FindElement
FlushTreeToFile
GetNumNode
InitTree
InsertNewElement
InsertNewElementSEH
RebuildTreeFromDisk
RemoveElement
RemoveTree
Static task
static1
1 signatures
General
-
Target
CloudHelper.dll.sc
-
Size
60KB
-
MD5
bb1373b8db1eaa4fe9e16b2df90b79b3
-
SHA1
4084f4a70428aebb943dbfdf874bf13b3f98fdce
-
SHA256
0f19b6954548c8415747a431436bd3346cdf71566c2765d915f95bb40d3830d3
-
SHA512
9e6e773028b101a6833c31b9988e0bc0c1be0f31874c34d4f12564178722af5c2a2ba5f567e40ae37221bbf954d0b6131c562e64f27cc468a90f1c7de3930a77
-
SSDEEP
768:31YVD/6By8my/sTA1Svz3sbfckhBPu6E9jZJ2/twJJj9i5mmTjAu8aXOySg22R32:lY1/1LVOSswutm2/Oi/TFhR3U0m
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CloudHelper.dll.sc
Files
-
CloudHelper.dll.sc.dll windows x86
676bd4d074c5c2356489efea42cca268
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
MapViewOfFile
UnmapViewOfFile
WriteFile
CreateFileW
CreateFileMappingW
CloseHandle
DeleteFileW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
HeapAlloc
GetLastError
HeapFree
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
Exports
Exports
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ