PcCleaner[.]exe | Triage

Resubmissions

21/02/2024, 13:41

240221-qzgzesgb2x 3

21/02/2024, 13:40

240221-qyta3aga8x 3

Sharing

Copy URL Twitter E-mail

General

Target

PcCleaner.exe
Size

7.4MB
MD5

fa25673b0acda0498747d6a9306ee6fd
SHA1

67c891d0f66f7d7e5f12a32ef06e7fedb7e2bf7e
SHA256

1241ee5c6a93307489bb3b465c4b8950e30bef64676eefe67d2e8d575097f673
SHA512

5aa0c623ed65440d80b411f0fb0a167382552dbafcad3d9b7048da6ea51449399dc64eaefae134efdd5eff65b68a028b2955e5324895e9f4bcc4faa559fa5d8b
SSDEEP

98304:Tp60G5TYsqF8M1Lp6uZsZgjvovuXUz4pOPSloKwZK4AR9yHaTO:TpNCTYX8M1LI5VuXUzalUA+HWO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PcCleaner.exe

Files

PcCleaner.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Elliotalderson\Desktop\New folder (2)\PcCleaner\obj\Debug\PcCleaner.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ