f:\ccl\ccl\release\CCL.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
8d92dce4d8d5055748174f2661b5414a4690877110b9c3563566a09176b82353N.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
8d92dce4d8d5055748174f2661b5414a4690877110b9c3563566a09176b82353N.dll
Resource
win10v2004-20241007-en
General
-
Target
8d92dce4d8d5055748174f2661b5414a4690877110b9c3563566a09176b82353N.exe
-
Size
624KB
-
MD5
86e906b0609c0d77772c5c99cc354680
-
SHA1
041ecf8cf1dabde2935b25107b87cfff3d36fd91
-
SHA256
8d92dce4d8d5055748174f2661b5414a4690877110b9c3563566a09176b82353
-
SHA512
077f82a345b420a19715a69e38c6bab2b7722fc2dfef377cfc945046ec9675a24b3a07382e5a5dd02368265b3b2d1d63ccae552aa36e5ab4e9d9dc563b826df7
-
SSDEEP
12288:zVrpVOWjc8SBe+CLA/7DxWSQ9npqBL9EXtwJcBjvrEH7H2:AqxSBew/JBUpqBL9qtKWrEH7H2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d92dce4d8d5055748174f2661b5414a4690877110b9c3563566a09176b82353N.exe
Files
-
8d92dce4d8d5055748174f2661b5414a4690877110b9c3563566a09176b82353N.exe.dll windows:4 windows x86 arch:x86
ab446f2174988c9b758c2641238b9d5b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
shlwapi
AssocQueryStringW
PathFileExistsW
PathStripToRootW
PathIsUNCW
UrlUnescapeW
PathFindExtensionW
PathFindFileNameW
kernel32
TlsFree
SetErrorMode
GetModuleHandleA
FindNextFileW
WritePrivateProfileStringW
GlobalFlags
CompareStringW
GetVersionExA
LoadLibraryA
GlobalFindAtomW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetProcessHeap
RaiseException
RtlUnwind
ExitProcess
HeapSize
SetStdHandle
GetFileType
LocalReAlloc
GetACP
GetOEMCP
GetTimeFormatA
GetDateFormatA
GetStdHandle
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
Sleep
GetTimeZoneInformation
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetCurrentProcessId
GlobalAddAtomW
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
GlobalDeleteAtom
GetModuleHandleW
GetFileTime
LocalAlloc
FreeLibrary
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProcAddress
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
LoadLibraryW
GetThreadLocale
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
SetLastError
WaitForSingleObject
CreateDirectoryW
GetFileAttributesW
GetTempFileNameW
CloseHandle
CreateProcessW
GetLocalTime
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
DeleteFileW
CopyFileExW
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
lstrcpynW
GetModuleFileNameW
GetLastError
GetVersionExW
FindResourceW
LoadResource
LockResource
SizeofResource
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
GetCPInfo
user32
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
LoadCursorW
GetSysColorBrush
GetSysColor
ShowWindow
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowTextW
UnregisterClassW
UnhookWindowsHookEx
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
DestroyMenu
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
SendMessageW
ModifyMenuW
EnableMenuItem
CheckMenuItem
PostMessageW
PostQuitMessage
CharUpperW
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDlgCtrlID
UnregisterClassA
gdi32
DeleteDC
GetStockObject
TextOutW
RectVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
ExtTextOutW
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
advapi32
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextW
CryptDecrypt
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
CryptEncrypt
shell32
SHGetSpecialFolderPathW
ole32
OleRun
CoCreateInstance
oleaut32
VariantInit
SysFreeString
SysAllocStringLen
VariantClear
SysAllocString
VariantChangeType
wininet
HttpOpenRequestW
InternetConnectW
HttpSendRequestExW
HttpEndRequestW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryDataAvailable
HttpAddRequestHeadersW
HttpQueryInfoW
InternetCloseHandle
InternetGetLastResponseInfoW
InternetOpenW
InternetSetStatusCallbackW
Exports
Exports
??0CCLApi@@QAE@ABV0@@Z
??0CCLApi@@QAE@XZ
??0CCLApiResult@@QAE@XZ
??1CCLApi@@UAE@XZ
??1CCLApiResult@@QAE@XZ
??4CCLApi@@QAEAAV0@ABV0@@Z
??4CCLApiResult@@QAEAAV0@ABV0@@Z
??_7CCLApi@@6B@
?AssignProxyAcount@CCLApi@@QAEIPB_W0PAX@Z
?AssignUserAcount@CCLApi@@QAEIPB_W0HPAX@Z
?CopyCapiUrl@CCLApiResult@@AAE_NPAXPAPAX@Z
?CopyStr@CCLApiResult@@AAE_NPAPA_WPB_W@Z
?CreateRequestXML@CCLApiResult@@QAE_NPAPAX@Z
?CreateResponseXML@CCLApiResult@@QAE_NPAPAX@Z
?CreateUploadXML@CCLApiResult@@QAE_NPAPAX@Z
?DecodeText@CCLApi@@QAEIQAEIPAPA_WPAIPAX@Z
?DoCCLUpload@CCLApi@@QAEIPAX@Z
?DoUploadWithRetryMode@CCLApi@@QAEIIIIPAX@Z
?EncodeText@CCLApi@@QAEIPB_WPAPAEPAIPAX@Z
?GetAlbumContentsList@CCLApi@@QAEIIIQAU_CCL_ALBUMCONTENTSLIST_INFO@@PAX@Z
?GetAlbumContentsListNum@CCLApi@@QAEIPB_WAAIP6AIIQAX@ZPAX4@Z
?GetAlbumFreeSpace@CCLApi@@QAEIAA_KP6AIIQAX@ZPAX3@Z
?GetAlbumIDList@CCLApi@@QAEIAAIQAU_CCL_ALBUMIDLIST_INFO@@PAX@Z
?GetAlbumList@CCLApi@@QAEIIIAAIQAU_CCL_ALBUMLIST_INFO@@PAX@Z
?GetAlbumListNum@CCLApi@@QAEIAAIP6AIIQAX@ZPAX233@Z
?GetAlbumThumbnail@CCLApi@@QAEIIPA_WAAIPAX@Z
?GetCapiResponse@CCLApiResult@@QAE_NPA_W@Z
?GetCapiUrl@CCLApiResult@@QAEXIPA_W@Z
?GetContentFiles@CCLApi@@QAEIIIIPB_W00PAX@Z
?GetContentThumbnail@CCLApi@@QAEIIIPB_WAAIPAX@Z
?GetContentsList@CCLApi@@QAEIIIAAIQAU_CCL_ALBUMCONTENTSLIST_INFO@@PAX@Z
?GetHttpResponse@CCLApiResult@@QAE_NPA_W@Z
?GetImageContentFile@CCLApi@@QAEIIIPB_WPAX@Z
?GetLoginUrl@CCLApi@@QAEIPAPA_WPAIPAX@Z
?GetRequestXML@CCLApiResult@@QAE_NPAPAX@Z
?GetResponseXML@CCLApiResult@@QAE_NPAPAX@Z
?GetStartURL@CCLApi@@SAIIPAPA_WPAIPAX@Z
?GetSystemError@CCLApiResult@@QAE_NPA_W@Z
?GetUploadXML@CCLApiResult@@QAE_NPAPAX@Z
?InitializeUserRegInfo@CCLApi@@SAIPAX@Z
?LoadUserRegInfo@CCLApi@@SAIPAPA_WPAI011PAX@Z
?MakeUploadContents@CCLApi@@QAEIABU_CCL_ULCONTENT_INFO@@PAX@Z
?OpenMaintenancePage@CCLApi@@QAEIPAX@Z
?OpenPage@CCLApi@@QAEIPB_WP6AIIQAX@ZPAX3@Z
?OpenProductRegistrationPage@CCLApi@@QAEIPB_W0I00PAX@Z
?OpenProductRegistrationPageWithProductList@CCLApi@@QAEIPB_W0IIQAU_CCL_PRODUCTINFO_LIST@@PAX@Z
?OpenProperRegistrationPage@CCLApi@@QAEIPB_W0PAX@Z
?OpenProperRegistrationPageWithProductList@CCLApi@@QAEIPB_W0IQAU_CCL_PRODUCTINFO_LIST@@PAX@Z
?OpenTandcPage@CCLApi@@QAEIPAX@Z
?OpenUploadContentsRegistAlbum@CCLApi@@QAEIIIPAX@Z
?OpenUploadContentsRegistPage@CCLApi@@QAEIPAX@Z
?OpenUserRegistrationPage@CCLApi@@QAEIPB_W000PAX@Z
?OpenUserRegistrationPageWithProductList@CCLApi@@QAEIPB_W0IQAU_CCL_PRODUCTINFO_LIST@@PAX@Z
?QueryCiGService@CCLApi@@QAEIIPB_WI0PAX@Z
?QueryUserRegistered@CCLApi@@SAIPAX@Z
?ReferUserRegInfo@CCLApi@@QAEIPAPA_W0PAIPAX@Z
?ReleaseRequestXML@CCLApiResult@@QAEXXZ
?ReleaseResponseXML@CCLApiResult@@QAEXXZ
?ReleaseUploadXML@CCLApiResult@@QAEXXZ
?SaveUserRegInfo@CCLApi@@SAIPB_W0IPAX@Z
?SetCapiResponse@CCLApiResult@@QAE_NPB_W@Z
?SetCapiUrl@CCLApiResult@@QAE_NPBX@Z
?SetHttpResponse@CCLApiResult@@QAE_NPB_W@Z
?SetSystemError@CCLApiResult@@QAE_NPB_W@Z
?SetupUpload@CCLApi@@QAEIIAA_KP6AIIQAX@ZPAX233@Z
?StartUp@CCLApi@@QAEIPB_WIIPAX@Z
?StartUpWithParameters@CCLApi@@QAEIPB_W00000PAX@Z
?StartUpWithUrl@CCLApi@@QAEIPB_W0I_NPAX@Z
Sections
.text Size: 384KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ