D:\Dev\vanch\67e\VD67WriteCard_EAS(C++)\Release\WriteCard.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-08_01eeaef9969a5f4ae68f41f0cb34727a_icedid.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-07-08_01eeaef9969a5f4ae68f41f0cb34727a_icedid.exe
Resource
win10v2004-20240704-en
General
-
Target
2024-07-08_01eeaef9969a5f4ae68f41f0cb34727a_icedid
-
Size
3.3MB
-
MD5
01eeaef9969a5f4ae68f41f0cb34727a
-
SHA1
6ceb1b6c43278d21c110b43c1d8ca0337a21bbd7
-
SHA256
455a79922794018d6dea553ca66e0ae6a63de103c41ed74fe5646f8f94b8c6fd
-
SHA512
ec4d02e4cac23a3a4e16fe3a236cd0319bbe44adc6b5535af4ea7de3e4c9293f934b83c610439260550cc109988843637a63cf132d16e5cad9d09a83323b5ded
-
SSDEEP
98304:Q0BSXRtfnp3CdJ+CUp88NX12xHmvcIGS5ikM+6kHiOrKvgBRlmHqB9EOS9K9n6JZ:Q0BSXRtfRoQlsHD+6kHiOrKvgBRlmHqr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-07-08_01eeaef9969a5f4ae68f41f0cb34727a_icedid
Files
-
2024-07-08_01eeaef9969a5f4ae68f41f0cb34727a_icedid.exe windows:6 windows x86 arch:x86
fd53db06739784a882c5a066ae2c72ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
GetStdHandle
ExitProcess
QueryPerformanceFrequency
HeapQueryInformation
GetFullPathNameW
SetStdHandle
EnumSystemLocalesW
FindFirstFileExW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
VirtualQuery
VirtualAlloc
GetSystemInfo
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
CreateFileW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
OutputDebugStringW
IsValidLocale
ReadConsoleW
GetTimeZoneInformation
GetCommandLineW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
WriteConsoleW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
GetStringTypeW
LocalUnlock
LocalLock
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
SearchPathA
GetProfileIntA
GetTempPathA
GetTickCount
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
GetCurrentDirectoryA
lstrcpyW
SetErrorMode
SetFileTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FindResourceExW
GetACP
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
SystemTimeToFileTime
GetAtomNameA
LocalReAlloc
LocalAlloc
GlobalHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileA
FileTimeToLocalFileTime
GetPrivateProfileStringA
GetCurrentThread
lstrcmpA
GlobalReAlloc
GetStringTypeExA
GetThreadLocale
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetCurrentProcess
DuplicateHandle
GetVolumeInformationA
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
GetCurrentProcessId
GetVersionExA
ResumeThread
SuspendThread
SetThreadPriority
VirtualProtect
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryA
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
MultiByteToWideChar
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalSize
SetLastError
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileIntA
Sleep
DeleteFileA
GetSystemDefaultLangID
GetComputerNameA
FindResourceA
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
TerminateThread
lstrcpyA
GlobalLock
GlobalUnlock
GlobalAlloc
GetLocalTime
CreateEventA
WaitForSingleObject
SetEvent
CloseHandle
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleA
CreateThread
GetCommandLineA
user32
ClientToScreen
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
MapDialogRect
GetAsyncKeyState
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsWindowEnabled
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
AdjustWindowRectEx
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
FillRect
SetActiveWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
InvalidateRect
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
DestroyIcon
LoadImageW
DeleteMenu
SendMessageA
PostMessageA
GetDlgItem
SetTimer
KillTimer
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetKeyNameTextA
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
MapVirtualKeyA
GetWindowThreadProcessId
CharUpperA
PostQuitMessage
ShowOwnedPopups
SetCursor
SetWindowContextHelpId
GetSysColorBrush
LoadCursorA
RealChildWindowFromPoint
CopyImage
GetDialogBaseUnits
IntersectRect
TrackMouseEvent
DestroyMenu
GetMenuItemInfoA
InflateRect
SystemParametersInfoA
SetRectEmpty
OffsetRect
GetMessageA
SetForegroundWindow
TranslateMessage
EnableWindow
FindWindowA
FindWindowExA
wsprintfA
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
CreatePopupMenu
AppendMenuA
GetDC
ReleaseDC
MessageBeep
GetCursorPos
ScreenToClient
IsWindow
GetClientRect
GetWindowRect
LoadBitmapW
SetDlgItemTextA
GetDlgItemTextA
GetParent
LoadIconW
UnregisterClassA
GetForegroundWindow
MessageBoxA
IsIconic
GetSystemMetrics
GetSystemMenu
MessageBoxW
DrawIcon
GetFocus
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
RemoveMenu
SetFocus
SetScrollPos
GetScrollPos
GetWindowTextA
GetWindowTextLengthA
WaitMessage
SetCapture
ReleaseCapture
WindowFromPoint
GetWindowLongA
GetWindow
CheckMenuItem
LoadCursorW
CharNextA
CopyAcceleratorTableA
InvalidateRgn
SetRect
IsRectEmpty
GetNextDlgGroupItem
GetMenuDefaultItem
DrawFocusRect
LoadImageA
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
SetLayeredWindowAttributes
EnumDisplayMonitors
DrawStateA
SetClassLongA
SetWindowRgn
SetParent
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
GetMessagePos
InsertMenuItemA
GetMenuBarInfo
UnpackDDElParam
GetTabbedTextExtentW
GetTabbedTextExtentA
GetDCEx
DestroyCursor
GetWindowRgn
WindowFromDC
CreateMenu
InSendMessage
MonitorFromRect
SendNotifyMessageA
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
EnumChildWindows
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffA
ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
PostThreadMessageA
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
UnionRect
RegisterClipboardFormatA
SetWindowPlacement
ReuseDDElParam
gdi32
ExcludeClipRect
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
TextOutA
ExtTextOutA
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
CreateRectRgnIndirect
PatBlt
GetTextMetricsA
Escape
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
OffsetRgn
GetCurrentObject
CreateFontA
GetCharWidthA
StretchDIBits
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
CreateCompatibleDC
BitBlt
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCA
CopyMetaFileA
GetObjectA
EnumFontFamiliesExA
ExtSelectClipRgn
GetTextExtentPoint32A
msimg32
TransparentBlt
AlphaBlend
winspool.drv
GetJobA
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegDeleteValueA
RegEnumValueA
RegOpenKeyExA
GetFileSecurityA
SetFileSecurityA
RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExW
RegSetValueA
shell32
ShellExecuteExA
SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ExtractIconA
SHAddToRecentDocs
SHGetFileInfoA
ShellExecuteA
shlwapi
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA
PathRemoveExtensionA
PathAddExtensionA
StrFormatKBSizeA
uxtheme
GetThemePartSize
GetThemeSysColor
DrawThemeText
DrawThemeParentBackground
OpenThemeData
DrawThemeBackground
GetWindowTheme
IsAppThemed
CloseThemeData
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemeColor
ole32
CoCreateGuid
RegisterDragDrop
RevokeDragDrop
PropVariantCopy
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
OleSetMenuDescriptor
OleLockRunning
StgCreateDocfile
StgOpenStorage
CoLockObjectExternal
CreateFileMoniker
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleRegGetMiscStatus
OleRegEnumVerbs
WriteClassStm
GetHGlobalFromILockBytes
CreateGenericComposite
CreateItemMoniker
StgIsStorageFile
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleRun
OleCreate
OleCreateFromData
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoInitializeEx
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
OleIsRunning
CoGetMalloc
OleQueryLinkFromData
OleQueryCreateFromData
OleGetClipboard
oleaut32
VarBstrFromCy
SafeArrayCopy
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysStringLen
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
VarDecFromStr
SafeArrayPtrOfIndex
VarBstrFromDec
SafeArrayAllocDescriptor
VarBstrFromDate
SysAllocString
OleCreateFontIndirect
VarCyFromStr
VarDateFromStr
oledlg
ord8
vhlib
ReadSimParam
ReadBasicParam
ReadAutoParam
GetFrequencyRange
GetReaderID
EPC1G2_ReadLabelID
EPC1G2_WriteWordBlock
VH_WriteAppLogFile
VH_DisconnectScannerUsb
SetReaderMode
EPC1G2_ReadWordBlock
EPC1G2_SetLock
EPC1G2_KillTag
VH_ConnectScannerUsb
WriteBasicParam
WriteAutoParam
ISO6B_ReadLabelID
ISO6B_ReadByteBlock
EPC1G2_ChangeEas
EPC1G2_EasAlarm
BuzzerAlarm
VH_InitUsb
VH_CloseUsb
VH_SetLogFile
ISO6B_WriteAByte
EPC1G2_WriteEPC
Asc2Bcd
DisconnectScanner
ConnectScanner
VH_GetVersion
Bcd2AscEx
WriteSimParam
odbc32
ord72
ord4
ord68
ord61
ord59
ord41
ord23
ord76
ord39
ord20
ord49
ord19
ord48
ord18
ord38
ord45
ord44
ord43
ord17
ord16
ord15
ord14
ord13
ord12
ord11
ord10
ord9
ord8
ord5
ord3
ord2
ord1
crypt32
CryptUnprotectData
CryptProtectData
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipAlloc
GdiplusShutdown
GdipFree
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 576KB - Virtual size: 575KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ