ccla1[.]zip | Triage™

General

Target
ccla1.zip
Size 1003KB
Sample261027-dbd7ea1tas
SHA256 8d2e539a1389d57a9145392d5d4eef5be8bfbcefd8ce920789cbcf3f6c645453
MD5 9adb175f799d87d8188b70c98c0648e6
SHA1 4b1a6c607ff60a0d5c673751e5596cc0794e1a8a
SHA512 e8c91eca3952abd9fb5b2fb78e37aa6d12afae259119ee0fc62c40617af3c7f5c78babfbfa2bd9c7675d326a5caa1dc52324792eabae0dd11b17c76c6252e6b9
SSDEEP 24576:BgYqn4+6EJsddX2adtiwvhiZl1Kf6Bon8XP2ShRJWw6Oyyl7RiH:qnJ6qsdBrywvhAl1KfUon8XPhRm5yl7u
TLSH
T1222533AC58F6828B6C0E5CB769554368911B243FFEABEFC93B46A5EE4007E871C54C4C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Setup.exe

File Explorer

ccla1.zip

.zip 1003KB
Setup.exe

.exe 1.0MB

ccla1.zip

SHA256 8d2e539a1389d57a9145392d5d4eef5be8bfbcefd8ce920789cbcf3f6c645453
MD5 9adb175f799d87d8188b70c98c0648e6
SHA1 4b1a6c607ff60a0d5c673751e5596cc0794e1a8a
SHA512 e8c91eca3952abd9fb5b2fb78e37aa6d12afae259119ee0fc62c40617af3c7f5c78babfbfa2bd9c7675d326a5caa1dc52324792eabae0dd11b17c76c6252e6b9
SSDEEP 24576:BgYqn4+6EJsddX2adtiwvhiZl1Kf6Bon8XP2ShRJWw6Oyyl7RiH:qnJ6qsdBrywvhAl1KfUon8XPhRm5yl7u
TLSH
T1222533AC58F6828B6C0E5CB769554368911B243FFEABEFC93B46A5EE4007E871C54C4C
MD5 SHA1 SHA512 SSDEEP TLSH

Setup.exe

IMPHASH 6c6e8576f6d86b0e67e45f26ef4de96d
SHA256 b6a46908c96e8c6fb104c0f05f57e4d7ac193bef2b9d7a682ed49ec7607a9e4f
MD5 68342d49a6584b0ac6ebbcb36a0f9a4f
SHA1 4f9ba88806311c4095aa1c898073d54f8efe9cb3
SHA512 bb8690206f7b550c58426cb03a827936b19f710667666e1f6e97d9c8eb77e2e48675ec6cc8d782e1d3ddaa67eed384aa8e11cdc15f3545859de8021eb753290c
SSDEEP 24576:aG/n++MsJsATY9jti35ouaZlTMWmxon8lRYS3R9Ww6OyL26qj9u:au/MysATn3LIlTX4on8lv3Ry5L3qj9u
TLSH
T15635236468E682FBD84B147225359768832BD9BB5972CEC7AF43798D4867FD30D30A0C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

29088

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

_lopen FindFirstFileA lstrlenA lstrcpyA GetWindowsDirectoryA lstrcatA RemoveDirectoryA FindNextFileA DeleteFileA lstrcmpA SetFileAttributesA _lread FindClose _lcreat LoadLibraryA GetProcAddress FreeLibrary GetVersionExA GetLastError GetCurrentProcess _llseek GetModuleFileNameA GlobalFree GlobalAlloc SetFileTime DosDateTimeToFileTime LocalFileTimeToFileTime GetLocalTime UnhandledExceptionFilter FreeEnvironmentStringsA HeapReAlloc _hread _hwrite CreateDirectoryA GetTimeZoneInformation GetSystemTime _lclose FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess GetCPInfo GetACP GetOEMCP WideCharToMultiByte TerminateProcess GetFullPathNameA GetCurrentDirectoryA RtlUnwind HeapFree FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType HeapDestroy HeapCreate VirtualFree SetEnvironmentVariableA VirtualAlloc WriteFile HeapAlloc MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW CompareStringA CompareStringW

user32

LoadIconA wsprintfA ExitWindowsEx MessageBoxA

advapi32

AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken

Sharing