Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-22_15a41d87b9b5f8cd80796e5ec7f96eb8_icedid.exe
Resource
win7-20240708-en
Target
2024-07-22_15a41d87b9b5f8cd80796e5ec7f96eb8_icedid
Size
5.2MB
MD5
15a41d87b9b5f8cd80796e5ec7f96eb8
SHA1
cd9f7871873d030e099fc75e239dc0498d047e85
SHA256
542bc133e200ba1a20a18d3ed39d6a9e108595df7d21758182293ec44df2dfca
SHA512
66422e24a159b6e7fd507cc624be8be0fffbbd2f7f8bd3b5def0b5199ffabafcdddc974921d161650e9bbf09ece00c2a0ac8592a7e1e7cd0ee13bfe94594d9c6
SSDEEP
98304:JerYIVDZA5pSnUrAuf3qBTCzZ4zOTZUUjxykLG35erDE9z:grYqA5pSU0ufaBkZ4CUWxykg6Dkz
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetAdaptersInfo
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertGetCertificateChain
CertCreateCertificateChainEngine
CertFreeCertificateContext
CertNameToStrA
CertCloseStore
CryptDecodeObject
CertVerifyCertificateChainPolicy
RaiseException
GlobalFlags
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetCPInfo
GetThreadLocale
GetCurrentProcessId
LockFile
UnlockFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
SetErrorMode
ExitProcess
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetCommandLineA
GetStartupInfoA
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
ExitThread
HeapSize
LCMapStringA
LCMapStringW
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateEventA
SuspendThread
SetEvent
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
AreFileApisANSI
LockFileEx
LoadLibraryW
GetPrivateProfileSectionA
GlobalMemoryStatus
GetWindowsDirectoryA
GetLongPathNameA
GetLocaleInfoA
lstrcmpA
InterlockedDecrement
GlobalAlloc
MulDiv
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
SetLastError
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
CreateThread
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
IsBadReadPtr
FindNextFileW
FindFirstFileW
DosDateTimeToFileTime
LocalFileTimeToFileTime
FileTimeToDosDateTime
SetEndOfFile
CompareFileTime
CreateFileW
GetTickCount
SetFileAttributesW
SetFileTime
CreateDirectoryW
GetFileAttributesW
DeleteFileW
CopyFileW
MoveFileA
MoveFileW
GetModuleFileNameW
GetTempPathW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetFullPathNameW
GetOEMCP
GetACP
GetVersionExA
GetModuleHandleA
GetSystemDirectoryA
OpenEventA
GetPrivateProfileStringA
ResumeThread
HeapAlloc
GetFileSize
SetFilePointer
WriteFile
ReadFile
GetProcessHeap
FileTimeToLocalFileTime
GetFileTime
CreateFileA
GetTimeZoneInformation
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryA
Module32Next
Module32First
GetExitCodeProcess
TerminateProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
WaitForSingleObject
CreateProcessA
CloseHandle
GetShortPathNameA
GetFullPathNameA
GetModuleFileNameA
SetFileAttributesA
GetFileAttributesA
RemoveDirectoryA
DeleteFileA
GetTempFileNameA
GetSystemTime
CreateDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetTempPathA
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalFree
FormatMessageA
LocalAlloc
GetVersion
CompareStringA
ResetEvent
InterlockedExchange
lstrlenW
MultiByteToWideChar
CompareStringW
lstrlenA
WritePrivateProfileStringA
CreateMutexA
ReleaseMutex
GetPrivateProfileIntA
CopyFileA
SystemTimeToFileTime
GetLocalTime
Sleep
GetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
FlushFileBuffers
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
DefWindowProcA
CallWindowProcA
IntersectRect
GetWindowPlacement
ReleaseDC
GetDC
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
GetWindowTextLengthA
GetWindowTextA
GetFocus
SetWindowPos
SetFocus
MoveWindow
IsDialogMessageA
SetDlgItemTextA
DrawIcon
GetSystemMetrics
GetMessagePos
InflateRect
ShowScrollBar
DrawEdge
CallNextHookEx
GetCursorPos
SetWindowsHookExA
IsChild
WinHelpA
GetMessageTime
CopyRect
SetCursor
LoadImageA
MapDialogRect
PtInRect
GetWindow
ClientToScreen
LoadCursorA
SetWindowLongA
EndDialog
GetSysColorBrush
GetSysColor
GetDlgCtrlID
GetWindowLongA
DialogBoxParamA
WaitForInputIdle
SystemParametersInfoA
OffsetRect
SetCapture
ReleaseCapture
GetCapture
SetClassLongA
GetParent
InvalidateRect
ScreenToClient
GetWindowRect
EnumChildWindows
GetClassNameA
GetWindowThreadProcessId
IsWindowEnabled
EnumWindows
wsprintfA
CharUpperA
SetForegroundWindow
RegisterWindowMessageA
CheckMenuItem
EnableMenuItem
GetMenuState
DrawTextExA
ModifyMenuA
LoadBitmapA
LoadIconA
PostMessageA
UnhookWindowsHookEx
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
DispatchMessageA
GetLastActivePopup
GetForegroundWindow
RemovePropA
GetPropA
IsIconic
GetClassLongA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
PostQuitMessage
ValidateRect
TranslateMessage
GetMessageA
IsWindow
SendMessageA
SetTimer
UpdateWindow
KillTimer
RedrawWindow
EnableWindow
GetAsyncKeyState
EnumDisplaySettingsA
CreateDialogParamA
SetWindowTextA
ShowWindow
GetDlgItem
SendDlgItemMessageA
DestroyWindow
MessageBoxA
IsWindowVisible
GetClientRect
ShowOwnedPopups
FillRect
TabbedTextOutA
DrawTextA
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
RegisterClipboardFormatA
SetWindowContextHelpId
CharNextA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
InvalidateRgn
SetRect
CopyAcceleratorTableA
UnregisterClassA
DestroyMenu
GetMenuItemInfoA
WindowFromPoint
SetWindowRgn
IsRectEmpty
FindWindowA
EndPaint
BeginPaint
GetWindowDC
GrayStringA
ChildWindowFromPoint
SetPropA
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetViewportExtEx
GetMapMode
CreateEllipticRgn
LPtoDP
Ellipse
GetTextExtentPoint32A
GetRgnBox
GetBkColor
GetTextColor
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
SetTextColor
GetClipBox
CreateRectRgnIndirect
CreateCompatibleBitmap
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
CreateSolidBrush
CreateFontIndirectA
GetObjectA
DeleteObject
GetStockObject
CreatePatternBrush
GetWindowExtEx
SetBkColor
GetFileTitleA
OpenPrinterA
DocumentPropertiesA
ClosePrinter
GetSidSubAuthority
GetSidIdentifierAuthority
IsValidSid
GetTokenInformation
OpenProcessToken
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegDeleteValueA
CryptGenRandom
CryptAcquireContextA
CryptReleaseContext
RegCreateKeyExA
GetUserNameA
RegOpenKeyA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
RegCloseKey
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
GetSidSubAuthorityCount
CreateProcessAsUserA
GetLengthSid
DuplicateTokenEx
SetTokenInformation
SHGetSpecialFolderPathA
DragQueryFileA
ShellExecuteExA
Shell_NotifyIconA
DragFinish
InitCommonControlsEx
PathStripToRootA
PathFindFileNameA
PathCombineA
PathFindExtensionA
PathRenameExtensionA
PathStripPathA
PathRemoveFileSpecA
UrlEscapeA
PathIsUNCA
ord8
CoRevokeClassObject
OleFlushClipboard
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoCreateInstance
OleUninitialize
CoInitializeSecurity
OleInitialize
CoFreeUnusedLibraries
CLSIDFromProgID
CoCreateGuid
OleIsCurrentClipboard
SafeArrayDestroy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
DispCallFunc
VariantCopy
SysAllocStringByteLen
VariantChangeType
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayCreateVector
SysStringLen
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
OleCreateFontIndirect
select
closesocket
shutdown
send
ioctlsocket
htons
inet_addr
socket
WSAGetLastError
WSAStartup
connect
gethostbyname
recv
HttpOpenRequestA
InternetConnectA
InternetSetStatusCallback
HttpAddRequestHeadersA
InternetCloseHandle
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpSendRequestA
HttpQueryInfoA
InternetReadFileExA
InternetOpenA
InternetCombineUrlA
InternetSetCookieA
InternetGetCookieA
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
URLDownloadToFileA
IsValidURL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ