2f5d340f80916f2ab6bd943c1fb46dce05b8f21278b9a09077e3f36ada680528

Analysis

max time kernel
167s
max time network
187s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 09:45

Target

2f5d340f80916f2ab6bd943c1fb46dce05b8f21278b9a09077e3f36ada680528.exe
Size

193KB
MD5

09009dc901c16054ed438acfea9f8879
SHA1

9bd304bfb6660ce259fab0faf4583f4ff997d544
SHA256

2f5d340f80916f2ab6bd943c1fb46dce05b8f21278b9a09077e3f36ada680528
SHA512

14f924ef0cf45de16476a5560a70c2e24a4a41d551a85d4d302e74e34cadcf97b42631d6c63423411c61fc6d7ef14835db0282d870141858a0f42217027438b8
SSDEEP

3072:i2inJLAgT9Z1JalFYDb8/hZLs91nHykpkKG2L28jWYdLXcniLgqnToA15NRdPkqx:iHJLZH1Jas8DgHpkKG2LT4iLgk/j6AP

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/2944-132-0x0000000000400000-0x0000000000440000-memory.dmp	upx

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2496 2944 WerFault.exe 2f5d340f80916f2ab6bd943c1fb46dce05b8f21278b9a09077e3f36ada680528.exe

pid	pid_target	process	target process
2496	2944	WerFault.exe	2f5d340f80916f2ab6bd943c1fb46dce05b8f21278b9a09077e3f36ada680528.exe

C:\Users\Admin\AppData\Local\Temp\2f5d340f80916f2ab6bd943c1fb46dce05b8f21278b9a09077e3f36ada680528.exe
"C:\Users\Admin\AppData\Local\Temp\2f5d340f80916f2ab6bd943c1fb46dce05b8f21278b9a09077e3f36ada680528.exe"
1⤵
PID:2944

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2944 -s 220
2⤵
- Program crash
PID:2496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2944 -ip 2944
1⤵
PID:1788

memory/2944-132-0x0000000000400000-0x0000000000440000-memory.dmp

Filesize
256KB

Download
memory/2944-133-0x00000000001D0000-0x00000000001E4000-memory.dmp

Filesize
80KB

Download