C:\Projects\loggersuite\processors\saf1000proc\Release\saf1000proc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-05_fef1d33b7347f495d936d33829729ab8_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-05_fef1d33b7347f495d936d33829729ab8_icedid.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-05_fef1d33b7347f495d936d33829729ab8_icedid
-
Size
3.2MB
-
MD5
fef1d33b7347f495d936d33829729ab8
-
SHA1
d1cf4abe0da213fa36e1fcd9a2ed2d3d9ab9d490
-
SHA256
9c8fe266f02b3483eadd427ccfd60a37a02f8a1746fb5274bbcfaba98265d687
-
SHA512
0c3753beff0c00c549ad508978c7bd4b920303a1bacdb1d8a29ae993f3a05448c15c8c26483b481d699cd38b2d5919c8c789a81e91d11144f5a2b8049481d23b
-
SSDEEP
98304:QwHnuGz+omV19Nb00LH/TUqVsRV5x+Ofs6Q4f9zvEeLyD+j:QwHnuybmV7ISsmod9zvEeLy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-05_fef1d33b7347f495d936d33829729ab8_icedid
Files
-
2024-06-05_fef1d33b7347f495d936d33829729ab8_icedid.exe windows:6 windows x86 arch:x86
03f112ffc2aa0548b87ad414cb7d355c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
WSACleanup
gethostbyname
ntohl
inet_ntoa
WSAStartup
gethostname
inet_addr
WSAWaitForMultipleEvents
WSASocketA
WSASendDisconnect
WSASend
WSARecv
WSAGetOverlappedResult
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSAConnect
WSACloseEvent
WSAAccept
htonl
mpr
WNetEnumResourceA
WNetCloseEnum
WNetOpenEnumA
kernel32
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetStringTypeW
GetStdHandle
ExitProcess
IsValidCodePage
QueryPerformanceCounter
QueryPerformanceFrequency
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
VirtualQuery
VirtualAlloc
GetSystemInfo
GetCommandLineW
GetCommandLineA
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
OutputDebugStringW
FindNextFileW
GetEnvironmentStringsW
InitializeSListHead
GetFileType
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
LocalUnlock
LocalLock
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
Sleep
SearchPathA
GetProfileIntA
GetSystemTimeAsFileTime
GetTickCount
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
SetErrorMode
SystemTimeToTzSpecificLocalTime
SetFileTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
FindResourceExW
GetCurrentDirectoryA
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
GetACP
GetAtomNameA
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
SystemTimeToFileTime
FileTimeToSystemTime
GetStringTypeExA
GetThreadLocale
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetVolumeInformationA
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
CreateFileA
VirtualProtect
GetCurrentProcessId
GetPrivateProfileIntA
lstrcmpA
GetModuleFileNameA
GetCurrentThread
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
EncodePointer
SuspendThread
SetThreadPriority
GetCurrentThreadId
FindResourceA
LoadLibraryW
GetModuleHandleW
GetModuleFileNameW
OutputDebugStringA
MultiByteToWideChar
CopyFileA
FormatMessageA
LocalFree
SetLastError
MulDiv
GetFileSize
GetTimeFormatA
GetDateFormatA
GetComputerNameA
GetLocalTime
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalAlloc
LeaveCriticalSection
EnterCriticalSection
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrcpyA
InitializeCriticalSectionEx
WaitForMultipleObjects
CreateEventA
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
GetStartupInfoA
GetProcAddress
GetModuleHandleA
CreateMutexA
ReleaseMutex
GetVersionExA
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
ResumeThread
TerminateThread
GetCurrentProcess
WaitForSingleObject
DuplicateHandle
SetFileAttributesW
CloseHandle
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
CreateFileW
WriteConsoleW
SetCurrentDirectoryA
CreateDirectoryA
FindNextFileA
GetFileInformationByHandle
RemoveDirectoryA
lstrlenA
GetFileAttributesExW
SetStdHandle
user32
DeleteMenu
CopyImage
LoadImageW
DestroyIcon
TrackMouseEvent
MapVirtualKeyA
GetKeyNameTextA
RealChildWindowFromPoint
GetDialogBaseUnits
LoadCursorA
GetSysColorBrush
GetTabbedTextExtentW
GetMenuItemInfoA
DestroyMenu
CharUpperA
MapDialogRect
GetAsyncKeyState
LoadBitmapA
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
ReleaseDC
GetDC
IsZoomed
SetRect
WindowFromPoint
ClientToScreen
GetWindowThreadProcessId
SetCursor
ShowOwnedPopups
PostQuitMessage
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
UnhookWindowsHookEx
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
EqualRect
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
RemovePropA
GetPropA
SetPropA
ShowScrollBar
BringWindowToTop
SetScrollRange
ScrollWindow
RedrawWindow
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetDlgCtrlID
EndDeferWindowPos
SetLayeredWindowAttributes
BeginDeferWindowPos
SetWindowPlacement
SetWindowPos
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
GetFocus
SendDlgItemMessageA
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
SetFocus
CallNextHookEx
SetWindowsHookExA
GetCursorPos
EnumDisplayMonitors
OpenClipboard
CloseClipboard
ReleaseCapture
LoadAcceleratorsA
SetClipboardData
EmptyClipboard
DrawStateA
ValidateRect
GetKeyState
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
GetDesktopWindow
GetWindowLongA
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
IsWindow
TranslateAcceleratorA
LoadMenuA
CreatePopupMenu
InsertMenuItemA
LoadImageA
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
SetParent
WaitMessage
SetCapture
LoadCursorW
GetMenuDefaultItem
GetNextDlgGroupItem
DrawFocusRect
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
GetScrollRange
SetClassLongA
SetWindowRgn
DrawEdge
DrawFrameControl
LoadMenuW
SetCursorPos
GetTabbedTextExtentA
DestroyCursor
GetWindowRgn
WindowFromDC
CreateMenu
InSendMessage
MonitorFromRect
SendNotifyMessageA
SendMessageA
EnableWindow
PostMessageA
IsWindowVisible
GetParent
InvalidateRect
CopyRect
LoadBitmapW
SetTimer
KillTimer
GetClientRect
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
GetSystemMenu
EnableMenuItem
AppendMenuA
DrawIcon
IntersectRect
OffsetRect
GetWindow
LoadIconW
SystemParametersInfoA
UnregisterClassA
FillRect
IsRectEmpty
PtInRect
InflateRect
GetSysColor
SetRectEmpty
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
RemoveMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
NotifyWinEvent
DrawMenuBar
EnumChildWindows
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffA
RegisterClipboardFormatA
ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
PostThreadMessageA
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
LockWindowUpdate
GetDCEx
UnionRect
FrameRect
DeferWindowPos
CopyIcon
gdi32
GetTextExtentPoint32A
GetTextMetricsA
DeleteObject
GetDeviceCaps
GetDIBits
GetPaletteEntries
PlgBlt
RealizePalette
SelectObject
SetDIBits
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateHalftonePalette
GetTextAlign
Rectangle
Ellipse
DPtoLP
CopyMetaFileA
CreateDCA
CreateBitmap
SetBkColor
SetTextColor
GetBkColor
CreateCompatibleBitmap
GetCharWidthA
StretchDIBits
CreateDIBPatternBrushPt
CreateHatchBrush
CreatePatternBrush
CreateRectRgn
Escape
ExcludeClipRect
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
CreateFontIndirectA
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
MoveToEx
TextOutA
ExtTextOutA
PolyBezierTo
PolylineTo
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
PatBlt
CombineRgn
GetMapMode
SetRectRgn
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetSystemPaletteEntries
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
GetRgnBox
OffsetRgn
GetCurrentObject
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CreateMetaFileA
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
LPtoDP
ExtCreatePen
CreateSolidBrush
SetMetaFileBitsEx
GetMetaFileBitsEx
DeleteDC
GetDCOrgEx
GetClipBox
CreatePen
CreateFontA
GetObjectA
CreateCompatibleDC
EnumMetaFile
SetViewportOrgEx
BitBlt
msimg32
AlphaBlend
TransparentBlt
winspool.drv
GetJobA
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
GetFileSecurityA
SetFileSecurityA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExW
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegCloseKey
GetUserNameA
shell32
SHBindToParent
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
DragQueryFileA
DragFinish
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteExA
SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
ShellExecuteA
SHGetDesktopFolder
shlwapi
PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
PathIsUNCA
PathStripToRootA
PathRemoveFileSpecW
StrFormatKBSizeA
StrRetToBufA
uxtheme
GetCurrentThemeName
GetThemeColor
DrawThemeText
DrawThemeParentBackground
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
CloseThemeData
OpenThemeData
IsAppThemed
GetThemeSysColor
ole32
CLSIDFromProgID
OleRegGetMiscStatus
OleRegEnumVerbs
StgCreateDocfileOnILockBytes
WriteClassStm
GetHGlobalFromILockBytes
CreateGenericComposite
DoDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateFileMoniker
CreateILockBytesOnHGlobal
StgIsStorageFile
StgOpenStorageOnILockBytes
CreateItemMoniker
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
OleRun
CreateDataAdviseHolder
StgOpenStorage
StgCreateDocfile
OleLockRunning
OleSetMenuDescriptor
PropVariantCopy
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CLSIDFromString
CoDisconnectObject
StringFromGUID2
CoInitializeEx
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CreateStreamOnHGlobal
CreateOleAdviseHolder
GetRunningObjectTable
OleIsRunning
CoGetMalloc
OleQueryLinkFromData
OleQueryCreateFromData
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoGetClassObject
CoRegisterClassObject
CoRegisterMessageFilter
oleaut32
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
SafeArrayDestroy
SysAllocString
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SafeArrayGetLBound
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VarDateFromStr
VariantTimeToSystemTime
VariantClear
SystemTimeToVariantTime
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
VariantInit
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetUBound
VarDecFromStr
VariantChangeType
SysReAllocStringLen
wsock32
WSAGetLastError
WSASetLastError
ntohs
htons
getsockname
getpeername
bind
closesocket
oledlg
ord8
gdiplus
GdipCreateBitmapFromFileICM
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromFile
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDrawImageI
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipSaveImageToStream
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 571KB - Virtual size: 571KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ