F:\qfw\demoIE(qfw)\Bin\IESetup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-29_df7a3df0cb59a83a282610e74859d7b4_icedid.exe
Resource
win7-20240221-en
General
-
Target
2024-06-29_df7a3df0cb59a83a282610e74859d7b4_icedid
-
Size
3.1MB
-
MD5
df7a3df0cb59a83a282610e74859d7b4
-
SHA1
625cd543bbd76e43e2c8763c39f7eff2b2b71087
-
SHA256
21c88143621f97636e42c3f5c1f46fee1f8fe6bf89859e7f7cc92986af7c76b1
-
SHA512
a984269c78ac86136ad703d5a7ffb9e20977de4fea974efa5f433fe0a0e3cc142ee571e30c7c797b0712530d56ae9ed9e31336bd9489ab28ed0d9bda7cc157f3
-
SSDEEP
98304:otn9qzlTFhDAbqkLmg/0vZrjZYlV8kO7ec9Z54NHSiKfF:op69kLmU0HGnOqc9Z54NHSiKfF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-06-29_df7a3df0cb59a83a282610e74859d7b4_icedid
Files
-
2024-06-29_df7a3df0cb59a83a282610e74859d7b4_icedid.exe windows:5 windows x86 arch:x86
5247ecd9465a721203ede64e7478b32f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
EnumSystemLocalesW
FatalAppExitA
SetConsoleCtrlHandler
GetConsoleCP
IsValidLocale
ReadConsoleW
SetFilePointerEx
WriteConsoleW
SetEnvironmentVariableA
LCMapStringW
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetStringTypeW
GetOEMCP
GetACP
IsValidCodePage
CreateSemaphoreW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetProcessHeap
GetStdHandle
HeapQueryInformation
HeapSize
GetFileType
SetStdHandle
AreFileApisANSI
GetModuleHandleExW
ExitProcess
ExitThread
CreateThread
HeapReAlloc
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
VirtualQuery
VirtualAlloc
RaiseException
HeapAlloc
HeapFree
RtlUnwind
GetCommandLineW
LocalUnlock
LocalLock
FindResourceExW
VirtualProtect
SearchPathW
Sleep
GetTempPathW
GetProfileIntW
VerifyVersionInfoW
VerSetConditionMask
SetErrorMode
GetTickCount
lstrcpyW
GetWindowsDirectoryW
GetUserDefaultLCID
ReplaceFileW
GetTempFileNameW
GetDiskFreeSpaceW
SetFileTime
SetFileAttributesW
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
GetStringTypeExW
MoveFileW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
CreateFileW
DeleteFileW
GetCurrentDirectoryW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
SystemTimeToFileTime
FileTimeToSystemTime
GetAtomNameW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GlobalFlags
GlobalGetAtomNameW
GetPrivateProfileIntW
CompareStringA
GetCurrentThread
GetThreadLocale
InterlockedIncrement
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
SetEvent
InterlockedDecrement
lstrcmpA
GetCurrentProcessId
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
GetCurrentThreadId
DeleteCriticalSection
DecodePointer
EncodePointer
CopyFileW
MulDiv
GlobalSize
GetModuleHandleA
SetLastError
OutputDebugStringA
GetFileAttributesW
InitializeCriticalSectionAndSpinCount
FormatMessageW
GetModuleHandleW
GetSystemInfo
CloseHandle
OpenProcess
LocalFree
LocalAlloc
WideCharToMultiByte
GetComputerNameW
OutputDebugStringW
WaitForSingleObject
GetModuleFileNameW
CreateMutexW
GetLastError
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
GetCPInfo
GetVersionExW
lstrlenW
lstrcmpiW
GetVersion
FreeResource
LoadLibraryW
GetProcAddress
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
FindResourceW
SizeofResource
LoadResource
GetConsoleMode
LockResource
user32
PostQuitMessage
CharNextW
SetRectEmpty
GetMessageW
DestroyMenu
IntersectRect
EndPaint
BeginPaint
GetWindowDC
LoadMenuW
MapVirtualKeyW
GetKeyNameTextW
GetWindowThreadProcessId
IsDialogMessageW
SetWindowTextW
ScrollWindowEx
SendDlgItemMessageW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
MapWindowPoints
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
RegisterWindowMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
SendDlgItemMessageA
GetWindowTextLengthW
GetWindowTextW
ShowOwnedPopups
SetFocus
GetMenuStringW
GetWindowRgn
IsWindowEnabled
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
SetWindowLongW
GetSystemMenu
SetWindowPos
DispatchMessageW
TranslateMessage
wsprintfW
GetFocus
GetWindow
FindWindowExW
MessageBoxW
UpdateWindow
DrawIcon
KillTimer
SetTimer
IsIconic
LoadIconW
ScreenToClient
GetCursorPos
DrawFrameControl
GetIconInfo
CreateIconIndirect
LoadImageW
DestroyCursor
OffsetRect
FrameRect
WindowFromPoint
ClientToScreen
SetCursor
GetWindowRect
DrawStateW
GetActiveWindow
GetNextDlgTabItem
IsMenu
PostMessageW
SystemParametersInfoW
DrawIconEx
DestroyIcon
LoadBitmapW
GetDesktopWindow
GetSysColorBrush
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetMenuItemInfoW
DeleteMenu
RemoveMenu
ModifyMenuW
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
SendMessageW
EnableWindow
DrawEdge
UpdateLayeredWindow
EmptyClipboard
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
CreatePopupMenu
CreateMenu
GetMenuState
GetParent
GetWindowLongW
PtInRect
IsRectEmpty
InflateRect
CopyRect
SetRect
FillRect
DrawFocusRect
SubtractRect
GetUpdateRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
EnumChildWindows
CharUpperBuffW
SetMenuDefaultItem
CopyIcon
GetDoubleClickTime
SetClassLongW
SetCursorPos
DestroyAcceleratorTable
GetSysColor
GetClientRect
GetScrollPos
RedrawWindow
InvalidateRect
ReleaseDC
GetDC
GetSystemMetrics
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
SendNotifyMessageW
MapVirtualKeyExW
IsCharLowerW
SetActiveWindow
GetKeyboardLayout
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
IsClipboardFormatAvailable
RegisterClipboardFormatW
LockWindowUpdate
GetDCEx
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
GetMenuDefaultItem
PostThreadMessageW
WindowFromDC
InSendMessage
GetTabbedTextExtentW
SetWindowRgn
UnionRect
MessageBeep
GetNextDlgGroupItem
WaitMessage
CharUpperW
InvalidateRgn
CopyAcceleratorTableW
SetCapture
SetParent
UnregisterClassW
CopyImage
RealChildWindowFromPoint
GetDialogBaseUnits
LoadCursorW
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
InsertMenuItemW
TranslateAcceleratorW
LoadAcceleratorsW
ReleaseCapture
BringWindowToTop
MapDialogRect
SetScrollPos
SetWindowContextHelpId
IsZoomed
gdi32
ExtTextOutW
CreateBitmap
SetBkColor
SetTextColor
CreateFontW
GetMapMode
RoundRect
SetDIBColorTable
GetTextMetricsW
StretchBlt
SetStretchBltMode
CopyMetaFileW
CreateDCW
CreateRectRgnIndirect
CreateDIBPatternBrushPt
CreatePatternBrush
CreateRectRgn
ExcludeClipRect
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocW
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
PolyBezierTo
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
SetRectRgn
DPtoLP
GetBkColor
GetCharWidthW
StretchDIBits
GetTextColor
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetViewportOrgEx
GetRgnBox
CreateEllipticRgn
LPtoDP
GetROP2
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetWindowOrgEx
GetTextFaceW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CloseMetaFile
CreateMetaFileW
DeleteMetaFile
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
CreatePolygonRgn
Polygon
Polyline
EnumFontFamiliesExW
OffsetRgn
CreateRoundRectRgn
GetCurrentObject
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
CreateDIBSection
SetPixel
Rectangle
RectVisible
PtVisible
PatBlt
GetPixel
GetDeviceCaps
GetBkMode
Escape
Ellipse
DeleteObject
DeleteDC
CreatePen
CreateHatchBrush
GetObjectW
SelectObject
GetTextExtentPoint32W
GetStockObject
CreateSolidBrush
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
PolylineTo
BitBlt
msimg32
AlphaBlend
TransparentBlt
winspool.drv
DocumentPropertiesW
GetJobW
OpenPrinterW
ClosePrinter
advapi32
RegQueryValueW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegFlushKey
RegEnumKeyExW
SetFileSecurityW
GetFileSecurityW
RegEnumValueW
RegCloseKey
RegEnumKeyW
RegSetValueW
RegSetValueExW
RegQueryInfoKeyW
shell32
SHGetMalloc
DragQueryFileW
DragFinish
SHAddToRecentDocs
ExtractIconW
SHGetFileInfoW
SHGetPathFromIDListW
SHAppBarMessage
SHBrowseForFolderW
ShellExecuteExW
ShellExecuteW
SHGetDesktopFolder
SHGetSpecialFolderLocation
comctl32
ImageList_ReplaceIcon
ImageList_Draw
ImageList_AddMasked
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
_TrackMouseEvent
shlwapi
PathFindFileNameW
PathRemoveExtensionW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
PathFindExtensionW
StrFormatKBSizeW
uxtheme
GetWindowTheme
GetThemeSysColor
OpenThemeData
CloseThemeData
GetCurrentThemeName
GetThemeColor
DrawThemeText
DrawThemeParentBackground
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
ole32
CoGetClassObject
OleRun
CoDisconnectObject
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
SetConvertStg
GetRunningObjectTable
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
WriteClassStg
ReadClassStg
StgCreateDocfileOnILockBytes
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CreateStreamOnHGlobal
CreateFileMoniker
CoLockObjectExternal
GetHGlobalFromILockBytes
OleGetIconOfClass
OleLockRunning
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
PropVariantCopy
CoInitializeEx
OleRegGetMiscStatus
OleRegEnumVerbs
OleCreateMenuDescriptor
RevokeDragDrop
RegisterDragDrop
DoDragDrop
OleSetMenuDescriptor
OleQueryCreateFromData
OleQueryLinkFromData
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CoGetMalloc
CreateOleAdviseHolder
CreateDataAdviseHolder
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
OleGetClipboard
CreateBindCtx
OleIsRunning
OleCreateFromData
OleCreate
WriteClassStm
CreateItemMoniker
CreateGenericComposite
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
IsAccelerator
OleTranslateAccelerator
OleRegGetUserType
OleDestroyMenuDescriptor
oleaut32
SysAllocString
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysReAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
OleCreateFontIndirect
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
VariantChangeType
VariantClear
SysAllocStringLen
VariantInit
SysAllocStringByteLen
SafeArrayGetUBound
SysFreeString
SysStringByteLen
oledlg
OleUIBusyW
gdiplus
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdiplusShutdown
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdiplusStartup
GdipDrawImageRectI
GdipReleaseDC
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipFree
GdipAlloc
GdipSetInterpolationMode
winmm
PlaySoundW
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 564KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 215KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ