Static task
static1
Behavioral task
behavioral1
Sample
CCHookReloaded.zip
Resource
win10v2004-20240226-en
General
-
Target
CCHookReloaded.zip
-
Size
8.0MB
-
MD5
8b31426e6daf823be11f251087f39a1a
-
SHA1
89f25bd9774da464d823c1aa819474f2d393102d
-
SHA256
5de89debce98c0fe3422d2a0f4abca34c08e51175a18d3511abc2364e2218539
-
SHA512
bfb76a2a6f36cbcf30bafd63c15524ff4fa965796ec83bfab84539301950c88fbfeb015118adb2ac0ed433de63e31088767f3683f35afb9f6397ed9ebbe0ab9f
-
SSDEEP
196608:Hc2VwUM9Q4vatNuoOuYRV0JmpB+spsA4VxwPyyaweBGW3Q4yytnB:Hh6/FXQJeLUVxFl4WAG
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/CCHookReloaded/RENAME_ME.dll unpack001/CCHookReloaded/RENAME_ME.exe
Files
-
CCHookReloaded.zip.zip
-
CCHookReloaded/README.txt
-
CCHookReloaded/RENAME_ME.dll.dll windows:6 windows x86 arch:x86
145ecca2c83b1052748cacff63dc8db1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
recvfrom
sendto
htons
ioctlsocket
socket
kernel32
RaiseException
WriteConsoleW
SetEndOfFile
HeapSize
FlushFileBuffers
ReadConsoleW
GetModuleHandleA
GetProcAddress
TlsGetValue
GetTickCount
GetModuleFileNameA
CopyFileA
GetCurrentProcessId
ReadFile
SetStdHandle
CreateFileW
HeapReAlloc
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
DecodePointer
InitializeCriticalSectionEx
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
TlsAlloc
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetLocaleInfoW
IsValidLocale
user32
SendMessageA
FindWindowA
FindWindowExA
GetAsyncKeyState
SetTimer
GetKeyState
KillTimer
Sections
.text Size: 251KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 469KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CCHookReloaded/RENAME_ME.exe.exe windows:6 windows x86 arch:x86
c5f686da4e895698f79dc3696c399d19
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
WaitForSingleObject
GetExitCodeThread
CloseHandle
GetProcAddress
VirtualAllocEx
TerminateProcess
GetModuleHandleW
CreateRemoteThread
VirtualFreeEx
WriteConsoleW
HeapSize
ReadConsoleW
GetProcessHeap
CreateProcessW
WriteProcessMemory
MultiByteToWideChar
LocalFree
FormatMessageA
GetLocaleInfoEx
GetStringTypeW
WideCharToMultiByte
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetLastError
GetFileInformationByHandleEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapFree
GetFileSizeEx
SetFilePointerEx
GetFileType
HeapAlloc
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
HeapReAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
SetEndOfFile
user32
wsprintfW
MessageBoxW
comdlg32
GetOpenFileNameW
Sections
.text Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
CCHookReloaded/cch.pk3.zip
-
gfx/2d/nullshader.tga
-
gfx/2d/target_arrow.tga
-
gfx/crosshair/cross1.tga
-
gfx/crosshair/cross2.tga
-
gfx/crosshair/cross3.tga
-
gfx/crosshair/cross4.tga
-
gfx/crosshair/cross5.tga
-
gfx/effects/circle.tga
-
gfx/effects/colortable.tga
-
gfx/effects/disk.tga
-
gfx/effects/fusion.tga
-
gfx/effects/fx_white.tga
-
gfx/effects/grid.tga
-
gfx/effects/marble.tga
-
gfx/effects/matrix.tga
-
gfx/effects/plasma.tga
-
gfx/effects/q.jpg.jpg
-
gfx/effects/quad.tga
-
gfx/effects/quadmap2blue.jpg.jpg
-
gfx/effects/quadmap2brightred.jpg.jpg
-
gfx/effects/quadmap2brown.jpg.jpg
-
gfx/effects/quadmap2cyan.jpg.jpg
-
gfx/effects/quadmap2gold.jpg.jpg
-
gfx/effects/quadmap2green.jpg.jpg
-
gfx/effects/quadmap2matrixblue.jpg.jpg
-
gfx/effects/quadmap2purple.jpg.jpg
-
gfx/effects/quadmap2red.jpg.jpg
-
gfx/effects/quadmap2yellow.jpg.jpg
-
gfx/effects/r.tga
-
gfx/effects/rain.tga
-
gfx/effects/shine.tga
-
gfx/effects/test.tga
-
gfx/effects/test.tga.old
-
gfx/effects/test1.tga
-
gfx/effects/test2.tga
-
gfx/effects/thermal.tga
-
gfx/effects/wave.tga
-
gfx/effects/x.jpg.jpg
-
gfx/effects/xray.tga
-
gfx/icons/cv.tga
-
gfx/icons/dmg_arrow.tga
-
gfx/icons/dyna.tga
-
gfx/icons/engi.tga
-
gfx/icons/fdops.tga
-
gfx/icons/iconw_dynamite_1_select.tga
-
gfx/icons/iconw_grenade_1_select.tga
-
gfx/icons/iconw_landmine_1_select.tga
-
gfx/icons/iconw_pineapple_1_select.tga
-
gfx/icons/iconw_satchel_1_select.tga
-
gfx/icons/medic.tga
-
gfx/icons/mine.tga
-
gfx/icons/nade.tga
-
gfx/icons/nade2.tga
-
gfx/icons/radar_self.tga
-
gfx/icons/satchel.tga
-
gfx/icons/smoke.tga
-
gfx/icons/soldier.tga
-
gfx/misc/fx_1.jpg.jpg
-
gfx/misc/fx_2.jpg.jpg
-
gfx/misc/fx_3.jpg.jpg
-
gfx/misc/fx_4.jpg.jpg
-
gfx/misc/fx_5.jpg.jpg
-
gfx/misc/fx_6.jpg.jpg
-
scripts/eth32.shader
-
scripts/eth32.shader~
-
scripts/etpub.shader
-
scripts/models_weapons2.shader
-
scripts/models_weapons2.shader~
-
scripts/reaper.shader
-
scripts/reaper.shader~
-
sound/hitsound/body.wav
-
sound/hitsound/head.wav
-
sound/hitsound/headshot.wav
-
sound/hitsound/team.wav
-
sound/kills/Dominating_f.wav
-
sound/kills/Doublekill_m.wav
-
sound/kills/Firstblood_f.wav
-
sound/kills/Firstblood_m.wav
-
sound/kills/Godlike_f.wav
-
sound/kills/Godlike_m.wav
-
sound/kills/Headhunter_m.wav
-
sound/kills/Headshot.wav
-
sound/kills/Headshot_f.wav
-
sound/kills/Headtrick_m.wav
-
sound/kills/Holyshit_f.wav
-
sound/kills/Holyshit_m.wav
-
sound/kills/Killingspree_f.wav
-
sound/kills/Laugh_m.wav
-
sound/kills/Ludacriskill_m.wav
-
sound/kills/Megakill_m.wav
-
sound/kills/Monsterkill_f.wav
-
sound/kills/Multikill_f.wav
-
sound/kills/Multikill_m.wav
-
sound/kills/Rampage_f.wav
-
sound/kills/Ultrakill_f.wav
-
sound/kills/Ultrakill_m.wav
-
sound/kills/Wickedsick_f.wav
-
sound/kills/Wickedsick_m.wav
-
sound/kills/humanuillion_m.wav
-
sound/sprees/Killingspree_m.wav
-
sound/sprees/Rampage_m.wav
-
sound/sprees/Unstoppable_m.wav