8cb5a10745a555d360229ac8808f573075ce561fb491e7daefb42eb08c8c07af

Analysis

max time kernel
91s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2022 23:36

Target

8cb5a10745a555d360229ac8808f573075ce561fb491e7daefb42eb08c8c07af.exe
Size

259KB
MD5

82341e6a85786185da6cc5527928e511
SHA1

649ab2ea4f9aa92d03bd388e24c8cd7c78c910d5
SHA256

8cb5a10745a555d360229ac8808f573075ce561fb491e7daefb42eb08c8c07af
SHA512

8b4832586aa82ac2856101d3e3b82c9067ffec586d8e271c178406111a9bbff428a6389a2cd0430f13b09d39657b5d20eb5fe285b85a3a961855984328a386a0
SSDEEP

1536:cLnJRnGm56gy2Xbpk7UY92NAph+vfNVlyQkBAy1OknLP2:cDnGm5677UGTIfMhlnLP2

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4204-132-0x0000000000400000-0x0000000000443000-memory.dmp	upx
behavioral2/memory/4204-133-0x0000000000400000-0x0000000000443000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3628	4204	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\8cb5a10745a555d360229ac8808f573075ce561fb491e7daefb42eb08c8c07af.exe
"C:\Users\Admin\AppData\Local\Temp\8cb5a10745a555d360229ac8808f573075ce561fb491e7daefb42eb08c8c07af.exe"
1⤵
PID:4204
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4204 -s 276
  2⤵
  - Program crash
  PID:3628

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 4204 -ip 4204
1⤵
PID:5040

memory/4204-132-0x0000000000400000-0x0000000000443000-memory.dmp

Filesize
268KB

Download
memory/4204-133-0x0000000000400000-0x0000000000443000-memory.dmp

Filesize
268KB

Download