ck-3d80df5d12cdfe6450a782fc87bf66b444[.]google

General

Target
ck-3d80df5d12cdfe6450a782fc87bf66b444.google
Size 3.3MB
Sample260416-akyevscv7p
SHA256 70a5b9d58f368056dc478913338111c7f734de5219ac8c289e026033b49f8867
MD5 2b321886b7153b4d66226c56fe61a4be
SHA1 1b94662b7fb2bc65a262d864e5a18391c265eb39
SHA512 3f368a871cb2563c21400da104e2148781631436ebd6e9ba039e302c9e4848d7bf2949c0848a34a21c0355f53a4c25d9d630eb2089b0fe9c43db40945f2f7adc
SSDEEP 49152:CZMX9XiSsFitMUCkZNL9sEXmKFgjKYQc7zHUD:CZwei8um4tCHs
TLSH
T1D5F55B07EDB98CF9D0E9B6344433A116BA64B8405B2163E72BD4B7682F737F09879B14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
ck-3d80df5d12cdfe6450a782fc87bf66b444.google

File Explorer

ck-3d80df5d12cdfe6450a782fc87bf66b444.google

.dll 3.3MB

ck-3d80df5d12cdfe6450a782fc87bf66b444.google

IMPHASH 3271ee162568f50a6810be9b8973807f
SHA256 70a5b9d58f368056dc478913338111c7f734de5219ac8c289e026033b49f8867
MD5 2b321886b7153b4d66226c56fe61a4be
SHA1 1b94662b7fb2bc65a262d864e5a18391c265eb39
SHA512 3f368a871cb2563c21400da104e2148781631436ebd6e9ba039e302c9e4848d7bf2949c0848a34a21c0355f53a4c25d9d630eb2089b0fe9c43db40945f2f7adc
SSDEEP 49152:CZMX9XiSsFitMUCkZNL9sEXmKFgjKYQc7zHUD:CZwei8um4tCHs
TLSH
T1D5F55B07EDB98CF9D0E9B6344433A116BA64B8405B2163E72BD4B7682F737F09879B14
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a9:74:93:89:d6:34:00:05:d0:0c:64:b3:fd:fa:6e:eb:67:31:68:a6:7b:2b:f2:c4:69:71:a1:41:ac:a6:f4:02

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=398a0a03cda.cloudfront.net

Chains

Apr 15, 2026

CN=398a0a03cda.cloudfront.net

CN=Amazon RSA 2048 M02,O=Amazon,C=US

Minor OS version

1

Major OS version

6

Entry point

4592

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

AddVectoredContinueHandler AddVectoredExceptionHandler CloseHandle CreateEventA CreateIoCompletionPort CreateThread CreateWaitableTimerExW DeleteCriticalSection DuplicateHandle EnterCriticalSection ExitProcess FreeEnvironmentStringsW GetConsoleMode GetCurrentThreadId GetEnvironmentStringsW GetErrorMode GetLastError GetProcAddress GetProcessAffinityMask GetQueuedCompletionStatusEx GetStdHandle GetSystemDirectoryA GetSystemInfo GetThreadContext InitializeCriticalSection LeaveCriticalSection LoadLibraryExW LoadLibraryW PostQueuedCompletionStatus RaiseFailFastException ResumeThread RtlLookupFunctionEntry RtlVirtualUnwind SetConsoleCtrlHandler SetErrorMode SetEvent SetProcessPriorityBoost SetThreadContext SetWaitableTimer Sleep SuspendThread SwitchToThread TlsAlloc TlsGetValue VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WerGetFlags WerSetFlags WriteConsoleW WriteFile

api-ms-win-crt-heap-l1-1-0

calloc free malloc

api-ms-win-crt-private-l1-1-0

memcpy

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table _exit _initialize_onexit_table _initterm _initterm_e _register_onexit_function abort

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vfprintf fwrite

api-ms-win-crt-string-l1-1-0

strlen strncmp

Name

.text

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

102KB

Virtual Size

452KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

23KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ck-3d80df5d12cdfe6450a782fc87bf66b444.google

PE Signature issue

kernel32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

generic