c:\packages\EAInstaller\1.09.02\build\eainstaller\release\autorun7.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-09-13_aad0b1e7e9fc8e84c82b0be7985a30b9_icedid.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-13_aad0b1e7e9fc8e84c82b0be7985a30b9_icedid.exe
Resource
win10v2004-20240802-en
General
-
Target
2024-09-13_aad0b1e7e9fc8e84c82b0be7985a30b9_icedid
-
Size
556KB
-
MD5
aad0b1e7e9fc8e84c82b0be7985a30b9
-
SHA1
78c74592e496fcec3acd90f27f7eb87ccfa299b2
-
SHA256
34f84bc919fdd259667d67c55bf99053af151de58c1706dd52eab23fa7c4e527
-
SHA512
67b8f226c331247ff0a84e76a76a7d50440ed22a010f7bf14fe130037c0b1cfcb1c4d9bac3be10cf6fcb4fe87bd055f7329bf654dd4c589e5ed33057ea0726f3
-
SSDEEP
3072:X1OwAYWeRhgXPUKf3sUZp/Fe9wgosDECD8s9dTR4MYJslkxGjiYj1smqe3x9sd6Q:X5AQbkPX7ZpevEm5gGjVk2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-09-13_aad0b1e7e9fc8e84c82b0be7985a30b9_icedid
Files
-
2024-09-13_aad0b1e7e9fc8e84c82b0be7985a30b9_icedid.exe windows:4 windows x86 arch:x86
1d4584bdb85ed78c09287164574ba089
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
eainstall
?EAINSTALL_getUserIEVersionString@@YA_NPAD@Z
?EAINSTALL_getUserIEVersion@@YA_NPAM@Z
?EAINSTALL_getOS@@YAXPAD@Z
?EAINSTALL_installGameSpy@@YA_NXZ
?EAINSTALL_isGameSpyInstallRequired@@YA_NXZ
??1CEARegistry@@QAE@XZ
?EAINSTALL_installEAD@@YA_NXZ
?EAINSTALL_launchEAD@@YA_NPAD@Z
?getValue@CEARegistry@@QAEHPBDPADPAK@Z
?openKey@CEARegistry@@QAEHPAUHKEY__@@PBD@Z
??0CEARegistry@@QAE@XZ
?EAINSTALL_isEADInstallRequired@@YA_NXZ
?EAINSTALL_isFlashInstallRequired@@YA_NXZ
?EAINSTALL_InstallFlashAndShockwave@@YA_NXZ
?EAINSTALL_isFlashInstallRequiredForOnlineOnly@@YA_NXZ
?EAINSTALL_getCDFlashVersion@@YA_NPAD@Z
?EAINSTALL_getMinimumFlashVersion@@YA_NPAD@Z
?EAINSTALL_getUserFlashVersion@@YA_NPAD@Z
?EAINSTALL_InstallCommonEASO@@YA_NXZ
?EAINSTALL_isCommonEASOInstallRequired@@YA_NXZ
?EAINSTALL_getLocalizedReadmeFilename@@YAXPAD@Z
?EAINSTALL_createDesktopItem@@YA_NXZ
?EAINSTALL_runGameInstallSpecificExe@@YAHXZ
?EAINSTALL_createStartMenuItems@@YA_NXZ
?EAINSTALL_getStartMenuLocation@@YA_NPAD@Z
?EAINSTALL_getUseSlideShow@@YA_NXZ
?EAINSTALL_copyCacheFiles@@YA_NHPAHPADPAM0_JPAPAX@Z
?EAINSTALL_getInstallSize@@YA_JH@Z
?EAINSTALL_createDirectory@@YA_NPAD@Z
?EAINSTALL_askUserElectronicRegistation@@YAHXZ
?EAINSTALL_getIsGameElectronicRegistered@@YA_NXZ
?EAINSTALL_setStandardGameRegistryItems@@YA_NXZ
?EAINSTALL_setStartMenuLocation@@YAXPAD@Z
?EAINSTALL_getIsValidEAStartMenuLocation@@YA_NPAD@Z
?EAINSTALL_getProductDivision@@YAXPAD@Z
?EAINSTALL_getIsSufficentSpace@@YA_NPAD_J@Z
?EAINSTALL_getGameCacheSize@@YA_JXZ
?EAINSTALL_setGameSwapSize@@YAX_J@Z
?EAINSTALL_getGameHasStreaming@@YA_NXZ
?EAINSTALL_setGameCacheLocation@@YAXPAD@Z
?EAINSTALL_getIsValidEAPath@@YA?AW4PathStatus@@PAD@Z
?EAINSTALL_getIsValidDrive@@YA_NPAD@Z
?EAINSTALL_getToolsEULADeclineContinue@@YA_NXZ
?EAINSTALL_getToolsEULAAgreement@@YA_NPAD@Z
?EAINSTALL_getDisplayToolsEULA@@YA_NXZ
?EAINSTALL_getMinimumIEVersion@@YA_NPAM@Z
?EAINSTALL_setInstallationCompleted@@YAX_N@Z
?EAINSTALL_getSwapSize@@YAHPA_J@Z
?EAINSTALL_getCacheFull@@YAHPA_J@Z
?EAINSTALL_getCacheSatisfactory@@YAHPA_J@Z
?EAINSTALL_getCacheMinimum@@YAHPA_J@Z
?EAINSTALL_rebootSystem@@YA_NXZ
?EAINSTALL_getIsRebootRequired@@YA_NXZ
?EAINSTALL_runOnceOnReboot@@YAHPAD00@Z
?EAINSTALL_setRestartedStatus@@YA_N_N@Z
?EAINSTALL_askForCDKey@@YA_NXZ
?EAINSTALL_getERegDisplayName@@YAXPAD@Z
?EAINSTALL_setERegDisplayName@@YAXPAD@Z
?EAINSTALL_getIsCDKeyValid@@YA_NXZ
?EAINSTALL_isAdministrator@@YA_NXZ
?EAINSTALL_runGame@@YAHPAD@Z
?EAINSTALL_getGameCacheLocation@@YAXPAD@Z
?EAINSTALL_requestStartupCD@@YAHXZ
?EAINSTALL_getUseSplashScreen@@YA_NXZ
?EAINSTALL_getLanguagePrefix@@YA_NPAD@Z
?EAINSTALL_requestSpecificCD@@YAHH@Z
?EAINSTALL_setLanguage@@YA_NH@Z
?EAINSTALL_getAvailableLanguages@@YAPA_NXZ
?EAINSTALL_autoSelectLanguage@@YA_NPAHPAD@Z
?EAINSTALL_getWasGamePreviouslyInstalled@@YA_NXZ
?EAINSTALL_getSuppressionExe@@YA_NPAD@Z
?EAINSTALL_isThisProgramRunning@@YA_NPADH@Z
?EAINSTALL_getInstallFromLocation@@YAXPAD@Z
?EAINSTALL_setDirectXInstalled@@YAX_N@Z
?EAINSTALL_getDirectXInstalled@@YA_NXZ
?EAINSTALL_getRestartedStatus@@YA_NPAD@Z
?EAINSTALL_setFriendlyProductName@@YA_NPAD@Z
?EAINSTALL_getFriendlyProductName@@YA_NPAD@Z
?EAINSTALL_getProductName@@YA_NPAD@Z
?EAINSTALL_readSettings@@YA_NXZ
?EAINSTALL_forceLanguage@@YA_NH@Z
?EAINSTALL_setProductName@@YA_NPAD@Z
?EAINSTALL_init@@YA_NPAD@Z
?EAINSTALL_SetScreenSaverState@@YAXH@Z
?EAINSTALL_exeToTempAndRestart@@YAXPAD00@Z
?EAINSTALL_setAfterCDRequest@@YAXP6GHH@Z@Z
?EAINSTALL_setBeforeCDRequest@@YAXP6GHH@Z@Z
?EAINSTALL_setMessageBox@@YAXP6GHPAUHWND__@@PBD1I@Z@Z
?EAINSTALL_setDebugMode@@YAX_N@Z
?EAINSTALL_setInstallerWindowHandle@@YAXPAUHWND__@@@Z
?EAINSTALL_installDirectX@@YA_NPA_N@Z
?EAINSTALL_getMinimumIEVersionString@@YA_NPAD@Z
?EAINSTALL_getCDIEVersion@@YA_NPAM@Z
?EAINSTALL_getCDIEVersionString@@YA_NPAD@Z
?EAINSTALL_isDemo@@YA_NXZ
?EAINSTALL_getIsIEInstallerPresent@@YA_NXZ
?EAINSTALL_removeRunOnceOnReboot@@YA_NH@Z
?EAINSTALL_isIEInstallRequiredForOnlineOnly@@YA_NXZ
?EAINSTALL_InstallIE@@YA_NXZ
?EAINSTALL_InstallIE55Patch@@YA_NXZ
?EAINSTALL_isIEInstallRequired@@YA_NXZ
?EAINSTALL_getDebugMode@@YA_NXZ
?DebugMessageBox@@YGHPAUHWND__@@PBD1I@Z
?EAINSTALL_getMinimumDirectXVersionString@@YA_NPAD@Z
?EAINSTALL_getMinimumDirectXVersion@@YA_NPAM@Z
?EAINSTALL_getCDDirectXVersion@@YA_NPAM@Z
?EAINSTALL_getUserDirectXVersion@@YA_NPAM@Z
?EAINSTALL_isDirectXInstallRequired@@YA_NXZ
?EAINSTALL_getIsDirectXInstallerPresent@@YA_NXZ
?EAINSTALL_getCurrentlySelectedLanguage@@YAHPAD@Z
?EAINSTALL_getDirectXLicenseAgreement@@YA_NPAD@Z
?EAINSTALL_getDirectXEULAText@@YA_NPAPADPAIH@Z
?EAINSTALL_getStringFromDLLorEXE@@YA_NHPADH@Z
?EAINSTALL_freeDirectXEULAText@@YA_NPAPAD@Z
?EAINSTALL_cancelInstallGame@@YA_NPAH0PAM0@Z
?EAINSTALL_restore@@YA_NXZ
?EAINSTALL_setGameCacheSize@@YAX_J@Z
kernel32
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
InterlockedExchange
MultiByteToWideChar
WideCharToMultiByte
GetLastError
GetVersion
lstrcmpiA
lstrlenA
SizeofResource
LockResource
LoadResource
FindResourceA
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentDirectoryA
GetModuleHandleA
SetCurrentDirectoryA
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
FreeResource
GlobalFree
GlobalUnlock
GlobalLock
lstrcpyA
EnumResourceLanguagesA
ConvertDefaultLocale
GetModuleFileNameA
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
lstrcmpA
SetErrorMode
GetOEMCP
GetCPInfo
CreateFileA
GetCurrentProcess
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
WritePrivateProfileStringA
GlobalFlags
DeleteCriticalSection
InitializeCriticalSection
RaiseException
InterlockedDecrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
CloseHandle
GlobalAddAtomA
SetLastError
MulDiv
FormatMessageA
lstrcpynA
LocalFree
GetCurrentThread
GetCurrentThreadId
GlobalAlloc
GlobalDeleteAtom
user32
GetMenuItemInfoA
InflateRect
GetSysColorBrush
wsprintfA
LoadMenuA
DestroyMenu
UnpackDDElParam
ReuseDDElParam
ReleaseCapture
LoadAcceleratorsA
InvalidateRect
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
TrackPopupMenu
SetForegroundWindow
UpdateWindow
GetClientRect
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetClassInfoA
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
GetWindowTextA
SetWindowPos
SetFocus
LoadBitmapA
EnableWindow
LoadCursorA
MessageBoxA
LoadImageA
EndDialog
SendMessageA
GetNextDlgTabItem
GetParent
IsWindowEnabled
ShowWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
GetMenu
GetDlgItem
GetWindowLongA
IsWindow
DestroyWindow
CreateDialogIndirectParamA
GetSystemMetrics
SetActiveWindow
GetActiveWindow
GetDesktopWindow
PostQuitMessage
PostMessageA
GetSubMenu
GetMenuItemCount
GetMenuItemID
PeekMessageA
GetCursorPos
ValidateRect
GetLastActivePopup
ShowOwnedPopups
SetCursor
GetMenuState
gdi32
BitBlt
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
CreateSolidBrush
CreateCompatibleBitmap
GetTextExtentPoint32A
CreateFontIndirectA
DeleteObject
GetDeviceCaps
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
shell32
DragFinish
DragQueryFileA
ShellExecuteA
comctl32
ord17
ImageList_Draw
ImageList_GetImageInfo
ImageList_Destroy
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 372KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ