Static task
static1
Behavioral task
behavioral1
Sample
ccleaner_pro_6.26.11169/CCleaner 6.26.11169.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ccleaner_pro_6.26.11169/CCleaner 6.26.11169.exe
Resource
win10v2004-20240802-en
General
-
Target
ccleaner_pro_6.26.11169.zip
-
Size
58.6MB
-
MD5
86d9361a833010ea825f2400f3c5f445
-
SHA1
8e78709a073cafb65ed920025b116402f4a8c35d
-
SHA256
ccbe49d9956b3cf869695d0ecde23b45e617152d468b7148d8d7a35df2d89edf
-
SHA512
ad1e777c4265ec5c3b1a02e45cf4b4cff651846139db03328c7b97dc58f583469f456285d7a36d53584bf175ae56a7111acd19684c35e78254d1b81cb21070ec
-
SSDEEP
1572864:v05MHVfHzcmzxgNafrqhcAAqeV+2DxHbqb2S4xu5Z:vPHVfHzcmVJqhcLLIZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ccleaner_pro_6.26.11169/CCleaner 6.26.11169.exe
Files
-
ccleaner_pro_6.26.11169.zip.zip
-
ccleaner_pro_6.26.11169/CCleaner 6.26.11169.exe.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ccleaner_pro_6.26.11169/Follow us on/Check out our Stuff.url.url
-
ccleaner_pro_6.26.11169/Follow us on/TeamOS Facebook Link.url
-
ccleaner_pro_6.26.11169/Follow us on/TeamOS.xyz.url.url
-
ccleaner_pro_6.26.11169/Follow us on/TeamOS.xyz_Logo.png.png
-
ccleaner_pro_6.26.11169/Follow us on/TeamOS_FAQ.jpg.jpg
-
ccleaner_pro_6.26.11169/Follow us on/Torrent downlaod from teamos.xyz.txt
-
ccleaner_pro_6.26.11169/Follow us on/VBuwuLG.png.png
-
ccleaner_pro_6.26.11169/Follow us on/for Bitcoin users.txt