D:\GIT\BastyaMAX\Debug\BastyaMAX.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-14_d334e5f869058188db095e3d92766298_icedid.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-06-14_d334e5f869058188db095e3d92766298_icedid.exe
Resource
win10v2004-20240611-en
General
-
Target
2024-06-14_d334e5f869058188db095e3d92766298_icedid
-
Size
19.7MB
-
MD5
d334e5f869058188db095e3d92766298
-
SHA1
fc1210e26e9d74e9a489fec9ee70deced892abed
-
SHA256
5060cd7e50012f775259bf073e14b7e43615a57ac3e6a98f9583a7310711b7c3
-
SHA512
f0b1a712a5b141fdbb5a807d311dbf7def97453440ae8ab4584e1b847f0aa9e827ff6095edf4aa19776a8d512f66ee4ce9365c020dcee4ec9ed7fcf2247c52b4
-
SSDEEP
196608:s0JBl+Sv6p5Bt+I3knM0/NMqe4APtG6QXCpeJ:s8rd6LDmNMqHstGPCS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-14_d334e5f869058188db095e3d92766298_icedid
Files
-
2024-06-14_d334e5f869058188db095e3d92766298_icedid.exe windows:5 windows x86 arch:x86
c8a3df60af4fd3d8b211b7ce07a9146f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FormatMessageW
SwitchToThread
CompareStringW
LCMapStringW
GetStringTypeW
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
GetStdHandle
GetFileType
GetModuleHandleExW
WriteConsoleW
ExitProcess
DeleteFileW
GetCommandLineA
GetCommandLineW
HeapValidate
GetSystemInfo
GetDriveTypeW
GetFullPathNameW
GetConsoleCP
GetConsoleMode
CreateFileW
VirtualAlloc
CreateThread
ExitThread
FreeLibraryAndExitThread
SetStdHandle
HeapQueryInformation
QueryPerformanceFrequency
GetTimeZoneInformation
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
SetFilePointerEx
ReadConsoleW
SetCurrentDirectoryW
GetCurrentDirectoryW
FindFirstFileExA
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
InitializeSListHead
OutputDebugStringW
GetStartupInfoW
VirtualQuery
CreateEventW
WaitForSingleObjectEx
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
CreateSemaphoreA
WaitForMultipleObjects
CreateMutexA
ReleaseMutex
ReleaseSemaphore
Sleep
GetTickCount
PulseEvent
ResetEvent
SearchPathA
GetWindowsDirectoryA
FindResourceExW
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
GetTempPathA
SetFileTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetACP
LocalUnlock
LocalLock
GetCPInfo
GetOEMCP
VirtualProtect
GetProfileIntA
SetErrorMode
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryA
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
QueryPerformanceCounter
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetAtomNameA
VerifyVersionInfoA
VerSetConditionMask
SystemTimeToFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileA
FileTimeToLocalFileTime
GetStringTypeExA
GetThreadLocale
GetVolumeInformationA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetCurrentProcess
GetHandleInformation
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
DeleteFileA
CreateFileA
GetCurrentProcessId
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateEventA
WaitForSingleObject
SetEvent
CloseHandle
ResumeThread
SuspendThread
GetThreadPriority
SetThreadPriority
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GetSystemDirectoryW
EncodePointer
LoadLibraryA
CopyFileA
FormatMessageA
LocalFree
GlobalFree
GlobalUnlock
GlobalSize
CompareStringA
lstrcmpA
GlobalDeleteAtom
GlobalLock
GlobalAlloc
LoadLibraryW
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeLibrary
GetCurrentThreadId
GetCurrentThread
OutputDebugStringA
GetVersionExA
FindFirstFileA
GetFileAttributesA
FindClose
lstrlenA
lstrcpyA
GetLocaleInfoA
FindResourceA
FreeResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DecodePointer
MulDiv
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
SizeofResource
LoadResource
SetLastError
GetLastError
LockResource
GetSystemTimeAsFileTime
TlsSetValue
SetEnvironmentVariableW
user32
HideCaret
CreateCaret
GetWindowContextHelpId
SetWindowContextHelpId
EnableScrollBar
ShowScrollBar
LockWindowUpdate
RedrawWindow
ValidateRgn
InvalidateRgn
ValidateRect
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRgn
GetUpdateRect
GetWindowDC
GetDCEx
SetForegroundWindow
GetForegroundWindow
UpdateWindow
DragDetect
GetSystemMenu
DrawMenuBar
HiliteMenuItem
KillTimer
SetTimer
SetCapture
GetOpenClipboardWindow
ChangeClipboardChain
GetClipboardViewer
SetClipboardViewer
GetClipboardOwner
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
CloseWindow
OpenIcon
ShowOwnedPopups
FlashWindow
PostThreadMessageA
SendNotifyMessageA
DrawAnimatedRects
DrawCaption
IsDialogMessageA
ScrollWindowEx
IsWindowEnabled
SendDlgItemMessageA
IsDlgButtonChecked
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetTopWindow
GetClassNameA
GetParent
GetClassLongA
MapWindowPoints
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetWindowRect
GetClientRect
RemovePropA
GetPropA
SetPropA
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
EndPaint
BeginPaint
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
DispatchMessageA
ShowCaret
GetMenuCheckMarkDimensions
LoadBitmapW
LoadBitmapA
CheckMenuRadioItem
InvertRect
FrameRect
DrawFocusRect
GetSysColorBrush
GetMenuContextHelpId
SetMenuContextHelpId
ScrollDC
ExcludeUpdateRgn
WindowFromDC
GetTabbedTextExtentA
DrawStateA
GrayStringA
DrawTextExA
DrawTextA
DrawIcon
GetLastActivePopup
LoadCursorW
DlgDirListA
DlgDirSelectExA
GetTabbedTextExtentW
LoadAcceleratorsA
TranslateAcceleratorA
GetSysColor
SendMessageA
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuItemA
SetMenuItemBitmaps
DeleteMenu
ModifyMenuA
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuIndirectA
LoadMenuW
DrawFrameControl
DrawEdge
MapDialogRect
DlgDirListComboBoxA
DlgDirSelectComboBoxExA
ArrangeIconicWindows
NotifyWinEvent
CreateDialogIndirectParamA
EndDialog
GetMessageA
TranslateMessage
GetWindowThreadProcessId
SystemParametersInfoA
GetKeyNameTextA
MapVirtualKeyA
CharUpperA
SetRectEmpty
IsRectEmpty
TabbedTextOutA
RemoveMenu
SetCaretPos
GetCaretPos
ClientToScreen
WindowFromPoint
ChildWindowFromPoint
ChildWindowFromPointEx
GetDesktopWindow
SetParent
FindWindowA
EqualRect
PeekMessageA
PostQuitMessage
GetKeyState
GetWindowLongA
SetWindowLongA
UnregisterClassA
CopyRect
SetCursor
LoadCursorA
GetDlgItem
CheckDlgButton
EnableWindow
GetActiveWindow
GetSystemMetrics
CheckRadioButton
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
IsWindow
MessageBeep
PostMessageA
SetLayeredWindowAttributes
LoadMenuA
DestroyMenu
GetSubMenu
TrackPopupMenuEx
GetDC
ReleaseDC
FillRect
InflateRect
OffsetRect
DestroyCursor
DestroyIcon
LoadImageA
CreateIconIndirect
GetIconInfo
ReleaseCapture
GetCursorPos
PtInRect
GetFocus
IsMenu
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
GetComboBoxInfo
MsgWaitForMultipleObjectsEx
GetDoubleClickTime
InSendMessage
RegisterWindowMessageA
FindWindowExA
SubtractRect
MapVirtualKeyExA
IsCharLowerA
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
MonitorFromRect
CopyIcon
CharUpperBuffA
SetCursorPos
UpdateLayeredWindow
UnionRect
SetClassLongA
RegisterClipboardFormatA
EnumChildWindows
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
GetKeyboardState
GetKeyboardLayout
TrackMouseEvent
LoadImageW
EmptyClipboard
SetClipboardData
CloseClipboard
MonitorFromPoint
ReuseDDElParam
GetMenuBarInfo
GetDialogBaseUnits
IsClipboardFormatAvailable
UnpackDDElParam
GetClipboardFormatNameA
GetAsyncKeyState
SetRect
LoadAcceleratorsW
RealChildWindowFromPoint
WaitMessage
IntersectRect
CopyImage
DrawIconEx
EnumDisplayMonitors
gdi32
CopyMetaFileA
CloseMetaFile
CreateMetaFileA
CloseEnhMetaFile
CreateEnhMetaFileA
ExtTextOutA
AnimatePalette
Arc
Chord
CombineRgn
CreateBitmapIndirect
CreateDiscardableBitmap
CreateDIBPatternBrushPt
CreateEllipticRgn
CreateFontIndirectA
CreateFontA
CreateHatchBrush
CreateICA
CreatePalette
CreatePen
CreatePenIndirect
CreatePolyPolygonRgn
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
DrawEscape
Ellipse
EnumObjects
EqualRgn
Escape
ExtEscape
ExtCreateRegion
ExtFloodFill
FillRgn
FloodFill
FrameRgn
GetROP2
GetAspectRatioFilterEx
GetBkColor
GetBkMode
GetBitmapBits
GetBitmapDimensionEx
GetBoundsRect
GetBrushOrgEx
GetCharWidthA
GetCharWidthFloatA
GetCharABCWidthsA
GetCharABCWidthsFloatA
GetCurrentObject
GetCurrentPositionEx
GetFontData
GetGlyphOutlineA
GetGraphicsMode
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetOutlineTextMetricsA
GetPaletteEntries
GetPolyFillMode
GetRegionData
GetRgnBox
GetStretchBltMode
GetTextCharacterExtra
GetTextAlign
GetTextColor
GetFontLanguageInfo
GetCharacterPlacementA
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
InvertRgn
MaskBlt
PlgBlt
OffsetRgn
PatBlt
Pie
PaintRgn
PolyPolygon
PtInRegion
PtVisible
RectInRegion
RectVisible
Rectangle
ResetDCA
RealizePalette
RoundRect
ResizePalette
SetBitmapBits
SetBoundsRect
SetPaletteEntries
SetPixelV
GetDeviceCaps
CreateSolidBrush
UpdateColors
PlayEnhMetaFile
GdiComment
GetTextMetricsA
AngleArc
PolyPolyline
GetWorldTransform
GetColorAdjustment
CreateHalftonePalette
StartDocA
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetPath
PathToRegion
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
ExtCreatePen
GetMiterLimit
GetArcDirection
TextOutA
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
PolyBezier
SetBitmapDimensionEx
SetBrushOrgEx
GetTextFaceA
GetKerningPairsA
UnrealizeObject
ExcludeClipRect
GetClipBox
GetClipRgn
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
StretchDIBits
GetDIBits
CreateDIBSection
SetDIBColorTable
EnumFontFamiliesExA
GetSystemPaletteEntries
GetTextExtentPoint32A
StretchBlt
CreateDCA
GetObjectA
SetTextColor
SetPixel
SelectObject
GetPixel
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
CreateEllipticRgnIndirect
GetStockObject
DeleteDC
SetBkMode
SetBkColor
DeleteObject
SetRectRgn
DeleteMetaFile
GetTextExtentPoint32W
GetTextExtentPointA
CreateBrushIndirect
msimg32
AlphaBlend
GradientFill
TransparentBlt
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
GetJobA
advapi32
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegSetValueA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExW
RegEnumValueA
RegEnumKeyExA
SetFileSecurityA
GetFileSecurityA
GetUserNameA
shell32
DragFinish
DragQueryFileA
ExtractIconA
SHAddToRecentDocs
SHGetFileInfoA
SHAppBarMessage
SHGetDesktopFolder
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExA
ShellExecuteA
SHGetSpecialFolderLocation
DragAcceptFiles
SHGetMalloc
comctl32
_TrackMouseEvent
shlwapi
PathIsUNCA
PathFindExtensionA
StrFormatKBSizeA
PathRemoveFileSpecW
PathStripToRootA
PathFileExistsA
PathRemoveExtensionA
PathFindFileNameA
uxtheme
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetThemeColor
GetCurrentThemeName
GetWindowTheme
GetThemeSysColor
IsAppThemed
DrawThemeParentBackground
DrawThemeText
ole32
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleSave
OleSaveToStream
OleSetContainedObject
OleIsRunning
OleLockRunning
OleGetIconOfClass
OleSetMenuDescriptor
CoGetMalloc
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateFileMoniker
WriteFmtUserTypeStg
OleLoad
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleRegGetMiscStatus
OleRegEnumVerbs
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleCreate
CreateItemMoniker
CreateGenericComposite
CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
WriteClassStm
StgIsStorageILockBytes
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleGetClipboard
OleQueryLinkFromData
OleQueryCreateFromData
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
OleRun
CLSIDFromProgID
PropVariantCopy
CreateStreamOnHGlobal
CoDisconnectObject
StringFromGUID2
CLSIDFromString
CoInitializeEx
CoInitialize
CoCreateInstance
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemAlloc
StringFromCLSID
CoCreateGuid
CoUninitialize
CoTaskMemFree
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoGetClassObject
CoRegisterMessageFilter
GetClassFile
OleCreateFromData
oleaut32
LoadTypeLi
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
VarDateFromStr
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
RegisterTypeLi
SafeArrayRedim
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayCreate
SysAllocString
SafeArrayAllocDescriptor
SysStringLen
SysReAllocStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
VarBstrFromDate
SysFreeString
VarUdateFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadRegTypeLi
SafeArrayGetDim
SafeArrayAllocData
oledlg
ord9
ord7
ord6
ord5
ord4
ord3
ord8
gdiplus
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipDrawImageRectI
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipBitmapLockBits
GdipSetInterpolationMode
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
wininet
InternetAttemptConnect
HttpQueryInfoA
InternetOpenUrlA
HttpSendRequestA
HttpOpenRequestA
InternetReadFile
InternetConnectA
InternetCloseHandle
InternetOpenA
secur32
GetUserNameExA
oleacc
CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 10.8MB - Virtual size: 10.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 228KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ