85c4b6cee094d3b1db4e12c5018a7f07bcfc3a911ffbe56709d950a51d326386

Analysis

max time kernel
143s
max time network
192s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2022 23:21

Target

85c4b6cee094d3b1db4e12c5018a7f07bcfc3a911ffbe56709d950a51d326386.exe
Size

121KB
MD5

9bbeb47ad151bf08b78c84b62492fbb9
SHA1

87906eabe97cae3386b7643e7129b7297bf7f371
SHA256

85c4b6cee094d3b1db4e12c5018a7f07bcfc3a911ffbe56709d950a51d326386
SHA512

59ec9814dd9a07b3dbd8d05b89df8d153bb62c42ca86d40b91915b3a483e19aa358bf67f583895fa6f75e5da7d934eae101f65ed7cc157ed7309dd20998cab9b
SSDEEP

1536:FACANulUWHeEZN7r+Mv9NdpuFE6eL8+h9tE3BY+d3UMGDwaJ9ChD:FACANZWHeEHFjuTs9an3QDJa

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3492-132-0x0000000000400000-0x0000000000420000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4172	3492	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\85c4b6cee094d3b1db4e12c5018a7f07bcfc3a911ffbe56709d950a51d326386.exe
"C:\Users\Admin\AppData\Local\Temp\85c4b6cee094d3b1db4e12c5018a7f07bcfc3a911ffbe56709d950a51d326386.exe"
1⤵
PID:3492
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3492 -s 532
  2⤵
  - Program crash
  PID:4172

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 3492 -ip 3492
1⤵
PID:1404

memory/3492-132-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/3492-134-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download
memory/3492-137-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/3492-138-0x0000000000400000-0x0000000000417000-memory.dmp

Filesize
92KB

Download