Static task
static1
Behavioral task
behavioral1
Sample
click1.4/click4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
click1.4/click4.exe
Resource
win10v2004-20231215-en
General
-
Target
0e12a62c9cab38a354a6bf5c5b300d01
-
Size
9KB
-
MD5
0e12a62c9cab38a354a6bf5c5b300d01
-
SHA1
3304a817da7adeb8d4054e01682ecbfe67f18771
-
SHA256
49cd3e1fcfa5fd617bce72dcb96004d35ca23a36944490698bf4bf7963f40f99
-
SHA512
2fe1229db26f7a831265913ec61cb648af4fff2a0adfe5fb4e70363811ad94c84a915c04d08e90b3b24d87101bc51f1380650b6171614672acb588e306a5b0af
-
SSDEEP
192:w0rnOzdMnNY6zmDRnqcSHwWcDtnRkkQKUT9wfPcHtNvx3YSUY2aKW1hSzjkKX7rN:weOCNZzwqcSwzQB2n2tRuS/FKChlKXN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/click1.4/click4.exe
Files
-
0e12a62c9cab38a354a6bf5c5b300d01.zip
-
click1.4/click4.exe.exe windows:4 windows x86 arch:x86
a76fc6a45da5cee349dc51ed26951d29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc40
ord2199
ord3578
ord1539
ord3890
ord4657
ord2086
ord4608
ord5647
ord3837
ord4694
ord3314
ord4296
ord3922
ord2323
ord1785
ord5649
ord3268
ord4510
ord1494
ord4677
ord2140
ord1850
ord4691
ord2617
ord2754
ord2843
ord3945
ord2744
ord2845
ord2620
ord2696
ord3345
ord3346
ord3340
ord2694
ord3580
ord4101
ord3907
ord3134
ord570
ord315
ord4173
ord5360
ord1014
ord1035
ord706
ord5275
ord2707
ord1061
ord3656
ord486
ord2514
ord2081
ord662
ord421
ord2713
ord4142
ord3761
ord5648
ord3963
ord2234
ord2197
ord5070
ord3431
ord965
ord4627
ord2097
ord2909
ord4713
ord4681
ord2390
ord3579
ord4165
ord4719
ord4703
ord5053
ord4096
ord3906
ord3259
ord721
ord504
ord2299
ord1060
ord1100
ord3859
ord4450
ord4312
ord731
ord3724
ord4715
ord1368
msvcrt40
malloc
rand
fgetc
fseek
fopen
__dllonexit
_onexit
_exit
_XcptFilter
__p__acmdln
_initterm
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fclose
free
exit
sprintf
atoi
fscanf
__CxxFrameHandler
_setmbcp
kernel32
Sleep
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
user32
AppendMenuA
GetSystemMenu
DrawIcon
GetClientRect
SendMessageA
GetSystemMetrics
IsIconic
KillTimer
SetTimer
EnableWindow
LoadIconA
PostMessageA
wsock32
sendto
htons
socket
getprotobyname
WSAGetLastError
ioctlsocket
htonl
WSACleanup
gethostbyname
closesocket
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
click1.4/loginclub Readme File.txt