Ice9[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Ice9.exe
Size

48KB
MD5

56f9f6e4782e6ab95191c56f3842e0f3
SHA1

00f2a2a154b9d976f9e2d63c6467a132b6c228f5
SHA256

fde6c50982fbb5f27409ca084c2843ca604c39d71d6ca611c261153a658c4868
SHA512

ed12b0903ce1e9e6cd917b8c338dd8efd1cc35cbc8070e610798424c42ad1d92d559dd29e9d63289a5c0fca48eba0f0674b6530964954726f55e848ae68997fd
SSDEEP

768:uaSa/8XuqB1v6x+hK+YfIjxznOnjvr1pmm59M3Ta4:7Sa/8XuqB1vA+hKrfIjxznOnjvp5R4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ice9.exe

Files

Ice9.exe
.exe windows:4 windows x86 arch:x86

664a244a2cac141705d5a7e5672b8788

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
LoadIconA
GetDlgItemTextA
EndDialog
SendMessageA
PostMessageA
DialogBoxParamA

kernel32

lstrcmpA
IsDebuggerPresent
GetModuleHandleA
ExitProcess
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 806B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE