u:\global\release\pdb\AdPM.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-26_169b1f31485f0103973555d92a17b8df_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-26_169b1f31485f0103973555d92a17b8df_icedid.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-26_169b1f31485f0103973555d92a17b8df_icedid
-
Size
602KB
-
MD5
169b1f31485f0103973555d92a17b8df
-
SHA1
bc28421db6ebe828041d9f06313056ff8fbcc52b
-
SHA256
cbc89fcc895d9aee6028ca0f4c899697901a882476aef81a92cc106a22c7bbd1
-
SHA512
f158e3929aabc17005af2fdca066004c8170cbec88b5bd061a72b3008749f655e153349d0f162ff27aef148108efbbe4cab367f8d9be714194b90474dd75c573
-
SSDEEP
12288:BO8oSyBu+/FNipnbfWdswjvrqFvhh72zS5:voSAu+//imWFz2i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-26_169b1f31485f0103973555d92a17b8df_icedid
Files
-
2024-05-26_169b1f31485f0103973555d92a17b8df_icedid.exe windows:4 windows x86 arch:x86
7603aedc622ebce64bd89e71f384173b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shlwapi
PathRemoveFileSpecA
PathFindFileNameA
PathStripToRootA
PathIsFileSpecA
PathAddExtensionA
PathMatchSpecA
PathIsDirectoryA
PathUnquoteSpacesA
PathStripPathA
PathRemoveBackslashA
PathFileExistsA
PathFindExtensionA
PathAppendA
PathIsUNCA
kernel32
GetFileTime
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
HeapReAlloc
ExitProcess
RtlUnwind
TerminateProcess
RaiseException
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetDriveTypeA
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
GetFileAttributesA
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleFileNameA
LoadLibraryA
GetLastError
FreeLibrary
lstrcpyA
lstrlenW
GetPrivateProfileStringA
lstrlenA
FormatMessageA
LocalFree
CreateDirectoryA
GlobalAlloc
GlobalLock
GlobalUnlock
MultiByteToWideChar
InterlockedDecrement
GetVersionExA
GetLocaleInfoA
MulDiv
CompareStringW
InterlockedExchange
lstrcmpiA
CompareStringA
GetVersion
GetProcAddress
GetACP
GetThreadLocale
EnumResourceLanguagesA
ConvertDefaultLocale
GetModuleHandleA
lstrcmpA
GlobalDeleteAtom
GetCurrentThreadId
GetCurrentThread
GlobalFree
FreeResource
lstrcpynA
GetTickCount
SetErrorMode
CreateFileA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetOEMCP
GetCPInfo
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GlobalFlags
InterlockedIncrement
GetCurrentDirectoryA
WritePrivateProfileStringA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcatA
lstrcmpW
SetLastError
CloseHandle
user32
LockWindowUpdate
RegisterClipboardFormatA
PostThreadMessageA
GetDCEx
WindowFromPoint
KillTimer
SetTimer
GetSysColorBrush
MessageBeep
GetNextDlgGroupItem
SetCapture
InvalidateRgn
CopyAcceleratorTableA
SetRect
CharNextA
SetParent
GetSystemMenu
DeleteMenu
IsRectEmpty
IsZoomed
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
DestroyMenu
GetMenuItemInfoA
InflateRect
InvalidateRect
DrawFocusRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
RegisterWindowMessageA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
IsChild
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessagePos
MapWindowPoints
TrackPopupMenu
GetMenu
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
RegisterClassA
UnregisterClassA
SetWindowPlacement
DefWindowProcA
CallWindowProcA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
PtInRect
GetMenuState
AppendMenuA
GetMenuItemID
GetMenuItemCount
SetCursor
SetWindowsHookExA
DestroyIcon
FindWindowA
SendMessageA
RedrawWindow
LoadAcceleratorsA
UpdateWindow
LoadIconA
TranslateAcceleratorA
PostQuitMessage
IsIconic
ShowOwnedPopups
SetForegroundWindow
EnableWindow
GetDC
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
PeekMessageA
ValidateRect
CopyRect
UnhookWindowsHookEx
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
GetWindowTextLengthA
GetWindowTextA
SetFocus
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MessageBoxA
ReleaseDC
GetWindowRect
OffsetRect
LoadImageA
GetClientRect
GetSystemMetrics
GetClassNameA
WinHelpA
GetCursorPos
ScreenToClient
GetParent
PostMessageA
GetKeyState
GetWindowLongA
GetFocus
LoadMenuA
GetSubMenu
RemoveMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetClassInfoA
CheckMenuItem
LoadCursorA
CharUpperA
wsprintfA
GetDlgItem
SetWindowPos
MapDialogRect
SetWindowContextHelpId
GetWindow
IsWindowEnabled
GetLastActivePopup
GetMessageTime
gdi32
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
GetWindowExtEx
CreateSolidBrush
CreateCompatibleBitmap
StretchDIBits
GetCharWidthA
CreateFontA
GetBkColor
GetTextColor
GetRgnBox
SetRectRgn
CombineRgn
GetMapMode
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetTextAlign
MoveToEx
LineTo
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
CreateDCA
PatBlt
CreateRectRgnIndirect
EndDoc
EndPage
StartPage
StartDocA
CreateFontIndirectA
GetObjectA
GetDeviceCaps
GetTextExtentPoint32A
GetTextMetricsA
GetClipBox
IntersectClipRect
comdlg32
GetFileTitleA
PrintDlgA
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
shell32
SHGetMalloc
ExtractIconExA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
DragFinish
DragQueryFileA
comctl32
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create
ord17
ImageList_Draw
ImageList_GetImageInfo
oledlg
ord8
ole32
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
StgCreateDocfileOnILockBytes
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoUninitialize
CoInitialize
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
oleaut32
VariantCopy
VariantInit
SafeArrayUnaccessData
SysAllocString
SysStringLen
SysAllocStringByteLen
VariantChangeType
SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect
SafeArrayAccessData
SysAllocStringLen
SysFreeString
VariantClear
oleacc
CreateStdAccessibleObject
LresultFromObject
Sections
.text Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dhripbhk Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 144KB - Virtual size: 144KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE