c:\GTCOCalComp\InterWrite6X\Iwfhtr\Release\IWFHTR.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-14_2eab8af931b677a7b770b731f31b075d_icedid.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-14_2eab8af931b677a7b770b731f31b075d_icedid.exe
Resource
win10v2004-20240611-en
General
-
Target
2024-06-14_2eab8af931b677a7b770b731f31b075d_icedid
-
Size
308KB
-
MD5
2eab8af931b677a7b770b731f31b075d
-
SHA1
f6e1e36981b3c477fb9cf55f7a963b392e0818f8
-
SHA256
f0f0fef29f70be867b6ec367911ea21774d40493b17552d640f35f7006b3e524
-
SHA512
bf07c90c5c15687e879cd71f297b6b9f0bcb3a927811acf9cb41a627cdb41dd13522da18ae0abc8d0385e9526f0e16438dcafb110b8ea375ca11a3c2bf4f79ad
-
SSDEEP
6144:MinjfgkbrVae74VkBXrwnpJFb/MleAOLPx:MIjYUr4ecVkBXG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-14_2eab8af931b677a7b770b731f31b075d_icedid
Files
-
2024-06-14_2eab8af931b677a7b770b731f31b075d_icedid.exe windows:4 windows x86 arch:x86
699b8611f1dc064d1d4d7424f2328436
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
HeapSize
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
GetStdHandle
GetSystemInfo
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
VirtualAlloc
VirtualProtect
InterlockedExchange
GetSystemTimeAsFileTime
SetCurrentDirectoryA
SetEnvironmentVariableA
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetFileAttributesA
SetErrorMode
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
DeleteFileA
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedIncrement
GetCurrentThread
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
InterlockedDecrement
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpynA
WinExec
WritePrivateProfileStringA
GetPrivateProfileIntA
MulDiv
CreateMutexA
FormatMessageA
LocalFree
lstrlenA
lstrcmpiA
MultiByteToWideChar
CreateThread
WriteFile
CreateFileA
GetFileSize
ReadFile
CloseHandle
IsBadWritePtr
SetLastError
RaiseException
GetModuleFileNameA
Sleep
GetModuleHandleA
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesA
lstrcpyA
FreeLibrary
TerminateThread
DeleteCriticalSection
InitializeCriticalSection
GetLastError
LoadLibraryA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
UnhandledExceptionFilter
user32
LoadMenuA
DestroyMenu
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
SetMenu
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
ShowOwnedPopups
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
IsWindowEnabled
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
LoadIconA
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetKeyState
GetMenu
EqualRect
DeferWindowPos
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
IsIconic
GetWindowPlacement
GetWindow
wsprintfA
UnhookWindowsHookEx
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
ShowWindow
MoveWindow
MessageBeep
IsWindowVisible
LoadStringA
GetWindowLongA
GetSysColor
GetMessagePos
DrawEdge
FrameRect
PtInRect
UnregisterClassA
VkKeyScanA
MapVirtualKeyA
SetForegroundWindow
SetFocus
ReleaseCapture
GetGUIThreadInfo
GetCursorPos
GetCursor
GetForegroundWindow
SetCapture
GetCapture
ReleaseDC
GetDC
ScreenToClient
GetClientRect
GetWindowRect
KillTimer
SetTimer
IntersectRect
OffsetRect
SetRectEmpty
GetMenuItemInfoA
GetSysColorBrush
AdjustWindowRectEx
WindowFromPoint
FindWindowA
DestroyCursor
DrawFrameControl
IsWindow
LoadCursorA
SetCursor
InvalidateRect
UpdateWindow
InflateRect
SendMessageA
EnableWindow
GetParent
PostMessageA
TranslateAcceleratorA
GetSystemMetrics
SystemParametersInfoA
MessageBoxA
SetRect
IsRectEmpty
CopyRect
LoadImageA
FillRect
gdi32
CreatePatternBrush
CreateSolidBrush
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetBkMode
SetBkColor
RestoreDC
SaveDC
MoveToEx
LineTo
GetTextExtentPoint32A
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
Polygon
CreateCompatibleBitmap
CreateBitmap
CreateFontIndirectA
CreatePen
GetDeviceCaps
GetPixel
SetPixel
PolyBezier
Polyline
CreateDIBSection
DeleteObject
BitBlt
GetObjectA
StretchBlt
SelectObject
DeleteDC
CreateCompatibleDC
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
shell32
DragFinish
DragQueryFileA
comctl32
_TrackMouseEvent
ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy
shlwapi
PathFindExtensionA
PathFindFileNameA
oleaut32
VariantInit
VariantClear
VariantChangeType
gdiplus
GdipDrawImageRectRectI
GdiplusStartup
GdipCreateSolidFill
GdipSetPenLineCap197819
GdipSetPenLineJoin
GdipTranslateWorldTransform
GdipSetPageUnit
GdipSetPageScale
GdipDrawEllipseI
GdipDrawCurve
GdipDrawCurve3
GdipFillEllipseI
GdipCloneBrush
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipCreatePen1
GdipDeletePen
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdipFree
GdipSetImageAttributesRemapTable
GdipResetPath
GdipAddPathLine2
GdipAddPathBezier
GdipAddPathEllipse
GdipAddPathPolygon
GdipCreateFromHDC
GdipSetSmoothingMode
GdipResetWorldTransform
GdipDrawLineI
GdipDrawRectangleI
GdipDrawImageRectRect
GdipAlloc
GdipCloneImage
GdipDeleteBrush
GdipCreatePath
GdipDeletePath
GdipCreateLineBrushI
GdipScaleWorldTransform
GdipDrawPath
GdipFillPath
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ