ContractCopy_YZ62.img
- SHA256 1821daab4216388a07240299c9d93478a49874b5c776e297e27fc4d7553229fa
Static task
static1
Behavioral task
behavioral1
Sample
ContractCopy_YZ62.iso
Resource
win7-20221111-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ContractCopy_YZ62.iso
Resource
win10v2004-20221111-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
ContractCopy.js
Resource
win7-20221111-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
ContractCopy.js
Resource
win10v2004-20220812-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral5
Sample
addled/soloists.dll
Resource
win7-20220812-en
windows7-x64
4 signatures
150 seconds
General
- Target ContractCopy_YZ62.img
- Size 1.2MB
- Sample221119-g7k7dagg25
- SHA256 1821daab4216388a07240299c9d93478a49874b5c776e297e27fc4d7553229fa
- MD5 f7ca9a8048e534b3fcb6c8f66654e63a
- SHA1 3e7d3cd4fb07b0f3d3305afdc18e1a57b0d34a3a
- SHA512 a36dc6b0ac552ff1742b8b69f34bc50feb4925d3de077993c246093f7ce74910198ebd92469e473ccab356ef36c40772992bed70ea336020f5ce2b30d1df6e3a
- SSDEEP 24576:5oGd7QUoTzEWdfwTTn3M9XqdXJDi317qne:BVU4Wdf6M9XmXFi317qne
- MD5 SHA1 SHA512 SSDEEP
Score
N/A
Malware Config
Signatures
File Explorer
-
ContractCopy_YZ62.img.iso .vbs 1.2MB
-
ContractCopy.js.js .vbs 9KB
-
addled/petrifies.png.png 42KB
-
addled/soloists.tmp.dll 781KB
-
addled/squawked.png.png 46KB
-
addled/volcanic.txt243KB
-
data.txt5B
ContractCopy.js
- SHA256 fbe4408e0c0a528f331fc002f785eff7ad16f45ae3ea3ab94eb8b3cbf0c6f00f
- MD5 599ff2df10ec1a8497d760784e493885
- SHA1 0b6342b8c43c76fbde2e714c2a7cda2bd1260d05
- SHA512 08e93e1117220b0edc589505e5d3bba99c408deb5d9ce197df864cecf838a815850d9b3a0d5c6fef9ab86396bf5af230c9b1f58f3fdbfeb7db339f97bbc15dd5
- SSDEEP 192:GSLjDJq0Tavgx685UIroAKbP2KTMhS0OGYm5llWVjAvNzAWMuEvk7MgG+r5A6:BVq2k785UIro8KTMhSeYm5P2jiuuEjP4
- MD5 SHA1 SHA512 SSDEEP
addled/petrifies.png
- SHA256 bd8b8773f35a4fafd0a228312c65e01cd69ccc2347bdd52eef8df33c9aabfcd3
- MD5 015aed9a464086abd5969db036f21396
- SHA1 90ee55fcd9567a9f70c7a1dcdc8cdd89b1c29152
- SHA512 227e1a55da9bbc363466f340ca295a086db38e9c891a4979fd8c2f107f8c4328f5cdb5ad73f897ecf0145968e280ea30d88cd15a21a8687f68ff6d0693e5b315
- SSDEEP 768:z/2/9lPo0u692TSGVhQAtE8uN/PWom2cj2Ve26KP5cEatQSB6BJTGVPnSzIniew:D2ro+hGVbpuN/uzkTSEzBcVPDniew
- MD5 SHA1 SHA512 SSDEEP
addled/soloists.tmp
- IMPHASH 704b344e7ffc32e379dd15faa7cd65d3
- SHA256 5f715c36aa0f2e60500bbc501eaacdb1e95ed38959f03a38e52009d3ec2a864f
- MD5 b60b9fedc3fcf9011446349ab6430719
- SHA1 e706be44c0bf3cf12ee1b357b0d037f172a5220a
- SHA512 bd226954a1e8d72bafa2c5c6ac7e001b74284d1f09e785c8323bb96f4fa0b7694eb2d8105b4741438907b49c6b9e298d692652f95a31190abf7ce0a2c5fa5922
- SSDEEP 12288:3+ed7zMD42lTz4kg3Wdf8+wawM375RGyin7ZlUP9XqcYX:Zd7QUoTzEWdfwTTn3M9XqdX
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
341516
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
ExitProcess
WaitForSingleObject
CreateThread
GetTickCount64
VirtualAllocEx
GetCommandLineA
GetFileAttributesA
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetTickCount
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
LocalAlloc
MulDiv
lstrcmpA
lstrcmpiA
lstrlenA
GetPrivateProfileIntA
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
RaiseException
RtlUnwind
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameW
HeapFree
HeapAlloc
MultiByteToWideChar
LCMapStringW
MoveFileExW
DecodePointer
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
WriteConsoleW
user32
FindWindowA
SetTimer
EndDialog
DialogBoxParamA
IsWindowVisible
ScreenToClient
GetDC
shlwapi
PathFindOnPathA
PathGetDriveNumberA
PathFileExistsA
ord155
StrToIntA
PathFindExtensionA
PathFindSuffixArrayA
DllRegisterServer
DllUnregisterServer
broadbill
clite
enlargeableness
lipped
monotheist
pharyngemphraxis
platypod
pretonic
scribbleomania
subjectibility
unturpentined
Name
.data
Size
415KB
Virtual Size
415KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
dfbfg
Size
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
349KB
Virtual Size
348KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
addled/squawked.png
- SHA256 9e4ad465298f9604c72751d2e5ff0844362de27f9e54db6bee7e15a48e90e3d8
- MD5 e7660dd10cfa426a97c62d96752a3bd1
- SHA1 f784bf360cf0eddeceab40f13bd20dbe5b2f6ea1
- SHA512 c6ea35b85edf9ed2a5b8ba2b09e548373f28dc6d67e222cae1c01969e85e0791b8f9b51ed004e3d532caf31e2647c134fa9ff66554b14baed07c08769ed04683
- SSDEEP 768:GNbFLL54xDAib8J1Dh4IvS4/oR0QnYPuoIi/Ry5d6by8qOcPeDBWdhtqbjX:GNbF2xDAibuyir/6nYPVIi/C6by8F+yP
- MD5 SHA1 SHA512 SSDEEP
addled/volcanic.txt
- SHA256 553f2d7be393b773af8b88d4b67d5df198944c63da7558a80acec1a8504822ba
- MD5 6b25aa529c238654ad9f5bdf21a64d41
- SHA1 4e2d40df2e48cc072142c887f09d93fc55806844
- SHA512 7e17ef586615e069bb1afe78775cfa3d7f4dc214ccdd1b05425ef04569383ab05c12b5f193e98a7d023a94f62552eed5e47d4e7587b45c5877f7555c0fea41dd
- SSDEEP 3072:hwMNiMLgMEEIqd4YEdTMjk2GbEEvQMgnPdQZ:ikiUg3EIqdPEdTP2GbEEvQrn1QZ
- MD5 SHA1 SHA512 SSDEEP
data.txt
- SHA256 124880061f6255dd7b59b73613ea8d246648be1d34f860b753d4b390c51496d3
- MD5 2e24e01ec251c8c851897724d3469520
- SHA1 0ddb51524f91c79380fbfaf345437a960c3c2428
- SHA512 537edd95435d2f2687a6ba41f1006bd96f8b4f2882a03f09103cd4d140df7e6116fe10a44d28dfdcd6598424ed33c16477df905a37ad3dd2e4a03784294fa1ab
- MD5 SHA1 SHA512