Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-25_df9cc0b64c83a9b236b4dc7bf86117af_icedid.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2024-08-25_df9cc0b64c83a9b236b4dc7bf86117af_icedid.exe
Resource
win10v2004-20240802-en
Target
2024-08-25_df9cc0b64c83a9b236b4dc7bf86117af_icedid
Size
1.1MB
MD5
df9cc0b64c83a9b236b4dc7bf86117af
SHA1
4d6420c20797e97fdaeca0a5bff32f072a4771f7
SHA256
a5e42f3de4a8ec303626280c429d1b08301d3d331ad09d8034fe00953ef0011f
SHA512
616c20131667d66ef2e471909886105ecbc9f482d78f02af539063c9d4a87a11cc49e88ebbbfeb59667969e92634c42edeefa608b4db411b059f6982f6978b80
SSDEEP
24576:Bb6XRoTJs6e4pBrk8yqc/fbXH/TApbod2auZU89R3/:BWXuT26e4pBA5h7TApbod2aeU89RP
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
E:\work\giantcybos\_pdbim\ncStarter.pdb
GdipGetImageHeight
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipTranslateWorldTransform
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteFont
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatFlags
GdipDrawString
GdipCreatePen1
GdipDeletePen
GdipDrawLineI
GdipDrawImageI
GdipCloneBitmapAreaI
GdipSaveGraphics
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipMeasureString
GdipFillRectangle
GdipRestoreGraphics
GdipDrawImageRect
GdipDrawRectangleI
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipSetStringFormatTrimming
GdipFree
ProcessCancel
FindClose
lstrlenW
CreateToolhelp32Snapshot
Process32First
Process32Next
lstrcpyA
GetFileSize
ReadFile
MulDiv
FreeResource
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetModuleFileNameW
lstrcmpA
InterlockedExchange
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
FindNextFileA
FileTimeToLocalFileTime
GetThreadLocale
WriteFile
GetEnvironmentVariableA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
GetFileAttributesExA
GetFileSizeEx
GetModuleHandleW
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
UnhandledExceptionFilter
IsDebuggerPresent
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
HeapFree
ExitThread
GetTimeZoneInformation
GetCommandLineA
GetStartupInfoA
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
SetStdHandle
GetFileType
HeapSize
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetStdHandle
FindFirstFileA
VirtualFree
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetDriveTypeA
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
GetVersionExA
CopyFileA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileTime
GetSystemDirectoryA
GetWindowsDirectoryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetExitCodeThread
WaitForMultipleObjects
GetCurrentThread
SetErrorMode
SetEnvironmentVariableA
CreateDirectoryA
CreateThread
LoadLibraryExA
TerminateThread
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
CreateProcessA
GetVersion
GetCurrentDirectoryA
SetCurrentDirectoryA
WinExec
MultiByteToWideChar
DeleteFileA
GetTempFileNameA
GetTempPathA
lstrlenA
InterlockedDecrement
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GetTickCount
IsBadWritePtr
GetSystemTime
LocalFree
Sleep
OpenProcess
FreeLibrary
SetLastError
WaitForSingleObject
CreateRemoteThread
GetExitCodeProcess
DuplicateHandle
GetLastError
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
GetProcAddress
LoadLibraryA
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
VirtualQuery
GetModuleHandleA
FormatMessageA
SetUnhandledExceptionFilter
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
OutputDebugStringA
GetFileAttributesA
GetProcessHeap
SetFilePointer
CharUpperA
ValidateRect
TranslateMessage
GetMessageA
ShowOwnedPopups
GetMenuItemInfoA
DestroyMenu
WindowFromPoint
GetSysColorBrush
CopyAcceleratorTableA
InvalidateRgn
TranslateAcceleratorA
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
CharNextA
UnregisterClassA
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
GetCursorPos
SetCursor
LoadCursorA
IsRectEmpty
WaitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
MoveWindow
IsDialogMessageA
SendDlgItemMessageA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetClassInfoExA
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowContextHelpId
CallWindowProcA
GetMenu
IntersectRect
GetWindowPlacement
GetWindow
GetLastActivePopup
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetWindowLongA
CreateWindowExA
RegisterClassA
GetClassInfoA
DestroyWindow
GetDlgItem
GetDC
GetDesktopWindow
UpdateWindow
DrawFocusRect
WinHelpA
SetWindowTextA
GetWindowTextLengthA
RegisterWindowMessageA
DefWindowProcA
GetFocus
DrawIcon
MessageBoxA
ExitWindowsEx
AppendMenuA
GetSystemMenu
LoadIconA
SetActiveWindow
SetWindowPos
IsWindowVisible
GetWindowThreadProcessId
GetWindowTextA
SetForegroundWindow
ShowWindow
IsIconic
RedrawWindow
GetDCEx
ReleaseDC
GetWindowDC
DestroyIcon
DrawStateA
GetIconInfo
GetSystemMetrics
IsWindowEnabled
GetSysColor
InflateRect
CopyRect
GetWindowLongA
PostThreadMessageA
SetTimer
KillTimer
wsprintfA
SetWindowRgn
PtInRect
SetRect
OffsetRect
SystemParametersInfoA
GetParent
LoadImageA
FillRect
GetClientRect
InvalidateRect
ReleaseCapture
EqualRect
SetCapture
ScreenToClient
PostMessageA
IsWindow
GetWindowRect
EnableWindow
SendMessageA
MapDialogRect
GetDlgCtrlID
PostQuitMessage
SetFocus
SaveDC
RestoreDC
SetBkMode
SetTextColor
SetMapMode
GetClipBox
LineTo
MoveToEx
DeleteDC
CreatePatternBrush
CreateBitmap
GetStockObject
SelectPalette
CreateRectRgnIndirect
GetMapMode
DPtoLP
CreateEllipticRgn
LPtoDP
Ellipse
GetRgnBox
GetBkColor
GetTextColor
SelectClipRgn
GetTextMetricsA
ScaleWindowExtEx
SetWindowExtEx
GetTextExtentPoint32A
SetBkColor
ExtTextOutA
SetPixel
CreateBrushIndirect
SelectObject
CreateCompatibleBitmap
RoundRect
CreateRoundRectRgn
CreatePen
CreatePalette
GetDIBColorTable
CreateHalftonePalette
BitBlt
RealizePalette
GetDeviceCaps
CreateCompatibleDC
Arc
CreateFontIndirectA
ExtSelectClipRgn
GetObjectA
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
GetPixel
DeleteObject
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
GradientFill
GetFileTitleA
OpenPrinterA
DocumentPropertiesA
ClosePrinter
RegSaveKeyA
RegCreateKeyExA
RegEnumKeyA
RegDeleteValueA
RegQueryValueA
RegRestoreKeyA
RegCreateKeyA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
SHGetFolderPathA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
DragQueryFileA
DragFinish
SHGetMalloc
_TrackMouseEvent
ord17
SHCreateStreamOnFileW
PathFindExtensionA
PathStripToRootA
PathIsUNCA
UrlUnescapeA
PathFindFileNameA
ord8
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoFreeUnusedLibraries
VariantInit
VariantClear
OleCreateFontIndirect
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetVartype
SafeArrayCopy
SafeArrayDestroy
SafeArrayLock
SafeArrayUnlock
SysFreeString
VarDateFromStr
VariantTimeToSystemTime
SystemTimeToVariantTime
VarUdateFromDate
SysAllocString
SysStringLen
SysAllocStringLen
VarBstrCat
SysAllocStringByteLen
SysStringByteLen
DispCallFunc
VariantChangeType
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
WSASetLastError
sendto
recvfrom
WSAAsyncSelect
getsockname
inet_ntoa
setsockopt
recv
send
select
accept
bind
htonl
closesocket
connect
socket
htons
shutdown
WSACleanup
WSAStartup
WSAAsyncGetHostByName
inet_addr
WSAGetLastError
gethostbyname
ioctlsocket
ord67
InternetOpenUrlA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetQueryOptionA
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
InternetQueryDataAvailable
InternetCrackUrlA
InternetSetStatusCallback
InternetCanonicalizeUrlA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ