Static task
static1
Behavioral task
behavioral1
Sample
ICEECC.chm
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ICEECC.chm
Resource
win10v2004-20231222-en
Behavioral task
behavioral3
Sample
ICEECC.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
ICEECC.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
新云软件.url
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
新云软件.url
Resource
win10v2004-20231215-en
General
-
Target
1016c8e8f3bc1349cf2b9814104dffc1
-
Size
629KB
-
MD5
1016c8e8f3bc1349cf2b9814104dffc1
-
SHA1
7bad6b3b83a988bdb5de590639eef9c628bb08e6
-
SHA256
b3a6f1b49c2dd664ac2a6744375672638756af3ac3ed6e79b76c2924feb733ad
-
SHA512
d89f9e9e2f5f33a3f754e25958a0b8b521cd3f24baaf221ffabdb4be0aa56fdc14b18a0b859e4ec9c6d1f06cbd04cf468c038993a0ecb4dbeb5ec302c8c12147
-
SSDEEP
12288:UJb5DYhMi4qeqv4T9Y5COV27bD/voxHLPwkztgdZg7s8S2X96dOLmhHmVGXd:wNYhF4qe7/cuvWLPwStuZambhGVGN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ICEECC.exe
Files
-
1016c8e8f3bc1349cf2b9814104dffc1.rar
-
ICEECC.chm.chm
-
ICEECC.exe.exe windows:4 windows x86 arch:x86
70ddf9b9e0f4a69cacb3a0dcc69ab62d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
AdjustTokenPrivileges
mpr
WNetConnectionDialog1A
version
GetFileVersionInfoA
winspool.drv
ClosePrinter
comctl32
ImageList_Add
comdlg32
ChooseColorA
gdi32
BitBlt
shell32
DragQueryFileA
user32
ActivateKeyboardLayout
ole32
CoCreateInstance
oleaut32
GetActiveObject
Sections
.text Size: 599KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
新云软件.url.url