General

  • Target

    Oneclick Tools.zip

  • Size

    564KB

  • MD5

    d2be90c23063c07c5bf6e02c9400ac35

  • SHA1

    c2ca99de035c17ba9b7912c26725efffe290b1db

  • SHA256

    9422365acf6002368d3752faa01d4a428adee1fe902fce397d024dabb4e009b3

  • SHA512

    13935887c0bb2006e65c0fd65cd625ac467d52425cbd084b21ae7246a1b97ed2a92916fa62fabf561e2bf0d610aa3dc4fd7e945d86d37280d8eabf2a0b46909e

  • SSDEEP

    12288:SNRCQ0wbQDG8kjVy9KhxHu7G6h4AbKuZXDPpR9s8Z+:SNRKVkMUTHu7pdz+

Score
5/10
upx

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • Oneclick Tools.zip
    .zip
  • OneclickTools/Amd/AMD Bloat.bat
  • OneclickTools/Dcontrol/dControl.exe
    .exe windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • OneclickTools/NSudo/NSudoLG.exe
    .exe windows:6 windows x64 arch:x64

    1188b455132bc86c7e9e68ae98ce4171


    Headers

    Imports

    Sections

  • OneclickTools/Orca/Orca.bat
  • OneclickTools/Timer Resolution/SetTimerResolution.exe
    .exe windows:6 windows x64 arch:x64

    c1c671ec492bcf13ef9a966821b522cb


    Headers

    Imports

    Sections