2024-06-28_2cdc3518461e1e2cc5e19471af46ef3a_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-28_2cdc3518461e1e2cc5e19471af46ef3a_icedid
Size

4.0MB
MD5

2cdc3518461e1e2cc5e19471af46ef3a
SHA1

679a9da5267494f952cc747fda2bf0c10e2b00ef
SHA256

a76671dd40a28882d6f393dbfb414085d5005c4dcaec59d80a768264d469065e
SHA512

1144cf12faa659d1ba2523463829e02b421fa44493131763d358393b8f7d1c425e6ed011888fa5c6bfdb7baf63c00c982f5b8e0f45e071a3145c4759e9fd0cdb
SSDEEP

98304:2kjMvwLWH4mZEkZgLry39s8jqOX5x00YB45uV7iWuoBc1yEh4CKGC:2kjMvEWYmuOQ999iWhO1yEh4nGC

Score

1^/10

Malware Config

Signatures

Files

2024-06-28_2cdc3518461e1e2cc5e19471af46ef3a_icedid
.exe windows:6 windows x86 arch:x86

b80a15701b2569ac1079ad5535bdaeb0

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15/06/2016, 00:00

Not After

15/06/2024, 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1e:e2:f5:f5:57:45:0e:77:f5:8e:c3:5b
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

16/12/2020, 14:16

Not After

15/03/2024, 09:44

Subject

CN=AGFEO GmbH & Co. KG,O=AGFEO GmbH & Co. KG,L=Bielefeld,ST=Nordrhein-Westfalen,C=DE,1.2.840.113549.1.9.1=#0c0d696e666f40616766656f2e6465

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06/04/2022, 07:44

Not After

08/05/2033, 07:44

Subject

CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

20/02/2019, 00:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:00:00:00:00:01:21:58:53:08:a2
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

18/03/2009, 10:00

Not After

18/03/2029, 10:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7e:44:9f:53:6e:20:38:57:e4:79:0f:66:17:df:a9:77:21:86:9c:bd
Signer

Actual PE Digest

7e:44:9f:53:6e:20:38:57:e4:79:0f:66:17:df:a9:77:21:86:9c:bd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\src\LanCfg\LanCfg\Release\LanCfg.pdb

Imports

snmpapi

SnmpUtilVarBindFree
SnmpUtilOidNCmp
SnmpUtilOidCpy

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

GetTimeFormatW
GetDateFormatW
GetTempPathW
GetTimeZoneInformation
GetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
GetFullPathNameW
GetCommandLineW
GetFileType
SetStdHandle
LCMapStringW
FreeLibraryAndExitThread
ExitThread
CreateThread
VirtualQuery
VirtualAlloc
GetSystemInfo
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
RaiseException
OutputDebugStringW
IsValidLocale
EnumSystemLocalesW
GetConsoleOutputCP
GetConsoleMode
CompareStringW
SetFilePointerEx
GetDriveTypeW
GetStringTypeW
FindFirstFileExW
FindNextFileW
IsValidCodePage
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LocalUnlock
LocalLock
GetTickCount
GetProfileIntA
SearchPathA
GetWindowsDirectoryA
VerifyVersionInfoA
VerSetConditionMask
FindResourceExW
SetErrorMode
GetACP
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
VirtualProtect
CreateSemaphoreA
ReleaseSemaphore
ReadConsoleW
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
GetAtomNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetStringTypeExA
GetThreadLocale
MoveFileA
GetShortPathNameA
LoadLibraryExA
DuplicateHandle
GetVolumeInformationA
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
SystemTimeToFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SetFileTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
lstrcmpA
ResumeThread
SuspendThread
SetThreadPriority
CreateEventA
CopyFileA
MulDiv
GlobalSize
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryExW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetSystemDirectoryW
GetCurrentThreadId
SetLastError
EncodePointer
GetVersion
InitializeCriticalSectionEx
HeapSize
HeapFree
HeapReAlloc
HeapDestroy
DecodePointer
CreateNamedPipeA
DisconnectNamedPipe
ConnectNamedPipe
FlushFileBuffers
GetCurrentProcessId
GetProcessHeap
HeapAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
GetTickCount64
GetTempPathA
WriteFile
GetExitCodeThread
ResetEvent
GetHandleInformation
ExpandEnvironmentStringsA
MoveFileExA
FormatMessageA
LocalSize
GetSystemTime
CreateProcessA
GetCurrentThread
GetExitCodeProcess
ExitProcess
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetFileAttributesA
GetCommandLineA
WaitForMultipleObjects
LocalFree
LocalAlloc
Sleep
SetEvent
GetComputerNameA
lstrcatA
lstrcpyA
GlobalFree
GlobalLock
WriteConsoleW
GlobalUnlock
GlobalAlloc
GetModuleFileNameA
GetVersionExA
GetSystemDirectoryA
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GetDriveTypeA
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateFileA
CreateDirectoryA
GetCurrentDirectoryA
GetCPInfo
MultiByteToWideChar
FindResourceA
lstrlenA
lstrcmpiA
GetLastError
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
OutputDebugStringA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileW
GetModuleHandleExW

user32

SetCursor
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
CharUpperA
WaitMessage
SetRectEmpty
InvalidateRect
GetWindowThreadProcessId
DestroyMenu
IntersectRect
InflateRect
GetWindowDC
GetMessageA
GetMenuStringA
MapVirtualKeyA
GetKeyNameTextA
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsWindowEnabled
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExA
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
TrackPopupMenuEx
SetMenu
LoadImageA
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
InSendMessage
WindowFromDC
PostThreadMessageA
CopyAcceleratorTableA
MessageBeep
EnableWindow
GetParent
SendMessageA
IsWindow
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
UnhookWindowsHookEx
GetCursorPos
SetMenuDefaultItem
TrackPopupMenu
UnregisterClassA
OffsetRect
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
DispatchMessageA
TranslateMessage
LoadIconW
DrawIcon
LoadIconA
GetClassInfoA
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
OpenClipboard
EnumWindows
ClientToScreen
GetClientRect
RedrawWindow
LoadMenuW
KillTimer
GetKeyState
GetActiveWindow
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
PostQuitMessage
ShowOwnedPopups
MsgWaitForMultipleObjectsEx
LoadCursorA
LoadCursorW
DestroyCursor
GetAsyncKeyState
MapDialogRect
IsZoomed
DrawStateA
RealChildWindowFromPoint
CopyImage
GetDialogBaseUnits
WindowFromPoint
SetTimer
GetWindow
GetLastActivePopup
FindWindowA
GetWindowLongA
MessageBoxA
TrackMouseEvent
LoadImageW
UnionRect
IsRectEmpty
GetSystemMenu
SetParent
LoadAcceleratorsW
SetCapture
SetWindowRgn
GetMenu
NotifyWinEvent
GetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
MonitorFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
GetNextDlgGroupItem
DrawFocusRect
GetIconInfo
HideCaret
InvertRect
SetClipboardData
SetActiveWindow
SetForegroundWindow
DrawEdge
GetSystemMetrics
GetMenuState
EmptyClipboard
CreateMenu
CreatePopupMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
ModifyMenuA
RemoveMenu
DeleteMenu
GetMenuItemInfoA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
FillRect
SetRect
CopyRect
GetDesktopWindow
LoadBitmapW
DestroyIcon
DrawIconEx
SystemParametersInfoA
PostMessageA
PeekMessageA
ExitWindowsEx
IsWindowVisible
WaitForInputIdle
IsIconic
BringWindowToTop
SetClassLongA
DrawFrameControl
SetCursorPos
CopyIcon
UpdateWindow
GetWindowRect
FrameRect
GetDCEx
GetTabbedTextExtentW
LockWindowUpdate
RegisterClipboardFormatA
CharUpperBuffA
GetKeyboardLayout
GetTabbedTextExtentA
GetWindowRgn
SubtractRect
EnumChildWindows
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
MonitorFromRect
SendNotifyMessageA
GetUpdateRect
GetDoubleClickTime
MapVirtualKeyExA
IsCharLowerA
GetComboBoxInfo
DestroyAcceleratorTable
CreateAcceleratorTableA
ToAsciiEx
RegisterClassA
GetKeyboardState

gdi32

OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
CreateFontA
GetCharWidthA
LineTo
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetViewportOrgEx
GetBkColor
CreateEllipticRgn
LPtoDP
GetROP2
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextColor
GetTextExtentPointA
GetWindowOrgEx
GetTextFaceA
EnumFontFamiliesExA
CreateRoundRectRgn
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetDIBits
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
GetRgnBox
OffsetRgn
GetCurrentObject
ExtFloodFill
SetPaletteEntries
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
SetPixelV
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetObjectType
GetClipRgn
GetClipBox
ExcludeClipRect
CreateRectRgn
CreatePatternBrush
CreateDIBPatternBrushPt
CreateDCA
CopyMetaFileA
CreateRectRgnIndirect
SetTextColor
SetBkColor
CreateBitmap
ExtTextOutA
TextOutA
RectVisible
PtVisible
Escape
GetTextMetricsA
GetDeviceCaps
GetObjectA
CreateDIBSection
SetPixel
SelectObject
Rectangle
PatBlt
GetTextExtentPoint32W
GetTextExtentPoint32A
GetPixel
GetBkMode
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateHatchBrush
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
StretchDIBits
GetCurrentPositionEx
BitBlt

msimg32

AlphaBlend
TransparentBlt

winspool.drv

DocumentPropertiesA
ClosePrinter
GetJobA
OpenPrinterA

advapi32

SetSecurityDescriptorGroup
RegOpenKeyExA
RegQueryValueExA
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegEnumValueA
GetFileSecurityA
SetFileSecurityA
RegQueryValueA
RegEnumKeyA
RegOpenKeyExW
RegSetValueA
RegSetValueExA
RegQueryInfoKeyA
RegOpenKeyA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
InitiateSystemShutdownExA
SetSecurityDescriptorOwner
RegCloseKey
SetSecurityDescriptorDacl
IsValidSecurityDescriptor
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
FreeSid
DuplicateToken
AllocateAndInitializeSid
AddAccessAllowedAce
AccessCheck
OpenThreadToken
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptAcquireContextA

shell32

SHGetSpecialFolderLocation
SHGetFolderPathA
SHGetDesktopFolder
DragAcceptFiles
ShellExecuteExA
SHGetMalloc
SHBrowseForFolderA
Shell_NotifyIconA
SHGetFileInfoA
DragQueryFileA
SHAppBarMessage
ShellExecuteA
ExtractIconA
SHAddToRecentDocs
DragFinish
SHGetPathFromIDListA

comctl32

ImageList_Draw
ImageList_AddMasked
ImageList_GetIcon
ImageList_GetIconSize
ImageList_ReplaceIcon

shlwapi

PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
PathFileExistsA
PathIsUNCA
PathStripToRootA
UrlUnescapeA
StrFormatKBSizeA
PathRemoveFileSpecW

uxtheme

DrawThemeText
OpenThemeData
GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeParentBackground
CloseThemeData
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
IsAppThemed

ole32

StgCreateDocfileOnILockBytes
WriteClassStm
CreateDataAdviseHolder
CreateGenericComposite
CreateItemMoniker
OleSaveToStream
CreateOleAdviseHolder
CoLockObjectExternal
GetRunningObjectTable
OleRun
OleIsRunning
CoGetMalloc
GetHGlobalFromILockBytes
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSetContainedObject
OleLockRunning
OleGetIconOfClass
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
RegisterDragDrop
RevokeDragDrop
OleSetMenuDescriptor
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleQueryLinkFromData
OleQueryCreateFromData
CreateFileMoniker
CreateILockBytesOnHGlobal
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleRegEnumVerbs
OleRegGetMiscStatus
CreateStreamOnHGlobal
CLSIDFromString
StringFromGUID2
CoDisconnectObject
PropVariantCopy
CoCreateGuid
CoInitializeEx
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
StringFromCLSID
CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID
CoTaskMemAlloc

oleaut32

SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
SafeArrayLock
VarCyFromStr
VarBstrFromCy
SysStringByteLen
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
SafeArrayRedim
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
VarDateFromStr
SafeArrayAllocData
SafeArrayAllocDescriptor
SysReAllocStringLen
SysStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SysFreeString
SafeArrayDestroy
SafeArrayGetDim
SysAllocString
SysAllocStringByteLen
SafeArrayDestroyData

oledlg

ord8

ws2_32

recvfrom
sendto
socket
accept
closesocket
connect
getpeername
getsockname
htonl
htons
ntohs
recv
select
send
WSASetLastError
WSAAsyncSelect
inet_ntoa
inet_addr
gethostbyname
WSAGetLastError
ioctlsocket
getsockopt
listen
setsockopt
shutdown
WSAStartup
WSACleanup
bind

gdiplus

GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipGetImagePalette

iphlpapi

SendARP

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

wininet

InternetOpenUrlA
InternetFindNextFileA
InternetQueryDataAvailable
InternetWriteFile
InternetConnectA
InternetSetFilePointer
InternetReadFile
InternetCrackUrlA
InternetErrorDlg
InternetGetCookieA
InternetSetCookieA
HttpQueryInfoA
HttpEndRequestA
HttpSendRequestExA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
GopherGetAttributeA
GopherOpenFileA
GopherFindFirstFileA
GopherCreateLocatorA
FtpCommandA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpOpenFileA
FtpRenameFileA
FtpDeleteFileA
FtpPutFileA
FtpGetFileA
FtpFindFirstFileA
InternetSetStatusCallback
InternetGetLastResponseInfoA
InternetSetOptionA
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
InternetQueryOptionA

winmm

PlaySoundA

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 648KB - Virtual size: 647KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b80a15701b2569ac1079ad5535bdaeb0

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

1e:e2:f5:f5:57:45:0e:77:f5:8e:c3:5bCertificate

Extended Key Usages

Key Usages

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1dCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fcCertificate

Key Usages

04:00:00:00:00:01:21:58:53:08:a2Certificate

Key Usages

7e:44:9f:53:6e:20:38:57:e4:79:0f:66:17:df:a9:77:21:86:9c:bdSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

snmpapi

version

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

ws2_32

gdiplus

iphlpapi

oleacc

wininet

winmm

imm32

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 648KB - Virtual size: 647KB

.data Size: 37KB - Virtual size: 71KB

.rsrc Size: 364KB - Virtual size: 363KB

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

1e:e2:f5:f5:57:45:0e:77:f5:8e:c3:5b
Certificate

01:c2:9c:7a:f4:7a:a6:02:58:0e:af:32:b1:23:b1:1d
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc
Certificate

04:00:00:00:00:01:21:58:53:08:a2
Certificate

7e:44:9f:53:6e:20:38:57:e4:79:0f:66:17:df:a9:77:21:86:9c:bd
Signer

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 648KB - Virtual size: 647KB

.data
Size: 37KB - Virtual size: 71KB

.rsrc
Size: 364KB - Virtual size: 363KB