General

  • Target

    CloudMe_1112.exe

  • Size

    17.0MB

  • MD5

    f0534b12cd51fefd44002862918801ab

  • SHA1

    a1d6d80151d6c91405fe3fc73fd9c492a10cf57a

  • SHA256

    7c4929de96d68c55f799a781a383184bbc696a6925a33850de84633e835f9d09

  • SHA512

    6170499c21a7fd58ec4630c7fb1ba350ae344b1f1bb1077ae260e189ba1e0c1e16e666874f9d2118ea513acb3505acc386be3fbe79cbeda05e9682729530b7c2

  • SSDEEP

    393216:fs+50IH5AThjJr2wubhFjRCEiyeUfHryoxOkgtSX:fb2IZgRJVu/jUEi9sy2OVtw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 23 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • CloudMe_1112.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    c480ee4d2a64d4a16edee43fdfe35079


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    b1cd0d78f652ce5fc63f0879371af012


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    55a6a096df3564193c302728985d6bda


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-wizard.bmp
  • CloudMe.exe
    .exe windows:4 windows x86 arch:x86

    4ca2f53ccb8a584c644fd1236a3d3836


    Headers

    Imports

    Sections

  • CloudMeFolder.ico
  • EncryptedFolder.ico
  • Microsoft.VC90.CRT.manifest
  • Qt5Core.dll
    .dll windows:4 windows x86 arch:x86

    62e11dbde15aa0cf11958db859e9924a


    Headers

    Imports

    Exports

    Sections

  • Qt5Gui.dll
    .dll windows:4 windows x86 arch:x86

    758f161b67208f54c51e06e94a11f78d


    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:4 windows x86 arch:x86

    3faf3b45437b11e55a86cb980710efc1


    Headers

    Imports

    Exports

    Sections

  • Qt5Sql.dll
    .dll windows:4 windows x86 arch:x86

    40342ae79ed67ef57974412b8fa8e7c7


    Headers

    Imports

    Exports

    Sections

  • Qt5Widgets.dll
    .dll windows:4 windows x86 arch:x86

    a03b07981dce7d0b2ecda11aeaca880d


    Headers

    Imports

    Exports

    Sections

  • Qt5Xml.dll
    .dll windows:4 windows x86 arch:x86

    66bfd60977a0f92966d08ceff761d0bb


    Headers

    Imports

    Exports

    Sections

  • add.ico
  • desktopt.ini
  • favicon.ico
  • libEGL.dll
    .dll windows:4 windows x86 arch:x86

    6e2195fe2e198301b6f36a4a4a6fabe5


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:4 windows x86 arch:x86

    4e81f3b1e3f855033fc6c07681f83203


    Headers

    Imports

    Exports

    Sections

  • libeay32.dll
    .dll windows:5 windows x86 arch:x86

    657b4797d20fe53fa9afd6c3c66124b0


    Headers

    Imports

    Exports

    Sections

  • libgcc_s_dw2-1.dll
    .dll windows:4 windows x86 arch:x86

    5a18b12e92e997d2ca370de96393cb7f


    Headers

    Imports

    Exports

    Sections

  • libssl32.dll
    .dll windows:5 windows x86 arch:x86

    77ef678bff5f4ca7aa67eb8e214e69c4


    Headers

    Imports

    Exports

    Sections

  • libstdc++-6.dll
    .dll windows:4 windows x86 arch:x86

    a510f8d03e357874fce2349915374c7a


    Headers

    Imports

    Exports

    Sections

  • libwinpthread-1.dll
    .dll windows:4 windows x86 arch:x86

    2a44931aaa0f249729076816ea33fffb


    Headers

    Imports

    Exports

    Sections

  • license.txt
  • locale/de.qm
  • locale/es.qm
  • locale/fi.qm
  • locale/fr.qm
  • locale/it.qm
  • locale/ja.qm
  • locale/ko.qm
  • locale/pt.qm
  • locale/sv.qm
  • locale/tw.qm
  • locale/zh.qm
  • mingwm10.dll
    .dll windows:4 windows x86 arch:x86

    03e7672c8b423d2d726a1731f8c39711


    Headers

    Imports

    Exports

    Sections

  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp110.dll
    .dll windows:6 windows x86 arch:x86

    098e9eddf1a24b3fd9465ee992148a02


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp90.dll
    .dll windows:5 windows x86 arch:x86

    c2219f463c61f3122c87331837e12c34


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr110.dll
    .dll windows:6 windows x86 arch:x86

    e057a95f8936f77238b048f253956b3b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • platforms/qminimal.dll
    .dll windows:4 windows x86 arch:x86

    b1b8b03ebcc1156d3cbff004c98edbfe


    Headers

    Imports

    Exports

    Sections

  • platforms/qwindows.dll
    .dll windows:4 windows x86 arch:x86

    d14df2e9b8693bb55a6f2aedc0ff4c03


    Headers

    Imports

    Exports

    Sections

  • share2.ico
  • sqldrivers/qsqlite.dll
    .dll windows:4 windows x86 arch:x86

    f7fb7e31977d354d2884879ee94e363c


    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    77ef678bff5f4ca7aa67eb8e214e69c4


    Headers

    Imports

    Exports

    Sections

  • uninstall.exe.nsis
  • upload.ico