ICEEncrypt[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ICEEncrypt.exe
Size

195KB
MD5

c794348cdf82ba3d8ddc4cbb3e934c76
SHA1

2d50d63602ec14b19109180f2067cefaa52a4a98
SHA256

ccac293db7caff45be92f97eb4cf4a2836feb15daec80e42da3aedf74bcb1c8e
SHA512

b0cf3d9f27ede57012736d9eed279d4e1057f7434c1b4e80fcccdfd7096515fb8f25c727ebac51ee8f3274879f024007193a1bda244dc281c906a0f1a950e767
SSDEEP

3072:E1AXuRlfDYWIFGkovNRJt/t6mXfECGTaJznc+s2WzmlOfF6kAahTEN7nQUraj:ZeR5VkolPt/0mslaRncSpOokxhknQUr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ICEEncrypt.exe

Files

ICEEncrypt.exe
.exe windows:4 windows x86 arch:x86

ef6113d52f015903072053b3c079c889

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegCloseKey

comctl32

ImageList_Add

comdlg32

GetOpenFileNameA

gdi32

BitBlt

shell32

SHBrowseForFolderA

user32

ActivateKeyboardLayout

ole32

CoInitialize

oleaut32

GetErrorInfo

Sections

.text
Size: 186KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE