7fd981046661a7bcc1c2ff337402c05cf1b26579aa8e3ad96129b48fc618a48f

Analysis

max time kernel
40s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 04:00

Target

7fd981046661a7bcc1c2ff337402c05cf1b26579aa8e3ad96129b48fc618a48f.exe
Size

341KB
MD5

803af4bea0082ff4614d6c02554b8861
SHA1

18251547700ea42b3c0854adc27bd143575dc2e4
SHA256

7fd981046661a7bcc1c2ff337402c05cf1b26579aa8e3ad96129b48fc618a48f
SHA512

cacffcfbcdacd3b6186a6970ec43d8056ec50431672bbe967037a915d74aa8ac2666d436f58c4462a661d1734814856ed7f3467bf06f7d19d57a6d66c15fe76a
SSDEEP

6144:683DIRnFXptViTTu5oEEZol2/66v2VxmgKAuBxDUd1OP6Kkx:683mnF5mTug1hvk4KuBV81Odu

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2036-56-0x0000000000400000-0x00000000004BD000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1612	2036	WerFault.exe	20

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 1612	2036	7fd981046661a7bcc1c2ff337402c05cf1b26579aa8e3ad96129b48fc618a48f.exe	28
PID 2036 wrote to memory of 1612	2036	7fd981046661a7bcc1c2ff337402c05cf1b26579aa8e3ad96129b48fc618a48f.exe	28
PID 2036 wrote to memory of 1612	2036	7fd981046661a7bcc1c2ff337402c05cf1b26579aa8e3ad96129b48fc618a48f.exe	28
PID 2036 wrote to memory of 1612	2036	7fd981046661a7bcc1c2ff337402c05cf1b26579aa8e3ad96129b48fc618a48f.exe	28

C:\Users\Admin\AppData\Local\Temp\7fd981046661a7bcc1c2ff337402c05cf1b26579aa8e3ad96129b48fc618a48f.exe
"C:\Users\Admin\AppData\Local\Temp\7fd981046661a7bcc1c2ff337402c05cf1b26579aa8e3ad96129b48fc618a48f.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2036 -s 164
  2⤵
  - Program crash
  PID:1612

memory/2036-54-0x0000000075501000-0x0000000075503000-memory.dmp

Filesize
8KB

Download
memory/2036-56-0x0000000000400000-0x00000000004BD000-memory.dmp

Filesize
756KB

Download