e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae

Analysis

max time kernel
148s
max time network
167s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
30-11-2022 13:50

Target

e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae.exe
Size

703KB
MD5

518704328a94e7c9d0cda6a225a2334d
SHA1

5502bfe1d851cc29a51719d705ee1bab67e36faa
SHA256

e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae
SHA512

0b7f3f6088d0abef551b7a62250c4f13ad6f5d69f666ffc6f696190079d4151ab38bcd303637818dcb9235d383eb60b1c3536b30774b185e7fa29b302e9b3129
SSDEEP

12288:h6T4AP+pZyQexWq1YIlkVWcyKSGOi28RI/wkrn/1pIlkVdHbxa1CZwXg:4PmlexrRl+/HOi5Rcw+nwlkVdHtotw

Score

8^/10

dave

Dave packer 1 IoCs

Detects executable using a packer named 'Dave' by the community, based on a string at the end.

Processes:

resource	yara_rule
behavioral1/memory/1508-63-0x00000000004C0000-0x0000000000513000-memory.dmp	dave

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae.exe

pid	process
1508	e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae.exe
1508	e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae.exe

C:\Users\Admin\AppData\Local\Temp\e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae.exe
"C:\Users\Admin\AppData\Local\Temp\e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1508

memory/1508-54-0x0000000074C91000-0x0000000074C93000-memory.dmp

Filesize
8KB

Download
memory/1508-55-0x0000000001EC0000-0x0000000001F16000-memory.dmp

Filesize
344KB

Download
memory/1508-59-0x0000000010000000-0x0000000010053000-memory.dmp

Filesize
332KB

Download
memory/1508-63-0x00000000004C0000-0x0000000000513000-memory.dmp

Filesize
332KB

Download