e6ec8e42632280441c2b4e259c885238685b7625bde1566f9321c5287d8060bf

Analysis

max time kernel
180s
max time network
194s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 11:16

Target

e6ec8e42632280441c2b4e259c885238685b7625bde1566f9321c5287d8060bf.exe
Size

18KB
MD5

1c1bc117650566267c6ef0a4138a57a5
SHA1

e6671fd727db21c12df999fd939607ed48a39cad
SHA256

e6ec8e42632280441c2b4e259c885238685b7625bde1566f9321c5287d8060bf
SHA512

bbc59f184c0f38f0083c32f5ce2d8a8ddb49ab0d1c3fbaea267057f4f7605b6f4a9b2dec055220fe105d9a160c9ef269b8d2eb9fdafb4706866245d91ac488e4
SSDEEP

384:jwznVKyqCvPSryiZuZnHGCpRl1qT/P2XRfnlDfE9:jQnwfCyyHGSRDqkvlD

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/4156-132-0x0000000031420000-0x0000000031431000-memory.dmp	upx

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2208 4156 WerFault.exe e6ec8e42632280441c2b4e259c885238685b7625bde1566f9321c5287d8060bf.exe

pid	pid_target	process	target process
2208	4156	WerFault.exe	e6ec8e42632280441c2b4e259c885238685b7625bde1566f9321c5287d8060bf.exe

C:\Users\Admin\AppData\Local\Temp\e6ec8e42632280441c2b4e259c885238685b7625bde1566f9321c5287d8060bf.exe
"C:\Users\Admin\AppData\Local\Temp\e6ec8e42632280441c2b4e259c885238685b7625bde1566f9321c5287d8060bf.exe"
1⤵
PID:4156

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4156 -s 304
2⤵
- Program crash
PID:2208

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4156 -ip 4156
1⤵
PID:344

memory/4156-132-0x0000000031420000-0x0000000031431000-memory.dmp

Filesize
68KB

Download