e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30-11-2022 13:50

Target

e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae.exe
Size

703KB
MD5

518704328a94e7c9d0cda6a225a2334d
SHA1

5502bfe1d851cc29a51719d705ee1bab67e36faa
SHA256

e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae
SHA512

0b7f3f6088d0abef551b7a62250c4f13ad6f5d69f666ffc6f696190079d4151ab38bcd303637818dcb9235d383eb60b1c3536b30774b185e7fa29b302e9b3129
SSDEEP

12288:h6T4AP+pZyQexWq1YIlkVWcyKSGOi28RI/wkrn/1pIlkVdHbxa1CZwXg:4PmlexrRl+/HOi5Rcw+nwlkVdHtotw

Score

8^/10

dave

Dave packer 1 IoCs

Detects executable using a packer named 'Dave' by the community, based on a string at the end.

Processes:

resource	yara_rule
behavioral2/memory/4604-140-0x0000000002860000-0x00000000028B3000-memory.dmp	dave

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae.exe

pid	process
4604	e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae.exe
4604	e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae.exe

C:\Users\Admin\AppData\Local\Temp\e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae.exe
"C:\Users\Admin\AppData\Local\Temp\e37f1e3d7d4fab64b515f3458415738c50176e0e2332037b137a67a4080a0eae.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4604

memory/4604-132-0x00000000028D0000-0x0000000002926000-memory.dmp

Filesize
344KB

Download
memory/4604-136-0x0000000010000000-0x0000000010053000-memory.dmp

Filesize
332KB

Download
memory/4604-140-0x0000000002860000-0x00000000028B3000-memory.dmp

Filesize
332KB

Download