E:\08.Tools\trunk\NPI\2022\Download_R27\tag_0510\Source\Common\pdb\UpgradeDownload.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2025-02-03_97a45cea8429ad5bed27f1fa8aef2b0f_floxif_icedid_luca-stealer.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2025-02-03_97a45cea8429ad5bed27f1fa8aef2b0f_floxif_icedid_luca-stealer.exe
Resource
win10v2004-20250129-en
General
-
Target
2025-02-03_97a45cea8429ad5bed27f1fa8aef2b0f_floxif_icedid_luca-stealer
-
Size
4.6MB
-
MD5
97a45cea8429ad5bed27f1fa8aef2b0f
-
SHA1
860a95d0798c10dea57d71068a3b432ce2bd8c79
-
SHA256
937206492ef148e89a8c73a5bbe78825022fe976217e57c10b4b260e84ffe7ef
-
SHA512
150da2e140d2d6b7c34cc5d3d5f629a3911057c42f44b5c4e74d114743b56f8378fe254f5a77445a6eb8ca50cb22ea6c0696b2f7f76adf1b03cb98fe8a5643de
-
SSDEEP
98304:Gz3Zv0elbHRP20SBKoGh9KHzlXzifmXuxFOJLcz8WgOpZbSF:UZcfrRF0Ycz8WgOpZbSF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-02-03_97a45cea8429ad5bed27f1fa8aef2b0f_floxif_icedid_luca-stealer
Files
-
2025-02-03_97a45cea8429ad5bed27f1fa8aef2b0f_floxif_icedid_luca-stealer.exe windows:6 windows x86 arch:x86
6755adc4f335e81b3c5f04ff28c26db1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
kernel32
GetFileType
SetStdHandle
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
ExitProcess
GetTimeZoneInformation
MoveFileExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetStringTypeW
GetLocaleInfoEx
LCMapStringEx
GetCPInfo
CompareStringEx
OutputDebugStringW
GetStdHandle
GetConsoleCP
GetConsoleMode
FreeLibraryAndExitThread
GetDriveTypeW
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
ReadConsoleW
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
ResetEvent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
LocalUnlock
LocalLock
SearchPathW
GetProfileIntW
GetTempPathW
VerifyVersionInfoW
SetFilePointerEx
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
GetCurrentDirectoryW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
SetErrorMode
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
GetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
VirtualProtect
GlobalGetAtomNameW
GetUserDefaultLCID
SystemTimeToFileTime
ReplaceFileW
SetFileTime
GetTempFileNameW
GetDiskFreeSpaceW
CompareStringA
GetCurrentThread
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
SetEvent
lstrcmpA
GetVersionExW
GetCurrentProcessId
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
GetThreadLocale
GetStringTypeExW
MoveFileW
lstrcmpiW
LoadLibraryW
LoadLibraryA
GetModuleHandleA
GetCurrentProcess
DuplicateHandle
OutputDebugStringA
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
FlushFileBuffers
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetModuleHandleW
SetLastError
FileTimeToLocalFileTime
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
RaiseException
DecodePointer
WriteFile
FindNextFileW
WritePrivateProfileStringW
GetTickCount
CopyFileW
CreateThread
GetExitCodeProcess
Sleep
GetLocalTime
lstrcpynW
lstrlenW
lstrcatW
lstrcpyW
GetPrivateProfileStringW
GetPrivateProfileIntW
CreateProcessW
WaitForSingleObject
WideCharToMultiByte
GetModuleFileNameA
GetFileAttributesA
CreateDirectoryA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameW
GetLastError
SetFileAttributesW
RemoveDirectoryW
GetFileAttributesW
FindFirstFileW
FindClose
DeleteFileW
WriteConsoleW
CreateDirectoryW
MultiByteToWideChar
CloseHandle
ReadFile
GetFileTime
GetFileSize
CreateFileW
LoadLibraryExW
GetProcAddress
FreeLibrary
SetEnvironmentVariableW
SetConsoleCtrlHandler
SetCurrentDirectoryW
ExitThread
user32
PostQuitMessage
GetMessageW
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
SendDlgItemMessageA
WindowFromPoint
GetCursorPos
LoadMenuW
MapVirtualKeyW
GetKeyNameTextW
GetWindowThreadProcessId
IsDialogMessageW
SetWindowTextW
ScrollWindowEx
IsWindowEnabled
SendDlgItemMessageW
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
IntersectRect
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
SetRectEmpty
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassLongW
SetWindowLongW
GetWindowLongW
EqualRect
AdjustWindowRectEx
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
SetFocus
GetDlgItem
IsIconic
IsWindowVisible
EndDeferWindowPos
SetCursor
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
SetWindowContextHelpId
MapDialogRect
DestroyMenu
GetDlgCtrlID
GetParent
SendMessageW
EnableWindow
DrawTextW
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
RegisterWindowMessageW
CharUpperW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuItemInfoW
SystemParametersInfoW
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
CreatePopupMenu
InsertMenuItemW
DestroyIcon
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
GetAsyncKeyState
GetDialogBaseUnits
GetSysColorBrush
GetMenuStringW
UnregisterClassW
GetClassNameW
IsWindow
PeekMessageW
EnumWindows
GetWindowTextW
EnableMenuItem
GetSystemMenu
MessageBoxW
PostMessageW
GetWindow
LoadCursorW
CopyImage
RealChildWindowFromPoint
DeleteMenu
SetParent
TrackMouseEvent
CharNextW
WaitMessage
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
UnionRect
GetDCEx
LockWindowUpdate
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
ShowOwnedPopups
GetWindowRect
GetSysColor
InvalidateRect
GetClientRect
LoadBitmapW
IsZoomed
CopyRect
FillRect
keybd_event
GetCaretPos
TranslateMessage
DispatchMessageW
GetFocus
SetRect
MessageBeep
GetKeyState
FrameRect
InflateRect
IsRectEmpty
LoadImageW
DrawFrameControl
GetMessagePos
GetCapture
SetCapture
ReleaseCapture
SetTimer
KillTimer
GetSystemMetrics
UpdateWindow
GetDC
ReleaseDC
ScreenToClient
MapWindowPoints
DrawFocusRect
OffsetRect
PtInRect
LoadIconW
DrawIcon
GetDesktopWindow
NotifyWinEvent
GetMenuDefaultItem
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
SetClassLongW
SetWindowRgn
DrawEdge
SetCursorPos
CopyIcon
RegisterClipboardFormatW
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
PostThreadMessageW
GetTabbedTextExtentW
DestroyCursor
GetWindowRgn
WindowFromDC
CreateMenu
InSendMessage
MonitorFromRect
SendNotifyMessageW
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
EnumChildWindows
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
DeferWindowPos
gdi32
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocW
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
TextOutW
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateRectRgnIndirect
ExcludeClipRect
PatBlt
SetRectRgn
DPtoLP
GetBkColor
GetCharWidthW
StretchDIBits
GetRgnBox
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
OffsetRgn
GetCurrentObject
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileW
DeleteMetaFile
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextFaceW
Escape
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreateDIBPatternBrushPt
CreateBitmap
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
SetTextColor
SetBkMode
CreateDIBSection
CreateFontW
ExtTextOutW
Rectangle
CreatePen
DeleteObject
DeleteDC
GetTextExtentPoint32W
CreateSolidBrush
GetTextColor
CreateCompatibleBitmap
GetObjectW
CreateFontIndirectW
CreateCompatibleDC
BitBlt
SelectObject
GetMapMode
GetTextMetricsW
GetStockObject
msimg32
TransparentBlt
AlphaBlend
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
GetJobW
advapi32
SetFileSecurityW
CryptReleaseContext
CryptGenRandom
RegCloseKey
RegSetValueW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyW
RegEnumKeyExW
RegEnumValueW
CryptAcquireContextW
GetFileSecurityW
RegQueryValueW
shell32
ShellExecuteW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHAddToRecentDocs
ExtractIconW
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHAppBarMessage
ShellExecuteExW
comctl32
_TrackMouseEvent
ImageList_AddMasked
ImageList_GetIconSize
ImageList_Draw
ImageList_DrawEx
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
shlwapi
PathCanonicalizeA
PathCanonicalizeW
PathFileExistsA
PathFileExistsW
PathIsRelativeA
PathIsRelativeW
PathIsRootA
PathRemoveBackslashA
PathRemoveBackslashW
PathRemoveFileSpecA
PathRemoveFileSpecW
PathIsDirectoryW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
StrFormatKBSizeW
PathFindFileNameW
PathRemoveExtensionW
PathIsRootW
uxtheme
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
IsAppThemed
DrawThemeBackground
GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeText
OpenThemeData
CloseThemeData
DrawThemeParentBackground
ole32
CoGetMalloc
OleRun
CoFreeUnusedLibraries
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
OleSetMenuDescriptor
OleLockRunning
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateFileMoniker
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoInitializeEx
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
StringFromGUID2
PropVariantCopy
OleRegGetMiscStatus
OleRegEnumVerbs
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoCreateInstance
OleIsRunning
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
OleUninitialize
OleInitialize
CoInitialize
CoUninitialize
WriteClassStm
GetHGlobalFromILockBytes
CreateGenericComposite
CreateItemMoniker
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
OleQueryLinkFromData
OleQueryCreateFromData
oleaut32
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysReAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SysAllocStringLen
SysAllocString
SafeArrayLock
SafeArrayUnlock
SysAllocStringByteLen
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
OleCreateFontIndirect
SysStringByteLen
VariantChangeType
VariantClear
SafeArrayGetLBound
VariantInit
SafeArrayGetUBound
SysFreeString
oledlg
OleUIBusyW
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundW
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 777KB - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 883KB - Virtual size: 883KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ