General

  • Target

    CCleaner-6.24.11.060.exe

  • Size

    43.6MB

  • MD5

    a09133f8e4c83442cac6be8581871534

  • SHA1

    0e2497732dcc59a07e320f65a70e590ee86afdbc

  • SHA256

    4a4b38dfa6f0df8d4bc31ce81b4761cb8f8ba83cea7d7b20c04c272bce1449ad

  • SHA512

    6a1fc5b4d24270bf53438999505b34761f2d3f23cb772e545c2884e5bb39de91972880ac3addf4552ef4676a829cdbcddf3f21f926c2c2a34d5c3840af925425

  • SSDEEP

    786432:+C8RYlz0xJ7z/dc18dlpJvg9aju/JuE9YkbksbWph0QCwS8/guTQ4Kv6qXIEdvCB:r8RY4Nz1c1mvdjuosyp2DwSecXIEdqGg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • CCleaner-6.24.11.060.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Headers

    Imports

    Sections

  • $PLUGINSDIR/Aero.dll
    .dll windows:6 windows x86 arch:x86

    3863c2a1ff3d5db5d3cecc7c23714e97


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/BrandingURL.dll
    .dll windows:4 windows x86 arch:x86

    135de77644e2add2fd9dd8176740e7e0


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    9b6b6a7858e17fb0b17e1c1428330343


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ToolTips.dll
    .dll windows:4 windows x86 arch:x86

    04338c58e26f4ac6ae89608ac6276429


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/bus-r.bmp
  • $PLUGINSDIR/busp-r.bmp
  • $PLUGINSDIR/hosts.exe
    .exe windows:5 windows x86 arch:x86

    870b8e75c7190e202e9c6c81dff1040c


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    1e2884056e655f2b7bc5a904e352fc80


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/prof-r.bmp
  • $PLUGINSDIR/profp-r.bmp
  • $PLUGINSDIR/tech-r.bmp
  • $PLUGINSDIR/techp-r.bmp
  • CCleaner.dat
  • CCleaner.exe
    .exe windows:6 windows x86 arch:x86

    9381e5c599e91d84bb79f422192efbef


    Headers

    Imports

    Exports

    Sections

  • CCleaner64.exe
    .exe windows:6 windows x64 arch:x64

    d86693ce643afb92041ce5b57cca682d


    Headers

    Imports

    Exports

    Sections

  • CCleanerDU.dll
    .dll windows:6 windows x64 arch:x64

    6728a4aa1f67ac36351d503d8098ea23


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CCleanerPerformanceOptimizer.dll
    .dll windows:6 windows x64 arch:x64

    038d18c0caa62fa2af98dccd6927ca27


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • CCleanerPerformanceOptimizerService.exe
    .exe windows:6 windows x64 arch:x64

    583b24a0135b0d733de18d089de0d1e2


    Code Sign

    Headers

    Imports

    Sections

  • Lang/lang-1025.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1026.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1027.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1028.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1029.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1030.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1031.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1032.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1034.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1035.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1036.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1037.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1038.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1040.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1041.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1042.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1043.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1044.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1045.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1046.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1048.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1049.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1050.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1051.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1053.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1054.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1055.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1056.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1057.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1058.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1059.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1060.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1061.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1062.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1063.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1065.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1066.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1067.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1068.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1071.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1079.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1081.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1086.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1087.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1090.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1092.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1093.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1102.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1104.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1109.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1110.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-1155.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-2052.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-2070.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-2074.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-3098.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-5146.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Lang/lang-9999.dll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • Setup/config.def
  • branding.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • ccleaner.ini
  • uninst.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/INetC.dll
    .dll windows:4 windows x86 arch:x86

    917ae9b9adb269abd5543f5bf5676bac


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x86 arch:x86

    5e62e8e248e7364886b604bd1fcf4c13


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $_83_/$_83_/ServiceUninstaller.dll
    .dll windows:6 windows x86 arch:x86

    59d5160c5aad05f8635ce95fff5827a7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_87_/$_87_/pfBL.dll
    .dll windows:6 windows x86 arch:x86

    cf56a20f1d28466d7aa4ce99b4398cd9


    Code Sign

    Headers

    Imports

    Exports

    Sections