Static task
static1
Behavioral task
behavioral1
Sample
Cloud_Engine_7.0_Password_1.rar
Resource
win10-20231215-en
General
-
Target
Cloud_Engine_7.0_Password_1.rar
-
Size
2.5MB
-
MD5
d5d477982d0cecc6109b4e8a65f27808
-
SHA1
9ad55eae79d55a6833e94356c2ee544b3da7759a
-
SHA256
eeb31a652753f9e10422b62c8807f61875bec77cb0feede328c044b26c2f27f6
-
SHA512
dd515916b0b0d38c16a0d5968fbc7419e7d97b9cd54519a11686d54e6791cc21cabb8859dbfba94c9aa27a45b2a33c13b82962a4d7ffcd0298190bedfd5aa1a2
-
SSDEEP
49152:gqxuLnvQdiCTPCAwSgLLSGeG1pOKFIUWj+55+eGR18LjsZ:/xuLvQoC2AQ7e7UWjM5+eGR1KsZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Cloud Engine 7.0/svchost.exe
Files
-
Cloud_Engine_7.0_Password_1.rar.rar
Password: 1
-
Cloud Engine 7.0/svchost.exe.exe windows:4 windows x64 arch:x64
Password: 1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ