c:\Length\poem\favor\Wearcomplete.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2025-02-22_763e253ea36530b8209a104a39b6e685_icedid.exe
Resource
win7-20240903-en
General
-
Target
2025-02-22_763e253ea36530b8209a104a39b6e685_icedid
-
Size
613KB
-
MD5
763e253ea36530b8209a104a39b6e685
-
SHA1
2473f962fbf9732980e69c46bb28e60037aa28a8
-
SHA256
5ecc261daaeff24273d1ab2914b1eb2d4386c5d5ad40d7a934fec816237ec641
-
SHA512
12e6d73ec045aa6552365c94b78f4105fe295b0bf1b4d9adf79946cf21a758ac2a59ff8ad3e44a5b71e26c4a4caa845a77435d3dfa515c266fd0ed9c6b7c0a13
-
SSDEEP
12288:9Q+6Ii6F0WIxH9OijnA2cEMAPCeTA3CO6OpIR99g9ssdHPCHqKRgJBUM9Q3M2:u+6t6FeH8ijnA2cEfCLCnOpgNRgJBn9G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2025-02-22_763e253ea36530b8209a104a39b6e685_icedid
Files
-
2025-02-22_763e253ea36530b8209a104a39b6e685_icedid.exe windows:5 windows x86 arch:x86
6534a0e226579416f00550689302026d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
OpenEventA
CreateFileA
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetCPInfo
GetOEMCP
GetACP
HeapReAlloc
HeapSize
HeapAlloc
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetSystemInfo
VirtualAlloc
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
ExitProcess
GetModuleFileNameA
RaiseException
RtlUnwind
IsBadReadPtr
HeapValidate
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
InterlockedIncrement
InterlockedExchange
GetCurrentThread
GetLocaleInfoW
GlobalFlags
lstrlenA
lstrcmpA
FormatMessageW
GetModuleHandleA
SetEvent
CloseHandle
CompareStringW
LoadLibraryA
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExA
WideCharToMultiByte
GetCurrentProcessId
LocalReAlloc
TlsSetValue
GlobalAlloc
GlobalReAlloc
GlobalLock
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
LocalAlloc
LocalFree
LoadResource
TlsGetValue
LockResource
SizeofResource
FindResourceW
FreeLibrary
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
lstrlenW
GetModuleHandleW
GetProcAddress
GetAtomNameW
GlobalGetAtomNameW
GetLastError
SetLastError
GetWindowsDirectoryW
TlsAlloc
GetCurrentThreadId
RemoveDirectoryW
FindClose
VirtualProtectEx
GetCurrentDirectoryW
GetTempPathW
GetModuleFileNameW
Sleep
LoadLibraryW
GetSystemDirectoryW
WaitForSingleObject
CreateProcessW
InterlockedCompareExchange
user32
AdjustWindowRectEx
SetFocus
SetActiveWindow
GetFocus
DispatchMessageW
GetSysColor
MapWindowPoints
GetClientRect
LoadIconW
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
RegisterWindowMessageW
ValidateRect
GetSysColorBrush
FillRect
DrawTextW
DrawTextExW
GrayStringW
CreatePopupMenu
IsMenu
CheckMenuItem
EnableMenuItem
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuItemInfoW
GetSubMenu
InsertMenuItemW
ModifyMenuW
SetMenuItemBitmaps
LoadMenuW
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
GetActiveWindow
GetDesktopWindow
GetMenuCheckMarkDimensions
BringWindowToTop
UpdateWindow
InvalidateRect
IsWindowVisible
ShowOwnedPopups
GetTopWindow
ScreenToClient
SetForegroundWindow
GetForegroundWindow
LoadCursorW
ShowWindow
SetRectEmpty
SetCursor
ReleaseCapture
LoadAcceleratorsW
TranslateAcceleratorW
DestroyMenu
ReuseDDElParam
UnpackDDElParam
GetClipboardFormatNameA
GetClipboardFormatNameW
SystemParametersInfoW
PtInRect
InflateRect
GetWindow
GetCapture
SetWindowTextW
PeekMessageW
PostQuitMessage
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
GetKeyNameTextW
IsDlgButtonChecked
LoadBitmapW
SendMessageTimeoutW
CheckDlgButton
IsDialogMessageW
GetIconInfo
DrawEdge
DrawIconEx
WinHelpW
TrackPopupMenu
GetDlgItem
GetWindowTextW
GetKeyState
DestroyWindow
GetDlgCtrlID
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
MessageBoxW
GetWindowLongW
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetWindowThreadProcessId
TabbedTextOutW
PostMessageW
SendMessageW
IsWindow
UnhookWindowsHookEx
ole32
CoTaskMemAlloc
CoInitialize
CoUninitialize
StringFromCLSID
CoTaskMemFree
oleaut32
VariantInit
VariantChangeType
VariantClear
gdi32
DeleteObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
Escape
GetTextExtentPoint32W
TextOutW
GetPixel
BitBlt
RectVisible
PtVisible
SelectObject
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CreateFontIndirectW
CreatePatternBrush
ExtTextOutW
GetClipBox
SetTextColor
SetBkColor
GetObjectW
GetStockObject
GetObjectType
CreateSolidBrush
SetViewportExtEx
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
shell32
DragFinish
DragQueryFileW
advapi32
OpenThreadToken
RegQueryValueExW
RegOpenKeyExW
SetThreadToken
RevertToSelf
RegCloseKey
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 439KB - Virtual size: 438KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ