CloudServices[.]exe

General

Target
CloudServices.exe
Size 91KB
Sample250317-l7ertaxtcw
SHA256 25a344f5681f51b0636366bba99db4f640819e4688bce41e451259e9e3000bdf
MD5 b7f10212764f2a0cfa32c33983b35fb5
SHA1 55beb58ef51952d4a001a94207e534c39d26b371
SHA512 11f28c90c5a9df869e4779f2d255d2c00f07e6e0e5e46a3317f7bb9ff71cadd9cae37b374690ca96b15a02dd384c40b882f9c7b3b182231f3185e87c0359dc08
SSDEEP 1536:BmhwZGb9dS7SiDJh+hThN/UP/UJS/UJ5/UJpgzrVVYpLN7FMRFZwpZ3c:6wZU/S7SAJh+hThN/UP/UJS/UJ5/UJpi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CloudServices.exe

File Explorer

CloudServices.exe

.exe 91KB

CloudServices.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 25a344f5681f51b0636366bba99db4f640819e4688bce41e451259e9e3000bdf
MD5 b7f10212764f2a0cfa32c33983b35fb5
SHA1 55beb58ef51952d4a001a94207e534c39d26b371
SHA512 11f28c90c5a9df869e4779f2d255d2c00f07e6e0e5e46a3317f7bb9ff71cadd9cae37b374690ca96b15a02dd384c40b882f9c7b3b182231f3185e87c0359dc08
SSDEEP 1536:BmhwZGb9dS7SiDJh+hThN/UP/UJS/UJ5/UJpgzrVVYpLN7FMRFZwpZ3c:6wZU/S7SAJh+hThN/UP/UJS/UJ5/UJpi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

98990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

CloudServices.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

CloudServices.exe

mscoree

dotnet