ice2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ice2.exe
Size

48KB
MD5

7012b750b8606d5bc4d45b92aa180166
SHA1

dbe20f008eb64086ad797a66b9a622a4f66820b1
SHA256

c3cf845179728c8e0be5f813b85cd7fe1ee231f0086d9f55228d02f40863db4e
SHA512

8a9a01539e5f48777d74636ddb63626def35e6dc69b3b79cf5bc3f7433c16e7b4e1cb23deb4e628504d36cb9d9e7d48894bd143d6a3437b8fa26728c4bf5c130
SSDEEP

768:2aSa/8XuqB1v6x+hK+YfIjxznOnjvr1pmm59M3Ta4:TSa/8XuqB1vA+hKrfIjxznOnjvp5R4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ice2.exe

Files

ice2.exe
.exe windows:4 windows x86 arch:x86

664a244a2cac141705d5a7e5672b8788

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
LoadIconA
GetDlgItemTextA
EndDialog
SendMessageA
PostMessageA
DialogBoxParamA

kernel32

lstrcmpA
IsDebuggerPresent
GetModuleHandleA
ExitProcess
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE