972a74136d477df34c8c9c4785ee4867d3b350b6a20e4db858226cdf9acc414e

Analysis

max time kernel
185s
max time network
180s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
29/11/2022, 04:55

Target

972a74136d477df34c8c9c4785ee4867d3b350b6a20e4db858226cdf9acc414e.exe
Size

71KB
MD5

67d63afa35047471aa920dfa996e7528
SHA1

d9a8f98e5b924aa1e6edbec3197ba4a56e92e2e6
SHA256

972a74136d477df34c8c9c4785ee4867d3b350b6a20e4db858226cdf9acc414e
SHA512

c318d0818322470b3199a88c7ee8b379548f2ab06ebec5ed1402d353e985e35acbc68f389b9a7bd74f7310e3f104262930b9885f8d5335ae0864760d91050b46
SSDEEP

768:cckrgwXXiXB9GAH8nOJ7S2kjHjb88LmMjThIBt9ir6rpfrQCpR+q4:cP3niR9GKvIbxmMjFIB46rBrQCKq4

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3644-132-0x0000000000400000-0x0000000000443000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3816	3644	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\972a74136d477df34c8c9c4785ee4867d3b350b6a20e4db858226cdf9acc414e.exe
"C:\Users\Admin\AppData\Local\Temp\972a74136d477df34c8c9c4785ee4867d3b350b6a20e4db858226cdf9acc414e.exe"
1⤵
PID:3644
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3644 -s 428
  2⤵
  - Program crash
  PID:3816

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3644 -ip 3644
1⤵
PID:3624

memory/3644-132-0x0000000000400000-0x0000000000443000-memory.dmp

Filesize
268KB

Download
memory/3644-133-0x00000000004C0000-0x00000000004C3000-memory.dmp

Filesize
12KB

Download