14d4e7d2aa93afc4ca50329f3d19ac58d79ba4137716949839e5ac974baf22e2

Analysis

max time kernel
91s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
21/10/2022, 01:45

Target
14d4e7d2aa93afc4ca50329f3d19ac58d79ba4137716949839e5ac974baf22e2.exe
Size 197KB
Sample221021-b6fbvafcbm
SHA256 14d4e7d2aa93afc4ca50329f3d19ac58d79ba4137716949839e5ac974baf22e2
MD5 7ba171b8eaad479ee0195be9f32b8d2c
SHA1 f8c672affb4346c09ac614c3861ad7baf998e3eb
SHA512 12096d310b339b6ce0008010c3f6027f83a31e46061c2ef8ca27799b815b4c60e7805d66a5b08da97ed7e86d725d2409087871035564c8b5ddeaa82d37efe500
SSDEEP 3072:99kbTRHXQiquMqidd1k4ztSTUBs5DWhXyr0vw3mslqn:994RXQiZFid1LBs2c2
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4024-132-0x0000000000400000-0x0000000000432000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1092	4024	WerFault.exe	83

C:\Users\Admin\AppData\Local\Temp\14d4e7d2aa93afc4ca50329f3d19ac58d79ba4137716949839e5ac974baf22e2.exe
"C:\Users\Admin\AppData\Local\Temp\14d4e7d2aa93afc4ca50329f3d19ac58d79ba4137716949839e5ac974baf22e2.exe"
1⤵
PID:4024
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4024 -s 224
  2⤵
  - Program crash
  PID:1092

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 188 -p 4024 -ip 4024
1⤵
PID:4532

memory/4024-132-0x0000000000400000-0x0000000000432000-memory.dmp

Download