SCP - Containment Breach[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SCP - Containment Breach.exe
Size 6.2MB
Sample240807-yr5dratbjp
SHA256 a47c5cf44c25c0f22a3e36ff25fcf868bbde3c0a5611953a486d8747c6ac5bfc
MD5 f9f0d048f910de02684e2e36343bf6a0
SHA1 41330406d5fac8aa984938ac310b67ccee01ff74
SHA512 1f39c42f5262182bde9a04f41ebc2724cdc97215302459766efe2671613ad965c6149f59fc0c3c5ef2ae860233c891a625dc6f4e4493925c5e6f3cb53c19f5a1
SSDEEP 49152:rtcgOid11BmZ6ZnKu+vxoGD6QC7d7aIE2JGrs/2+mZ6uim:5cgOiNWs/5mI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SCP - Containment Breach.exe

File Explorer

SCP - Containment Breach.exe

.exe 6.2MB

SCP - Containment Breach.exe

IMPHASH 72ec30d9e89d6ce7a760b289b5ec4157
SHA256 a47c5cf44c25c0f22a3e36ff25fcf868bbde3c0a5611953a486d8747c6ac5bfc
MD5 f9f0d048f910de02684e2e36343bf6a0
SHA1 41330406d5fac8aa984938ac310b67ccee01ff74
SHA512 1f39c42f5262182bde9a04f41ebc2724cdc97215302459766efe2671613ad965c6149f59fc0c3c5ef2ae860233c891a625dc6f4e4493925c5e6f3cb53c19f5a1
SSDEEP 49152:rtcgOid11BmZ6ZnKu+vxoGD6QC7d7aIE2JGrs/2+mZ6uim:5cgOiNWs/5mI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5319

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FileTimeToSystemTime FileTimeToLocalFileTime LockResource SetEndOfFile CreateFileA SetStdHandle SetEnvironmentVariableA GetOEMCP GetACP IsBadCodePtr IsBadReadPtr GetStringTypeW GetStringTypeA GetUserDefaultLCID EnumSystemLocalesA GetLocaleInfoA IsValidCodePage IsValidLocale ReadFile FindResourceA GetLocaleInfoW VirtualAlloc GetModuleHandleA GetCommandLineA LoadResource ExitProcess LoadLibraryA GetProcAddress FreeLibrary GetVersionExA Sleep GetTempPathA GetSystemDirectoryA GetWindowsDirectoryA GetModuleFileNameA CreateEventA CloseHandle SetEvent WaitForSingleObject MultiByteToWideChar CreateDirectoryA RemoveDirectoryA DeleteFileA CopyFileA SetCurrentDirectoryA GetCurrentDirectoryA FindClose FindFirstFileA GetFileAttributesA FindNextFileA VirtualFree GetFullPathNameA EnterCriticalSection InitializeCriticalSection InterlockedExchange DeleteCriticalSection LeaveCriticalSection InterlockedDecrement InterlockedIncrement WideCharToMultiByte RtlUnwind GetVersion RaiseException HeapAlloc HeapFree GetTimeZoneInformation GetSystemTime GetLocalTime HeapReAlloc LCMapStringA LCMapStringW GetCPInfo CompareStringA CompareStringW TerminateProcess GetCurrentProcess HeapSize GetLastError GetCurrentThreadId TlsSetValue TlsAlloc TlsFree SetLastError TlsGetValue SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW HeapDestroy HeapCreate WriteFile SetUnhandledExceptionFilter IsBadWritePtr SetFilePointer FlushFileBuffers SetEnvironmentVariableW

user32

MessageBoxA MapVirtualKeyA ToAscii SystemParametersInfoA GetSystemMetrics MoveWindow InvalidateRect SetWindowLongA SetWindowPos GetWindowRect GetWindowLongA GetMessageA PeekMessageA DispatchMessageA DefWindowProcA DialogBoxParamA GetDesktopWindow SetWindowTextA GetWindowTextA EnableWindow GetDlgItem EndDialog SendDlgItemMessageA KillTimer SetForegroundWindow SetTimer UpdateWindow CreateWindowExA RegisterClassA LoadCursorA UnregisterClassA DestroyWindow ShowCursor ShowWindow ClientToScreen GetClientRect SetCursorPos ReleaseCapture SetCapture ScreenToClient SetCursor PostMessageA EndPaint BeginPaint GetCursorPos

wsock32

WSACleanup WSAStartup listen ioctlsocket connect accept socket recv getpeername ntohs htonl htons sendto select inet_ntoa recvfrom ntohl setsockopt closesocket getsockname bind send gethostbyname

winmm

timeKillEvent timeSetEvent timeGetTime timeEndPeriod timeGetDevCaps timeBeginPeriod

d3dxof

DirectXFileCreate

dplayx

ord4

ddraw

DirectDrawCreateEx DirectDrawEnumerateExA

dinput

DirectInputCreateEx

gdi32

GetStockObject RemoveFontResourceA ExtTextOutA AddFontResourceA CreateFontA CreateCompatibleDC SelectObject GetTextMetricsA DeleteDC DeleteObject GetTextExtentPoint32A GetCharABCWidthsA SetBkColor SetTextColor

shell32

ShellExecuteA

ole32

CoCreateInstance CoUninitialize CoInitialize

fmod

_FSOUND_Init@12 _FSOUND_SetHWND@4 _FSOUND_CD_Stop@4 _FSOUND_CD_SetPaused@8 _FSOUND_CD_SetVolume@8 _FSOUND_Close@0 _FSOUND_PlaySound@8 _FSOUND_StopSound@4 _FSOUND_SetPaused@8 _FSOUND_SetFrequency@8 _FSOUND_SetVolume@8 _FSOUND_SetPan@8 _FSOUND_3D_SetAttributes@12 _FSOUND_IsPlaying@4 _FSOUND_PlaySoundEx@16 _FSOUND_Sample_Load@20 _FSOUND_3D_SetDistanceFactor@4 _FSOUND_3D_SetDopplerFactor@4 _FSOUND_3D_SetRolloffFactor@4 _FSOUND_Update@0 _FSOUND_3D_Listener_SetAttributes@32 _FSOUND_Stream_Play@8 _FSOUND_Stream_Open@16 _FMUSIC_PlaySong@4 _FMUSIC_LoadSong@4 _FSOUND_Stream_Stop@4 _FSOUND_Stream_Close@4 _FMUSIC_StopSong@4 _FMUSIC_SetPaused@8 _FMUSIC_SetMasterVolume@8 _FMUSIC_IsFinished@4 _FMUSIC_FreeSong@4 _FSOUND_CD_Play@8 _FSOUND_CD_SetPlayMode@8 _FSOUND_Sample_GetDefaults@20 _FSOUND_Sample_Free@4 _FSOUND_Sample_SetDefaults@20 _FSOUND_Sample_SetMode@8