aaf0d3907b7c0e38a2495def1ef4756fb9daa371278151e65fce27ab931bcdf1

Analysis

max time kernel
103s
max time network
164s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
02/12/2022, 23:13

Target

aaf0d3907b7c0e38a2495def1ef4756fb9daa371278151e65fce27ab931bcdf1.exe
Size

125KB
MD5

680a698c0798685aa588925570c62c3e
SHA1

b6e6fec1eb6729b0824f845e1ac4acb7c926a072
SHA256

aaf0d3907b7c0e38a2495def1ef4756fb9daa371278151e65fce27ab931bcdf1
SHA512

65e551a1ca365b93434f7393a1f1e1091b9463f9d806a03104bf41eaa1c62ee18332154e7674f4b47c9941202c23b8a4d9ef157eaed70d79d807ca0855cba22a
SSDEEP

3072:FicPKAaeaZ3dCHx8ie9tiiFkfbzMLQIZYJGqzG4:FlPKAVSt029JFkf4QICL

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
948	aaf0d3907b7c0e38a2495def1ef4756fb9daa371278151e65fce27ab931bcdf1.exe

C:\Users\Admin\AppData\Local\Temp\aaf0d3907b7c0e38a2495def1ef4756fb9daa371278151e65fce27ab931bcdf1.exe
"C:\Users\Admin\AppData\Local\Temp\aaf0d3907b7c0e38a2495def1ef4756fb9daa371278151e65fce27ab931bcdf1.exe"
1⤵
- Suspicious use of UnmapMainImage
PID:948

memory/948-54-0x0000000000400000-0x0000000000447000-memory.dmp

Filesize
284KB

Download
memory/948-55-0x0000000000400000-0x0000000000447000-memory.dmp

Filesize
284KB

Download
memory/948-57-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/948-60-0x0000000075D51000-0x0000000075D53000-memory.dmp

Filesize
8KB

Download
memory/948-61-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download