cc4810e3f3278b3b60e99dad5bedb7597e9a70d707b3dbba6e82c49a2e1ef72d

Analysis

max time kernel
93s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2022 23:27

Target

cc4810e3f3278b3b60e99dad5bedb7597e9a70d707b3dbba6e82c49a2e1ef72d.exe
Size

206KB
MD5

a35d45cc93bd866f9a06c75939023cf7
SHA1

d823d0a4bee7d38318ba03842962e25624e8b39f
SHA256

cc4810e3f3278b3b60e99dad5bedb7597e9a70d707b3dbba6e82c49a2e1ef72d
SHA512

e10e9ea55ac3d3e853380141df1baf541b1ceb07e7acf96f452c42b3fc6e2553c0dd7b08b09599ee19539e014faac16b5e5af15b1ef8fff78683ac079ec336bf
SSDEEP

6144:XEtB2/V0RC1/u2SGuW4o+SJuf/a1zjdHUkNDa3tK:XU8/Vx/u2Ju7lUzjpUEDWt

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/444-132-0x0000000000400000-0x0000000000450000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2204	444	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\cc4810e3f3278b3b60e99dad5bedb7597e9a70d707b3dbba6e82c49a2e1ef72d.exe
"C:\Users\Admin\AppData\Local\Temp\cc4810e3f3278b3b60e99dad5bedb7597e9a70d707b3dbba6e82c49a2e1ef72d.exe"
1⤵
PID:444
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 444 -s 272
  2⤵
  - Program crash
  PID:2204

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 452 -p 444 -ip 444
1⤵
PID:2520

memory/444-132-0x0000000000400000-0x0000000000450000-memory.dmp

Filesize
320KB

Download
memory/444-133-0x0000000000520000-0x0000000000535000-memory.dmp

Filesize
84KB

Download