General

  • Target

    Icecream Screen Recorder 7.rar

  • Size

    25.4MB

  • MD5

    0461b0923b94a356bab0d476124c60f9

  • SHA1

    c75cee4ca4bfce1236efe6f56e8ec134dc19e779

  • SHA256

    5cffa9685fb8b4a9549df42fe6c53395bd8f8aaf1b7f3ebf91e6479213adeca8

  • SHA512

    d2d86069d1b67da332ce18c06825a0d963f4b33a07f8913bb9c1521661e5e684cb2f64d99f3870525beea6fc87527ca2a676e0fdc43f3012479357d8d7955365

  • SSDEEP

    786432:Lpuds97nTVY4yBjVdSXoVFYOpneRvEQCYo5:1uO97nTC4y/dnVXn89r4

Score
10/10

Malware Config

Signatures

  • Privateloader family
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Icecream Screen Recorder 7.rar
    .rar

    Password: infected

  • CrashRpt1403.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    1f538bfa26a057bded62c34d0ee5b88f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • D3DCaptureHook32.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    26d36f90441e58417fd694c69e8bf902


    Code Sign

    Headers

    Imports

    Sections

  • D3DCaptureHook64.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    ec8a69bf961a7ca6330ddafc925b2ff2


    Code Sign

    Headers

    Imports

    Sections

  • EasyHook32.dll
    .dll windows:6 windows x86 arch:x86

    Password: infected

    4557d7530177a52b9338ffbd3c0273e5


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EasyHook64.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    7c733a77800d92600b3d036b64da29bb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • InjectHelper32.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected

    6716cc281fc8ca9fdf4b2064e79288d7


    Code Sign

    Headers

    Imports

    Sections

  • InjectHelper64.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    e559bd2003f0da0b64ef1056bdc67860


    Code Sign

    Headers

    Imports

    Sections

  • Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    Password: infected

    1e6263469521ddbc83e11e22a614faff


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:6 windows x64 arch:x64

    e3e00d6eb39ecd3562ba972abbe8438a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Multimedia.dll
    .dll windows:6 windows x64 arch:x64

    7600665a844daa64d88eb4f04005092e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    05d7646f0d7237808f2d038b382445e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5OpenGL.dll
    .dll windows:6 windows x64 arch:x64

    926889212c357325158cc4214819c684


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Svg.dll
    .dll windows:6 windows x64 arch:x64

    43704061e0dc7a122e303498f23cccee


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:6 windows x64 arch:x64

    ba02010326b1d901d31c405cdc4dd290


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5WinExtras.dll
    .dll windows:6 windows x64 arch:x64

    4d6ab7549ef232512fa12fd6861fdbe4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt5Xml.dll
    .dll windows:6 windows x64 arch:x64

    24d9a9d9da6c15ddc1476bd55d0caeea


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtAV1.dll
    .dll windows:6 windows x64 arch:x64

    c1d32d04c29ff8e015f09ef2073e85a1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • QtAVWidgets1.dll
    .dll windows:6 windows x64 arch:x64

    b24985978971eefd11798bc7e5ca4578


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Uninstall.dat
  • Uninstall.exe
    .exe windows:1 windows x86 arch:x86


    Headers

    Sections

  • api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-console-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-file-l2-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-interlocked-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-libraryloader-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-localization-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-memory-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-namedpipe-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processenvironment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processthreads-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-processthreads-l1-1-1.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-profile-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-rtlsupport-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-synch-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-synch-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-sysinfo-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-timezone-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-core-util-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-conio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-convert-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-environment-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-filesystem-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-heap-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-locale-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-math-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-multibyte-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-private-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-process-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-runtime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-stdio-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-string-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-time-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • api-ms-win-crt-utility-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • audio/qtaudio_wasapi.dll
    .dll windows:6 windows x64 arch:x64

    287f50428a22bd92f0b1c07f7a5828e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • audio/qtaudio_windows.dll
    .dll windows:6 windows x64 arch:x64

    4ab733e1ad562f4e3aa7674701491c75


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avcodec-58.dll
    .dll windows:6 windows x64 arch:x64

    488704f337f50e27a562516a020ed650


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avdevice-58.dll
    .dll windows:6 windows x64 arch:x64

    4e32c0a5ef052a04f0a887f13e051532


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avfilter-7.dll
    .dll windows:6 windows x64 arch:x64

    d72818811a448356dc98a03893c838e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avformat-58.dll
    .dll windows:6 windows x64 arch:x64

    378727eceea4396c654856c91fec166e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • avutil-56.dll
    .dll windows:6 windows x64 arch:x64

    e7e20a621382ab3b2af9336d7fe34a55


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • concrt140.dll
    .dll windows:6 windows x64 arch:x64

    0e53a682f1331df9628488b9ca56f28b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • d3dcompiler_47.dll
    .dll windows:6 windows x64 arch:x64

    2ce80dc262aecd9b9f45ee13d6b30c08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.exe
    .exe windows:6 windows x64 arch:x64

    6cbaa14d49481ad4207fc37d441507a0


    Code Sign

    Headers

    Imports

    Sections

  • iceupdater.exe
    .exe windows:6 windows x64 arch:x64

    860d5d328e904661ad4f5683212a3fd1


    Code Sign

    Headers

    Imports

    Sections

  • iconengines/qsvgicon.dll
    .dll windows:6 windows x64 arch:x64

    cb7bcafac90ccee76bfa5d1af9cbb951


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qgif.dll
    .dll windows:6 windows x64 arch:x64

    83ab23a3497602da865da8cb952268f4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qicns.dll
    .dll windows:6 windows x64 arch:x64

    68eb3d9bbb362d72fd269c31936761fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qico.dll
    .dll windows:6 windows x64 arch:x64

    35e88ae047c52cbe14244b0b041c3d03


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qjpeg.dll
    .dll windows:6 windows x64 arch:x64

    bb20e83974c98263f528b6a929a02bdf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qsvg.dll
    .dll windows:6 windows x64 arch:x64

    2cf21fe757a0a84f5b8a5594668ca036


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qtga.dll
    .dll windows:6 windows x64 arch:x64

    ef2c5c6155747fc02b253383fdc2b1d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qtiff.dll
    .dll windows:6 windows x64 arch:x64

    9fe4e69f865bd693d0a0abfdb4d03dc3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwbmp.dll
    .dll windows:6 windows x64 arch:x64

    305f5f129c922b027d0dae792141dfe6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • imageformats/qwebp.dll
    .dll windows:6 windows x64 arch:x64

    75ef711dbfdc9de487f7cfea43217256


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcrypto-1_1-x64.dll
    .dll windows:5 windows x64 arch:x64

    6faee67a691b5510cdbffa2f65fadb6a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcurl.dll
    .dll windows:6 windows x64 arch:x64

    a151106858e821da5c428774e0128835


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libmp3lame.dll
    .dll windows:6 windows x64 arch:x64

    59d603cfa32f222002ee5fff7a9b8b92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libssl-1_1-x64.dll
    .dll windows:5 windows x64 arch:x64

    0741defe9a1a1e75aa2cbc19a5413b3c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mediaservice/dsengine.dll
    .dll windows:6 windows x64 arch:x64

    889d8030c65f580ddd002fbfacbe74a4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • mousehelper.dll
    .dll windows:6 windows x64 arch:x64

    a1acc976507c9b3a507bc5b5fd01d770


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x64 arch:x64

    d0a59246eab41d54812cd63c2326e1f1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    01c801a34c4715440ef1f25ad689b315


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    d698236340cc3612125f06edd4fce39a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x64 arch:x64

    8f18e22935ef8b336e246ee763fbec97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • openh264.dll
    .dll windows:6 windows x64 arch:x64

    3f907e39ed058357c0213467126c5eb3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • platforms/qwindows.dll
    .dll windows:6 windows x64 arch:x64

    92e0525f02a795904ec7d4181c0ab80b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • proportions.txt
  • quickshot.exe
    .exe windows:6 windows x64 arch:x64

    75d6f82ffba6c6f3c22e5e23ef849bf6


    Code Sign

    Headers

    Imports

    Sections

  • recorder.exe
    .exe windows:6 windows x64 arch:x64

    53f56898df47325d47adcb34d5b34abd


    Headers

    Imports

    Exports

    Sections

  • styles/qwindowsvistastyle.dll
    .dll windows:6 windows x64 arch:x64

    d4beaa07edfc6ae2d4ca3e7160b18eb3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • swresample-3.dll
    .dll windows:6 windows x64 arch:x64

    2a69795357f138aa9891451197daae96


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • swscale-5.dll
    .dll windows:6 windows x64 arch:x64

    50285811a3f2cae9fb6865b39d035d74


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • translations/lang_af.qm
  • translations/lang_ar.qm
  • translations/lang_be.qm
  • translations/lang_bg.qm
  • translations/lang_bs.qm
  • translations/lang_cs.qm
  • translations/lang_da.qm
  • translations/lang_de.qm
  • translations/lang_el.qm
  • translations/lang_en.qm
  • translations/lang_es.qm
  • translations/lang_et.qm
  • translations/lang_fi.qm
  • translations/lang_fil.qm
  • translations/lang_fr.qm
  • translations/lang_ga.qm
  • translations/lang_hr.qm
  • translations/lang_hu.qm
  • translations/lang_hy.qm
  • translations/lang_id.qm
  • translations/lang_is.qm
  • translations/lang_it.qm
  • translations/lang_ja.qm
  • translations/lang_ka.qm
  • translations/lang_kk.qm
  • translations/lang_ko.qm
  • translations/lang_lt.qm
  • translations/lang_lv.qm
  • translations/lang_mn.qm
  • translations/lang_ms.qm
  • translations/lang_mt.qm
  • translations/lang_my.qm
  • translations/lang_nb_NO.qm
  • translations/lang_nl.qm
  • translations/lang_pl.qm
  • translations/lang_pt.qm
  • translations/lang_ro.qm
  • translations/lang_ru.qm
  • translations/lang_si.qm
  • translations/lang_sk.qm
  • translations/lang_sl.qm
  • translations/lang_sq.qm
  • translations/lang_sr.qm
  • translations/lang_sv.qm
  • translations/lang_th.qm
  • translations/lang_tr.qm
  • translations/lang_uk.qm
  • translations/lang_vi.qm
  • translations/lang_zh.qm
  • ucrtbase.dll
    .dll windows:10 windows x64 arch:x64

    405cde0fc80c30dcc3d783173dbd4143


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • uservice.exe
    .exe windows:6 windows x64 arch:x64

    ecca16d620c12787b86480ded502e435


    Code Sign

    Headers

    Imports

    Sections

  • vccorlib120.dll
    .dll windows:6 windows x64 arch:x64

    85727cb86aafd871280ffe38ff204b60


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    ae0bde6314fa2027b54ce04898f6ab69


    Code Sign

    Headers

    Imports

    Exports

    Sections