c:\MyProjects\OnlineVideo2Gif\Eng_Release\OnlineVideo2Gif.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-05_886fb6be37680ee7fa7ee36240fd48eb_icedid.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-07-05_886fb6be37680ee7fa7ee36240fd48eb_icedid.exe
Resource
win10v2004-20240704-en
General
-
Target
2024-07-05_886fb6be37680ee7fa7ee36240fd48eb_icedid
-
Size
1.8MB
-
MD5
886fb6be37680ee7fa7ee36240fd48eb
-
SHA1
dfa73d9d81bd1bbdb6241943b6bc6f7c9d0e13f9
-
SHA256
2c6b42d94e9f9a4d9060d252d6fca793fb56ecf6fded2abf62ba294bd8334539
-
SHA512
c61726f3f544cd6c8b6aba6ba02f1b3c60feaddad2f212e9ad443605bbb748348ad9499fd74d121ff26a8926747a14f69774a50bf1ac4172cd388597199c021a
-
SSDEEP
24576:YENru1jwiIKAUImB7n4TKcts2+K1xIMgRWjxcudDx/5ReeYGiS9z3TXbPzv4:YEHvK9ImBMLLzgRmca5ziS9jTrr4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-05_886fb6be37680ee7fa7ee36240fd48eb_icedid
Files
-
2024-07-05_886fb6be37680ee7fa7ee36240fd48eb_icedid.exe windows:4 windows x86 arch:x86
4e987a783ab4574cc7ad0c9ec1fc42ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
TerminateProcess
HeapSize
GetDriveTypeA
QueryPerformanceCounter
GetCurrentProcessId
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
HeapReAlloc
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetEnvironmentVariableA
GetCommandLineA
GetStartupInfoA
GetDateFormatA
GetTimeFormatA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
CreateThread
ExitThread
HeapFree
IsBadReadPtr
HeapAlloc
GetSystemTimeAsFileTime
RtlUnwind
GetCurrentDirectoryA
SetErrorMode
GetOEMCP
GetCPInfo
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalFlags
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
InterlockedIncrement
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
InterlockedDecrement
FormatMessageA
LocalFree
RaiseException
SetLastError
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
lstrcpynA
FreeResource
ResumeThread
GetTickCount
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GetLastError
lstrcmpiA
CompareStringA
CompareStringW
GetVersion
CopyFileA
GetTempPathA
GetLocalTime
DeleteFileA
CreateFileA
GetFileSize
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetCurrentThreadId
MultiByteToWideChar
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
GetModuleHandleA
WaitForSingleObject
CloseHandle
GetEnvironmentVariableA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
ExitProcess
GetDiskFreeSpaceExA
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
MulDiv
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetFileType
GetVersionExA
user32
RegisterWindowMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
MapWindowPoints
ScrollWindow
MessageBoxA
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
EqualRect
DeferWindowPos
SetScrollInfo
GetClassInfoA
CallWindowProcA
SetWindowPos
IntersectRect
GetWindowPlacement
GetWindow
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
EndDialog
DrawTextA
EnableScrollBar
GetScrollInfo
CharUpperA
SetForegroundWindow
RedrawWindow
UpdateWindow
PeekMessageA
PostQuitMessage
SystemParametersInfoA
IsWindowVisible
LoadIconA
IsIconic
ReuseDDElParam
DeleteMenu
LoadBitmapA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
SetParent
GetFocus
TranslateAcceleratorA
CopyIcon
IsWindow
GetMessagePos
MessageBeep
GetMessageA
GetCursorInfo
DrawIcon
PostThreadMessageA
SetRect
SetWindowTextA
DestroyWindow
UnregisterClassA
RegisterClassA
CreateWindowExA
ShowWindow
GetWindowDC
BeginPaint
EndPaint
DefWindowProcA
ScreenToClient
GetSystemMetrics
CreateCursor
WindowFromPoint
GetNextDlgTabItem
GetActiveWindow
DrawFocusRect
DrawStateA
FrameRect
InflateRect
CopyRect
LoadMenuA
LoadImageA
GetIconInfo
CreateIconIndirect
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
GetSysColorBrush
GetMenuItemInfoA
SetWindowContextHelpId
MapDialogRect
TranslateMessage
ValidateRect
ShowOwnedPopups
CharNextA
ReleaseDC
GetSubMenu
TrackPopupMenuEx
DestroyIcon
DestroyCursor
DestroyMenu
SetCapture
ClientToScreen
ReleaseCapture
LoadCursorA
SetCursor
EnableWindow
KillTimer
SetTimer
InvalidateRect
RegisterClipboardFormatA
GetNextDlgGroupItem
GetDC
GetClientRect
GetWindowRect
FillRect
OffsetRect
PtInRect
PostMessageA
GetWindowLongA
SetWindowLongA
GetDlgCtrlID
GetParent
SendMessageA
GetSysColor
InvalidateRgn
CopyAcceleratorTableA
GetKeyState
UnpackDDElParam
GetCursorPos
SetWindowRgn
IsRectEmpty
FindWindowA
GrayStringA
DrawTextExA
TabbedTextOutA
wsprintfA
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
MoveWindow
IsDialogMessageA
CheckMenuRadioItem
gdi32
PatBlt
CreateDIBSection
GetDIBits
RealizePalette
RestoreDC
SetDIBitsToDevice
SetStretchBltMode
ExtSelectClipRgn
CreateRectRgnIndirect
GetClipBox
SaveDC
RectVisible
StretchDIBits
SetBkMode
SetWinMetaFileBits
DeleteEnhMetaFile
GetEnhMetaFileHeader
SetEnhMetaFileBits
PlayEnhMetaFile
SelectPalette
CreatePalette
GetEnhMetaFilePaletteEntries
SetMapMode
GetTextExtentPoint32A
GetWindowExtEx
PtVisible
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
CreatePatternBrush
CreateSolidBrush
GetMapMode
DPtoLP
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
GetRgnBox
TextOutA
MoveToEx
LineTo
Rectangle
ExtTextOutA
GetObjectA
GetPixel
SetPixel
CreateBitmap
SelectObject
SetBkColor
SetTextColor
DeleteDC
GetStockObject
DeleteObject
CreateFontA
StretchBlt
BitBlt
LPtoDP
SetBrushOrgEx
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectA
CreateHatchBrush
CreatePen
UnrealizeObject
GetViewportExtEx
EnumFontFamiliesA
GetDeviceCaps
msimg32
GradientFill
comdlg32
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegQueryValueA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
shell32
ShellExecuteA
DragFinish
DragQueryFileA
ShellExecuteExA
comctl32
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Draw
ImageList_GetImageInfo
shlwapi
PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA
oledlg
ord8
ole32
StgOpenStorageOnILockBytes
CoTaskMemFree
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoRegisterMessageFilter
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
oleaut32
VariantClear
VariantChangeType
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
VarDateFromStr
VariantInit
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
ws2_32
ntohs
htons
ntohl
htonl
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 288KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ