributes
EnumDisplayMonitors
IsZoomed
SetWindowRgn
WindowFromPoint
OffsetRect
GetCapture
DestroyIcon
ClientToScreen
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
RealChildWindowFromPoint
CloseClipboard
OpenClipboard
EnableWindow
SendMessageA
LoadImageA
GetCursorPos
ReleaseDC
InvalidateRect
UpdateWindow
EnableMenuItem
GetClientRect
AppendMenuA
LoadIconA
LoadIconW
LoadBitmapW
RegisterHotKey
GetActiveWindow
GetSubMenu
SetMenuItemBitmaps
IsWindowVisible
GetDC
GetWindowRect
LoadMenuW
UnregisterHotKey
GetSystemMenu
ReleaseCapture
PtInRect
GetParent
SetCursor
SetCapture
SetWindowLongA
RedrawWindow
DefFrameProcA
LoadCursorA
DrawStateA
DrawEdge
GetNextDlgGroupItem
TranslateMDISysAccel
SubtractRect
SetRectEmpty
GetWindowLongA
CreateMenu
DestroyCursor
GetWindowRgn
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
GetDoubleClickTime
MapVirtualKeyExA
IsCharLowerA
GetComboBoxInfo
PostThreadMessageA
ModifyMenuA
CharUpperBuffA
LockWindowUpdate
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
GetKeyboardLayout
DrawIcon
FrameRect
CopyIcon
SetCursorPos
DrawFrameControl
SetParent
SetClassLongA
InvertRect
HideCaret
DrawIconEx
DrawFocusRect
RegisterClipboardFormatA
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
MonitorFromPoint
GetTextFaceA
SetPixelV
GetViewportOrgEx
GetWindowOrgEx
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
RoundRect
Rectangle
OffsetRgn
LPtoDP
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
SetDIBColorTable
SetPixel
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExA
CreateDIBSection
CreateRoundRectRgn
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
GetRgnBox
GetTextColor
GetBkColor
GetTextMetricsA
DPtoLP
SetRectRgn
GetMapMode
CombineRgn
GetTextExtentPoint32A
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutA
TextOutA
MoveToEx
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
PatBlt
CreateRectRgnIndirect
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCA
CopyMetaFileA
BitBlt
SelectObject
SetDIBitsToDevice
SetStretchBltMode
CreateFontIndirectA
CreateCompatibleBitmap
CreateFontA
CreateCompatibleDC
StretchBlt
GetStockObject
GetObjectA
DeleteObject
DeleteDC
TransparentBlt
AlphaBlend
ClosePrinter
OpenPrinterA
DocumentPropertiesA
CryptGetHashParam
CryptImportKey
CryptSetKeyParam
RegOpenKeyExA
OpenProcessToken
CryptDestroyHash
CryptHashData
CryptCreateHash
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RevertToSelf
CredEnumerateA
CredFree
CryptDeriveKey
ImpersonateLoggedOnUser
RegEnumValueA
RegEnumKeyExA
CryptDestroyKey
AdjustTokenPrivileges
CryptAcquireContextA
RegCloseKey
RegQueryValueExA
LookupPrivilegeValueA
GetUserNameA
CryptDecrypt
LookupAccountNameA
CryptReleaseContext
ShellExecuteA
SHGetFolderPathA
ord165
DragAcceptFiles
DragQueryFileA
SHAppBarMessage
SHGetDesktopFolder
DragFinish
SHGetSpecialFolderLocation
SHGetFileInfoA
SHGetPathFromIDListA
SHBrowseForFolderA
ImageList_ReplaceIcon
ImageList_Draw
_TrackMouseEvent
InitCommonControlsEx
PathFindFileNameA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
PathFindExtensionA
IsAppThemed
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetWindowTheme
GetThemePartSize
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
CoRegisterMessageFilter
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitializeEx
CLSIDFromProgID
CoCreateGuid
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoCreateInstance
CoUninitialize
CoInitialize
CoRevokeClassObject
VariantInit
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
VariantCopy
SysAllocStringLen
SafeArrayDestroy
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
SysAllocStringByteLen
SysFreeString
VariantChangeType
VariantClear
VariantTimeToSystemTime
ord8
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipDrawImageRectI
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipSetInterpolationMode
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
ExpandEnvironmentStringsForUserA
CryptUnprotectData
CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
PlaySoundA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ