22e43cff3ac5c1be38c8ed0195ef987c27a4542cc055925f134a67e97c905e90

Analysis

max time kernel
154s
max time network
169s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2022, 12:44

Target

22e43cff3ac5c1be38c8ed0195ef987c27a4542cc055925f134a67e97c905e90.exe
Size

84KB
MD5

68dc5d99b359185bdb72e64e1c473fa0
SHA1

abbbcd4a16eb299e6c6e3e8be396e03a66746957
SHA256

22e43cff3ac5c1be38c8ed0195ef987c27a4542cc055925f134a67e97c905e90
SHA512

d8938bb3a2718b87e008448b1632a9c7eafe5ac08a6431e4b8ce6345cc8d4acf046dde8e9e462fa1c333f9227e8b0dda4f96796bb09c54ff9137a26f64bce1ae
SSDEEP

1536:MHoSCdeVMCT6ggMw4Y7FgG2xV89mTr39w6XJJzVt/2YRmA7hGRIULTxkOSmnS:MHoLde/OgV432UcP39hXJZn/UEjUxkyS

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2228-132-0x0000000000400000-0x0000000000429000-memory.dmp	upx
behavioral2/memory/2228-133-0x0000000000400000-0x0000000000429000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3324	2228	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\22e43cff3ac5c1be38c8ed0195ef987c27a4542cc055925f134a67e97c905e90.exe
"C:\Users\Admin\AppData\Local\Temp\22e43cff3ac5c1be38c8ed0195ef987c27a4542cc055925f134a67e97c905e90.exe"
1⤵
PID:2228
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2228 -s 380
  2⤵
  - Program crash
  PID:3324

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 2228 -ip 2228
1⤵
PID:4580

memory/2228-132-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download
memory/2228-133-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download