2025-01-03_f9c111434c903beae5f943ca086af381_floxif_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2025-01-03_f9c111434c903beae5f943ca086af381_floxif_icedid
Size

798KB
MD5

f9c111434c903beae5f943ca086af381
SHA1

7d1cbbad38d040f80c47fbc8d11cd0c4067f9007
SHA256

a2257d55b068a59d129bbe2ed05603349d6a7dae46b7dd26e9684e35b798eb02
SHA512

7f7aee5dc87dca118a28682944789b432b78cc30c01d515ad6294b2c561d1c788cb78f7bd1ff51761e5b7f6da74c5c8d25437a72b958d19dfe5f13dbba601e23
SSDEEP

12288:RDksyEnBfGGSF7h/nh1UofMhw6w6tBDDa+dd9NPPLmThXsARS0BjvrEH7Y:RKwGD3fMhwwRDa+ddLmTh8ARrEH7Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2025-01-03_f9c111434c903beae5f943ca086af381_floxif_icedid

Files

2025-01-03_f9c111434c903beae5f943ca086af381_floxif_icedid
.exe windows:5 windows x86 arch:x86

84a7c9dab6119f7d80b003cc040599d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Cap软件\Amcap\内部测试用\视频画面添加Log水印\天兴阳光 Source Code2\2010.07.21-AMCap v3.0.9 tianxingyangguang source code\Release_Unicode\amcap v3.0.9.pdb

Imports

winmm

timeGetTime

olepro32

ord250

kernel32

GetFileSizeEx
GetFileTime
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetCurrentDirectoryW
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
HeapReAlloc
HeapSize
ExitThread
CreateThread
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
FatalAppExitA
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
SetFileTime
LocalFileTimeToFileTime
IsValidCodePage
GetTimeZoneInformation
LCMapStringW
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
FileTimeToLocalFileTime
SetErrorMode
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetModuleHandleA
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
GlobalFlags
SystemTimeToFileTime
FileTimeToSystemTime
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
lstrlenA
lstrcmpA
GetAtomNameW
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
GetStringTypeExW
DeleteFileW
MoveFileW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
SetLastError
CopyFileW
FormatMessageW
LocalFree
MulDiv
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GetFileAttributesW
CreateDirectoryW
WriteFile
lstrcmpiW
LoadLibraryExW
MultiByteToWideChar
FreeLibrary
RaiseException
GetLastError
GetModuleFileNameW
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceW
Sleep
GetCurrentProcessId
WriteProfileStringW
CreateFileW
GetSystemTimeAsFileTime
GetFileSize
CloseHandle
WideCharToMultiByte
GetSystemDirectoryW
LoadLibraryW
lstrlenW
GetVersionExW
lstrcpyW
GetProfileStringW
GetProfileIntW
GetModuleHandleW
GetProcAddress
lstrcpynW
lstrcatW
RtlUnwind
ExitProcess
CreateFileA
SetFileAttributesW
SetEnvironmentVariableA

user32

GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetForegroundWindow
ShowScrollBar
IsWindowVisible
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
SetWindowPlacement
GetDlgCtrlID
CallWindowProcW
CopyRect
PtInRect
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetFocus
IsWindowEnabled
GetParent
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetWindowTextW
GetSysColor
CharNextW
LoadBitmapW
SetRect
SendDlgItemMessageW
EnableWindow
GetDlgItem
SetScrollInfo
RegisterHotKey
SetMenu
UnregisterHotKey
LoadMenuW
GetScrollPos
SetDlgItemInt
SetScrollPos
ScrollWindow
GetDlgItemInt
CheckDlgButton
GetDlgItemTextW
IsDlgButtonChecked
EndDialog
DialogBoxParamW
SetClassLongW
GetMenuItemCount
RemovePropW
GetPropW
SetPropW
GetClassNameW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
LoadStringW
wsprintfW
RemoveMenu
AppendMenuW
InvalidateRect
SetTimer
SetCursor
UpdateWindow
IsWindow
KillTimer
DestroyWindow
CreateDialogParamW
SendMessageW
SetFocus
GetWindowRect
GetClientRect
ClientToScreen
SetWindowPos
EnableMenuItem
CheckMenuItem
GetMenu
GetSubMenu
PostQuitMessage
GetAsyncKeyState
PostMessageW
BeginPaint
IsDialogMessageW
ScrollWindowEx
GetSysColorBrush
GetWindowThreadProcessId
ModifyMenuW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetNextDlgTabItem
CreateDialogIndirectParamW
GetActiveWindow
GetDesktopWindow
GetMenuItemInfoW
DestroyMenu
SystemParametersInfoW
ValidateRect
GetCursorPos
GetMessageW
FillRect
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetWindowDC
UnregisterClassW
DestroyIcon
GetDialogBaseUnits
SetRectEmpty
ShowOwnedPopups
DeleteMenu
BringWindowToTop
SetCapture
LockWindowUpdate
GetDCEx
UnionRect
SetParent
GetSystemMenu
IsRectEmpty
MapVirtualKeyW
GetKeyNameTextW
WindowFromPoint
UnpackDDElParam
EndPaint
SetDlgItemTextW
GetCapture
IsChild
WinHelpW
SendDlgItemMessageA
RegisterWindowMessageW
CharUpperW
CheckRadioButton
GetSystemMetrics
MoveWindow
DefWindowProcW
PeekMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
WaitMessage
MessageBoxW
LoadAcceleratorsW
LoadCursorW
LoadIconW
RegisterClassW
GetDC
ReleaseDC
CreateWindowExW
GetWindowLongW
SetWindowLongW
ShowWindow
SetWindowTextW
ReuseDDElParam
GetMenuBarInfo
ReleaseCapture
InsertMenuItemW
GetScrollInfo
CreatePopupMenu
InflateRect

gdi32

CreateBitmap
CreateFontIndirectW
GetTextExtentPoint32W
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocW
PtVisible
RectVisible
GetClipBox
CopyMetaFileW
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateHatchBrush
GetCharWidthW
StretchDIBits
CreateCompatibleBitmap
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetBkColor
GetDCOrgEx
TextOutW
CreateDCW
GetDeviceCaps
SetBkColor
SetTextColor
ExtTextOutW
PatBlt
CreateSolidBrush
CreateFontW
GetObjectW
StretchBlt
CreateCompatibleDC
CreateDIBitmap
BitBlt
DeleteObject
DeleteDC
GetStockObject
GetTextMetricsW
Escape
SelectObject

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

comdlg32

GetOpenFileNameW
GetFileTitleW

advapi32

RegSetValueExW
RegEnumKeyW
RegQueryValueW
RegCreateKeyW
RegOpenKeyW
RegSetValueW
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW

shell32

SHBrowseForFolderW
SHGetFileInfoW
ExtractIconW
DragFinish
DragQueryFileW
SHGetPathFromIDListW

ole32

CoTreatAsClass
ReleaseStgMedium
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateStreamOnHGlobal
CoTaskMemRealloc
CoTaskMemAlloc
CoGetMalloc
GetRunningObjectTable
CreateItemMoniker
CreateBindCtx
MkParseDisplayName
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx
OleDuplicateData
CoDisconnectObject
StringFromGUID2
CLSIDFromString
StringFromCLSID

oleaut32

SafeArrayCopy
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SysFreeString
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysStringLen
VarUI4FromStr

comctl32

CreateStatusWindowW

shlwapi

PathRemoveExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW

gdiplus

GdipCreateFromHWNDICM
GdipCreateFromHWND
GdipCreateBitmapFromGdiDib
GdipDrawImageRectI
GdipCloneImage
GdipDisposeImage
GdipSaveImageToStream
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDrawImageRect
GdipDeleteGraphics
GdiplusShutdown
GdiplusStartup
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipFree

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

Sections

.text
Size: 482KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

84a7c9dab6119f7d80b003cc040599d3

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winmm

olepro32

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

gdiplus

oleacc

Sections

.text Size: 482KB - Virtual size: 481KB

.rdata Size: 113KB - Virtual size: 113KB

.data Size: 11KB - Virtual size: 33KB

.rsrc Size: 114KB - Virtual size: 113KB

.text
Size: 482KB - Virtual size: 481KB

.rdata
Size: 113KB - Virtual size: 113KB

.data
Size: 11KB - Virtual size: 33KB

.rsrc
Size: 114KB - Virtual size: 113KB