CloudUpdateTaskMachineCore[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
CloudUpdateTaskMachineCore.exe
Size 2.3MB
Sample260804-cqntqabd85
SHA256 411dae43c4215ea9543a4de4d18d8112e968d918bd3f7d917c14139e29f1fcb2
MD5 a58a3269e6da1b7dc7f46746156d23bf
SHA1 5eeca0623ae0b87adc68fa97a3663b549214dc36
SHA512 7961198fc60e2b0eb9fcff48b385a025903813c618d30bdb5aaff38a7aa2a869bd1904394852164355ea4af90989c18266e4d8bc01f820255078329377027fb5
SSDEEP 49152:5bWXntuv9pM79N3f40jR5L7I+Lecxg+lXED6mS3NTdNq7:5bWXtu6N3g0jR5L73ySlXED6mSldy
TLSH
T181B55B323650C3E3C1A706315A19F775E3BDB57C3B6990C762C09A1D2AA15C3B639B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

CloudUpdateTaskMachineCore.exe

.exe 2.3MB

CloudUpdateTaskMachineCore.exe

IMPHASH a12ab3df038a4a13183f35e15fddbd4d
SHA256 411dae43c4215ea9543a4de4d18d8112e968d918bd3f7d917c14139e29f1fcb2
MD5 a58a3269e6da1b7dc7f46746156d23bf
SHA1 5eeca0623ae0b87adc68fa97a3663b549214dc36
SHA512 7961198fc60e2b0eb9fcff48b385a025903813c618d30bdb5aaff38a7aa2a869bd1904394852164355ea4af90989c18266e4d8bc01f820255078329377027fb5
SSDEEP 49152:5bWXntuv9pM79N3f40jR5L7I+Lecxg+lXED6mS3NTdNq7:5bWXtu6N3g0jR5L73ySlXED6mSldy
TLSH
T181B55B323650C3E3C1A706315A19F775E3BDB57C3B6990C762C09A1D2AA15C3B639B2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Digest

45:e4:f8:08:d1:5a:7a:a2:08:54:5d:0b:48:31:f8:4e:39:96:e9:05:2e:d1:d5:96:df:bc:cc:fc:0d:89:81:67

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Fiveoclock Soft Ltd,O=Fiveoclock Soft Ltd,L=Road Town,C=VG

Chains

Apr 10, 2026

CN=Fiveoclock Soft Ltd,O=Fiveoclock Soft Ltd,L=Road Town,C=VG

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

64:33:51:d3:c7:38:9f:08

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 24, 2016 - Jun 24, 2031

Subject

CN=Fiveoclock Soft Ltd,O=Fiveoclock Soft Ltd,L=Road Town,C=VG

Serial Number

4d:a6:49:a4:a7:22:87:a6:80:d0:06:a9:5b:0a:8d:bf

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 31, 2025 - Oct 29, 2028

Subject

CN=SSL.com Timestamping Unit 2025 E1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

1f:6b:16:62:d2:2e:1b:6c:5d:f1:c0:c1:a0:60:0e:38

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 18, 2025 - Nov 12, 2034

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Nov 12, 2034

Minor OS version

Major OS version

Entry point

1543621

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\dev\under40\ratecheck-win-wrapper\Release\CloudUpdateTaskMachineCore.pdb

kernel32

IsValidLocale LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetConsoleMode GetConsoleOutputCP SetFilePointerEx ExitProcess GetStdHandle GetFileType SetStdHandle QueryPerformanceFrequency VirtualQuery ReadConsoleW GetSystemInfo HeapQueryInformation GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread GetCommandLineA RtlUnwind GetCPInfo LCMapStringEx GetStringTypeW RaiseException OutputDebugStringW EnumSystemLocalesW GetTimeZoneInformation FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive FindResourceExW FindNextFileW GetUserDefaultLCID GetTempFileNameW SearchPathW GetProfileIntW SystemTimeToTzSpecificLocalTime GetFileTime GetFileSizeEx GetFileAttributesExW FileTimeToLocalFileTime VirtualProtect GlobalGetAtomNameW lstrcmpiW GetCurrentProcess DuplicateHandle UnlockFile SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers FindFirstFileW FindClose SetFilePointer GetFileSize GetThreadLocale GlobalFlags GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW GetCurrentDirectoryW LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSection InitializeCriticalSectionAndSpinCount CompareStringW GlobalFindAtomW EncodePointer GetCurrentProcessId GlobalAddAtomW ResumeThread SetThreadPriority VerifyVersionInfoW VerSetConditionMask WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW LoadLibraryA lstrcpyW lstrcmpW lstrcmpA GlobalDeleteAtom LoadLibraryW LoadLibraryExW GetProcAddress GetModuleHandleW GetModuleHandleA FreeLibrary GetVersionExW GetCurrentThreadId GetCurrentThread OutputDebugStringA SetLastError CopyFileW FormatMessageW MulDiv GlobalFree GlobalLock GlobalUnlock GlobalSize GlobalAlloc GetWindowsDirectoryW GetSystemDirectoryW MoveFileW Process32NextW TerminateProcess OpenProcess Process32FirstW CreateToolhelp32Snapshot WriteFile CreateFileW FileTimeToSystemTime DeleteFileW GetTempPathW ReadFile CreatePipe SystemTimeToFileTime GetTickCount64 CreateDirectoryW GetFileAttributesW GetEnvironmentVariableW GetModuleFileNameW Sleep LocalFree GetCommandLineW FindResourceW LoadResource LockResource SizeofResource GetExitCodeProcess WaitForSingleObject CreateProcessW GetLocalTime HeapFree WideCharToMultiByte MultiByteToWideChar ReleaseMutex CloseHandle CreateMutexW SetErrorMode GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc HeapReAlloc GetLastError HeapSize InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection VirtualAlloc WriteConsoleW

user32

GetNextDlgGroupItem IntersectRect SetRect InvalidateRgn CopyAcceleratorTableW CharNextW KillTimer SetTimer RealChildWindowFromPoint DeleteMenu CopyImage WindowFromPoint ReleaseCapture SetCapture WaitMessage MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo LoadIconW GetTopWindow GetClassLongW EqualRect AdjustWindowRectEx RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow SetForegroundWindow GetForegroundWindow TrackPopupMenu SetMenu GetMenu GetCapture IsIconic EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement GetWindowPlacement IsChild IsMenu CreateWindowExW GetClassInfoExW RegisterClassW CallWindowProcW GetMessageTime GetMessagePos IsDialogMessageW SetWindowLongW GetWindowTextLengthW GetWindowTextW SetWindowTextW MessageBeep GetDlgCtrlID CheckDlgButton MoveWindow ShowWindow UnhookWindowsHookEx PtInRect ScreenToClient ClientToScreen EndPaint BeginPaint ReleaseDC GetWindowDC GetDC TabbedTextOutW GetIconInfo DrawTextExW DrawTextW GetClassNameW InvalidateRect UpdateWindow GetLastActivePopup GetWindowThreadProcessId MessageBoxW SetCursor ShowOwnedPopups CopyIcon GetMenuItemInfoW GetMenuDefaultItem UnregisterClassW PostQuitMessage PostMessageW EnableWindow GetMenuStringW CallNextHookEx SetWindowsHookExW GetCursorPos ValidateRect GetKeyState PeekMessageW DispatchMessageW TranslateMessage GetMessageW LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps EnableMenuItem CheckMenuItem EnumDisplayMonitors GetMonitorInfoW SystemParametersInfoW LoadCursorW OpenClipboard CloseClipboard SetClipboardData EmptyClipboard DestroyIcon LoadImageW SetParent MonitorFromPoint TrackMouseEvent IsZoomed CharUpperW GetAsyncKeyState LoadMenuW GetSystemMenu NotifyWinEvent CopyRect SetRectEmpty SetCursorPos UnionRect BringWindowToTop CreatePopupMenu LockWindowUpdate DestroyMenu EnableScrollBar SetFocus GetMenuState GetSubMenu GetMenuItemID GetMenuItemCount InsertMenuW AppendMenuW RemoveMenu SetWindowPos SetWindowContextHelpId GetParent GetKeyNameTextW GetWindow MapDialogRect RegisterWindowMessageW SendMessageW DrawEdge DrawFrameControl IsWindowVisible GetFocus GetSystemMetrics DrawStateW SetWindowRgn RedrawWindow GetClientRect GetWindowRect MapWindowPoints GetSysColor GetSysColorBrush DrawFocusRect FillRect InflateRect OffsetRect IsRectEmpty DrawIconEx IsWindow DestroyWindow CreateDialogIndirectParamW EndDialog GetDlgItem GetNextDlgTabItem GetActiveWindow IsWindowEnabled SetActiveWindow GetWindowLongW GetDesktopWindow DefWindowProcW GetClassInfoW SetLayeredWindowAttributes SetMenuDefaultItem ModifyMenuW DestroyAcceleratorTable SetClassLongW GetDoubleClickTime GetUpdateRect SendDlgItemMessageA ToUnicodeEx GetKeyboardLayout GetKeyboardState MapVirtualKeyW LoadAcceleratorsW CreateAcceleratorTableW UpdateLayeredWindow TranslateAcceleratorW InsertMenuItemW UnpackDDElParam ReuseDDElParam RegisterClipboardFormatW InvertRect HideCaret DrawIcon GetWindowRgn DestroyCursor CreateMenu GetComboBoxInfo TranslateMDISysAccel DefMDIChildProcW DefFrameProcW DrawMenuBar MapVirtualKeyExW IsCharLowerW PostThreadMessageW IsClipboardFormatAvailable FrameRect CharUpperBuffW SubtractRect GrayStringW

gdi32

CreateCompatibleDC CreateDIBitmap CreateFontIndirectW CreatePen CreatePatternBrush DeleteObject EnumFontFamiliesW GetStockObject GetTextCharsetInfo GetObjectW CreateBitmap Escape ExcludeClipRect GetClipBox GetObjectType GetPixel GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo PtVisible RectVisible RestoreDC SaveDC SelectClipRgn ExtSelectClipRgn SelectObject SelectPalette SetBkColor SetBkMode SetMapMode SetLayout GetLayout SetPolyFillMode SetROP2 SetTextColor SetTextAlign CreateCompatibleBitmap TextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx GetRgnBox GetMapMode SetRectRgn DPtoLP RealizePalette SetPixel StretchBlt CreateDIBSection SetDIBColorTable CreateRoundRectRgn Rectangle OffsetRgn RoundRect CreatePalette GetPaletteEntries GetNearestPaletteIndex GetSystemPaletteEntries EnumFontFamiliesExW ExtFloodFill SetPaletteEntries FillRgn FrameRgn GetBoundsRect PtInRegion GetViewportOrgEx LPtoDP GetWindowOrgEx SetPixelV GetTextFaceW BitBlt GetTextMetricsW Polygon CreatePolygonRgn ExtTextOutW PatBlt GetTextExtentPoint32W GetTextColor GetBkColor Ellipse CreateSolidBrush CreateRectRgnIndirect CreateRectRgn CreateHatchBrush CreateEllipticRgn CombineRgn GetDeviceCaps CreateDCW CopyMetaFileW MoveToEx Polyline DeleteDC

msimg32

TransparentBlt AlphaBlend

winspool.drv

OpenPrinterW ClosePrinter DocumentPropertiesW

advapi32

RegQueryValueExW RegEnumKeyExW RegEnumValueW RegQueryValueW RegEnumKeyW RegDeleteValueW RegDeleteKeyW RegOpenKeyExW FreeSid CheckTokenMembership AllocateAndInitializeSid RegSetValueExW RegGetValueW RegCreateKeyExW RegCloseKey

shell32

ShellExecuteExW SHGetMalloc SHGetPathFromIDListW SHGetSpecialFolderLocation SHBrowseForFolderW SHGetDesktopFolder SHAppBarMessage ShellExecuteW DragFinish DragQueryFileW SHGetFileInfoW CommandLineToArgvW

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW PathStripToRootW StrFormatKBSizeW PathRemoveFileSpecW PathIsUNCW PathFindFileNameW

uxtheme

IsThemeBackgroundPartiallyTransparent OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName DrawThemeParentBackground IsAppThemed DrawThemeText GetWindowTheme GetThemePartSize GetThemeSysColor

ole32

OleLockRunning CoInitializeEx CoRevokeClassObject CoRegisterMessageFilter OleCreateMenuDescriptor RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleGetClipboard DoDragDrop OleIsCurrentClipboard OleFlushClipboard OleDestroyMenuDescriptor OleTranslateAccelerator OleUninitialize OleInitialize CoFreeUnusedLibraries CreateStreamOnHGlobal CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject CoDisconnectObject CoInitialize CoCreateInstance CLSIDFromProgID CLSIDFromString CoCreateGuid CoUninitialize ReleaseStgMedium OleDuplicateData CoTaskMemFree CoTaskMemAlloc IsAccelerator

oleaut32

LoadTypeLi OleCreateFontIndirect SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy VariantChangeType SysFreeString VariantCopy VarBstrFromDate VariantClear VariantInit SysAllocString SysAllocStringLen SysStringLen

oledlg

OleUIBusyW

urlmon

URLDownloadToFileW

gdiplus

GdipGetImagePalette GdipDrawImageRectI GdipSetInterpolationMode GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdiplusShutdown GdipAlloc GdipFree GdiplusStartup GdipCloneImage GdipDisposeImage GdipGetImageGraphicsContext GdipGetImageWidth GdipGetImageHeight GdipGetImagePixelFormat GdipBitmapUnlockBits GdipGetImagePaletteSize GdipCreateBitmapFromStream GdipCreateBitmapFromScan0 GdipBitmapLockBits GdipDeleteGraphics

winhttp

WinHttpSetOption WinHttpQueryHeaders WinHttpReadData WinHttpQueryDataAvailable WinHttpCloseHandle WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpConnect WinHttpCrackUrl WinHttpOpen

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

imm32

ImmReleaseContext ImmGetOpenStatus ImmGetContext

winmm

PlaySoundW

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

387KB

Virtual Size

387KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

25KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

146KB

Virtual Size

146KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

CloudUpdateTaskMachineCore.exe

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

urlmon

gdiplus

winhttp

version

oleacc

imm32

winmm

generic