1.2
低危
该样本未表现出任何异常！
重新分析
更多

379674c307bad7c5c79a173859806bfad28b9a4e1e0ee156f53df2aa893fa323

cc4fc7721615a03885a9f5c16cbb0547.exe

分析耗时

17s

最近分析

文件大小

3.4MB
静态报毒 动态报毒
鹰眼引擎
未检测 暂无鹰眼引擎检测结果
静态判定
反病毒引擎
未检测 暂无反病毒引擎检测结果
静态指标
Command line console output was observed (50 out of 346 个事件)
Time & API Arguments Status Return Repeated
1621020365.184751
WriteConsoleA
buffer: U
console_handle: 0x00000007
success 1 0
1621020365.184751
WriteConsoleA
buffer: s
console_handle: 0x00000007
success 1 0
1621020365.184751
WriteConsoleA
buffer: a
console_handle: 0x00000007
success 1 0
1621020365.184751
WriteConsoleA
buffer: g
console_handle: 0x00000007
success 1 0
1621020365.184751
WriteConsoleA
buffer: e
console_handle: 0x00000007
success 1 0
1621020365.184751
WriteConsoleA
buffer: o
console_handle: 0x00000007
success 1 0
1621020365.184751
WriteConsoleA
buffer: u
console_handle: 0x00000007
success 1 0
1621020365.184751
WriteConsoleA
buffer: t
console_handle: 0x00000007
success 1 0
1621020365.184751
WriteConsoleA
buffer: p
console_handle: 0x00000007
success 1 0
1621020365.184751
WriteConsoleA
buffer: u
console_handle: 0x00000007
success 1 0
1621020365.184751
WriteConsoleA
buffer: t
console_handle: 0x00000007
success 1 0
1621020365.200751
WriteConsoleA
buffer: T
console_handle: 0x00000007
success 1 0
1621020365.200751
WriteConsoleA
buffer: a
console_handle: 0x00000007
success 1 0
1621020365.200751
WriteConsoleA
buffer: r
console_handle: 0x00000007
success 1 0
1621020365.200751
WriteConsoleA
buffer: g
console_handle: 0x00000007
success 1 0
1621020365.200751
WriteConsoleA
buffer: e
console_handle: 0x00000007
success 1 0
1621020365.200751
WriteConsoleA
buffer: t
console_handle: 0x00000007
success 1 0
1621020365.200751
WriteConsoleA
buffer: f
console_handle: 0x00000007
success 1 0
1621020365.200751
WriteConsoleA
buffer: i
console_handle: 0x00000007
success 1 0
1621020365.200751
WriteConsoleA
buffer: l
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: e
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: p
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: a
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: t
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: h
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: w
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: i
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: t
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: h
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: o
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: u
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: t
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: e
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: x
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: t
console_handle: 0x00000007
success 1 0
1621020365.215751
WriteConsoleA
buffer: e
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: n
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: s
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: i
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: o
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: n
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: t
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: h
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: e
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: t
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: o
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: o
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: l
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: w
console_handle: 0x00000007
success 1 0
1621020365.231751
WriteConsoleA
buffer: i
console_handle: 0x00000007
success 1 0
This executable is signed
This executable has a PDB path (1 个事件)
pdb_path C:\b\e6261f6e0bdad888\Tools\HighresBlender\bin\Release\HighresBlender32.pdb
行为判定
动态指标
可视化分析
二进制图像
暂无二进制图像 该样本未生成二进制可视化图像
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2016-09-29 01:49:28

Imports

Library KERNEL32.dll:
• 0x4df000 FindFirstFileW
• 0x4df004 MapViewOfFile
• 0x4df008 UnmapViewOfFile
• 0x4df00c CreateFileW
• 0x4df010 GetLastError
• 0x4df014 FindClose
• 0x4df018 CreateFileMappingW
• 0x4df01c GetSystemInfo
• 0x4df020 FindNextFileW
• 0x4df024 CloseHandle
• 0x4df028 CreateSemaphoreA
• 0x4df02c WideCharToMultiByte
• 0x4df034 MultiByteToWideChar
• 0x4df038 GetStringTypeW
• 0x4df03c DuplicateHandle
• 0x4df040 WaitForSingleObject
• 0x4df044 GetCurrentProcess
• 0x4df048 GetCurrentThread
• 0x4df04c GetCurrentThreadId
• 0x4df050 GetExitCodeThread
• 0x4df054 EncodePointer
• 0x4df058 DecodePointer
• 0x4df068 HeapFree
• 0x4df06c HeapAlloc
• 0x4df070 GetCPInfo
• 0x4df074 ExitProcess
• 0x4df078 GetModuleHandleExW
• 0x4df07c GetProcAddress
• 0x4df080 AreFileApisANSI
• 0x4df084 GetCommandLineA
• 0x4df088 OutputDebugStringW
• 0x4df08c GetThreadTimes
• 0x4df090 FreeLibrary
• 0x4df098 GetModuleFileNameW
• 0x4df09c GetModuleHandleA
• 0x4df0a0 LoadLibraryExW
• 0x4df0a4 ReadFile
• 0x4df0a8 RaiseException
• 0x4df0ac RtlUnwind
• 0x4df0bc SetLastError
• 0x4df0c4 CreateEventW
• 0x4df0c8 Sleep
• 0x4df0cc TerminateProcess
• 0x4df0d0 TlsAlloc
• 0x4df0d4 TlsGetValue
• 0x4df0d8 TlsSetValue
• 0x4df0dc TlsFree
• 0x4df0e0 GetStartupInfoW
• 0x4df0e4 GetTickCount
• 0x4df0e8 GetModuleHandleW
• 0x4df0ec CreateSemaphoreW
• 0x4df0f0 CreateThread
• 0x4df0f4 ExitThread
• 0x4df0f8 CreateTimerQueue
• 0x4df0fc SetEvent
• 0x4df104 SignalObjectAndWait
• 0x4df108 SwitchToThread
• 0x4df10c SetThreadPriority
• 0x4df110 GetThreadPriority
• 0x4df134 UnregisterWait
• 0x4df138 GetDateFormatW
• 0x4df13c GetTimeFormatW
• 0x4df140 CompareStringW
• 0x4df144 LCMapStringW
• 0x4df148 GetLocaleInfoW
• 0x4df14c IsValidLocale
• 0x4df150 GetUserDefaultLCID
• 0x4df154 EnumSystemLocalesW
• 0x4df158 IsDebuggerPresent
• 0x4df15c GetProcessHeap
• 0x4df160 GetStdHandle
• 0x4df164 WriteFile
• 0x4df168 HeapSize
• 0x4df16c IsValidCodePage
• 0x4df170 GetACP
• 0x4df174 GetOEMCP
• 0x4df178 GetFileType
• 0x4df17c GetModuleFileNameA
• 0x4df184 GetCurrentProcessId
• 0x4df190 SetFilePointerEx
• 0x4df194 FlushFileBuffers
• 0x4df198 GetConsoleCP
• 0x4df19c GetConsoleMode
• 0x4df1ac QueryDepthSList
• 0x4df1b0 ReleaseSemaphore
• 0x4df1b4 InitializeSListHead
• 0x4df1b8 UnregisterWaitEx
• 0x4df1bc GetVersionExW
• 0x4df1c0 VirtualAlloc
• 0x4df1c4 VirtualFree
• 0x4df1c8 VirtualProtect
• 0x4df1cc ReadConsoleW
• 0x4df1d0 HeapReAlloc
• 0x4df1d8 SetStdHandle
• 0x4df1dc WriteConsoleW
• 0x4df1e0 LoadLibraryW
• 0x4df1e4 SetEndOfFile
• 0x4df1ec DebugBreak
• 0x4df1f4 LocalFree
• 0x4df1f8 FormatMessageA
Library SHLWAPI.dll:
• 0x4df200 PathFindExtensionW

Hosts

No hosts contacted.

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 49235 114.114.114.114 53
192.168.56.101 50534 114.114.114.114 53
192.168.56.101 56539 114.114.114.114 53
192.168.56.101 58367 114.114.114.114 53
192.168.56.101 65004 114.114.114.114 53
192.168.56.101 137 192.168.56.255 137
192.168.56.101 123 20.189.79.72 time.windows.com 123
192.168.56.101 55368 224.0.0.252 5355
192.168.56.101 56804 224.0.0.252 5355
192.168.56.101 60123 224.0.0.252 5355
192.168.56.101 62191 224.0.0.252 5355
192.168.56.101 1900 239.255.255.250 1900
192.168.56.101 56540 239.255.255.250 3702
192.168.56.101 56807 239.255.255.250 1900
192.168.56.101 58368 239.255.255.250 3702
192.168.56.101 58370 239.255.255.250 3702
192.168.56.101 58707 239.255.255.250 3702

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.