e1755eab1c4b2710cc304ea33727b5770de39cf265a575c0f4250ddb1594960e

Analysis

max time kernel
103s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2022 23:29

Target

e1755eab1c4b2710cc304ea33727b5770de39cf265a575c0f4250ddb1594960e.exe
Size

158KB
MD5

5a01c350dcb66ffb4b627ac59c8ce794
SHA1

520a17593a4c0cb8ad27a4e6c033882724d126df
SHA256

e1755eab1c4b2710cc304ea33727b5770de39cf265a575c0f4250ddb1594960e
SHA512

290beea3065af278ac92c53663b71ecf72f0c582d15ee0d224eb308e582091e1e75d2e3af1e9d952d50924183b2b8d87484f13523d4f2f3611d5d22bb82ec35e
SSDEEP

3072:2jvXGphAjSteGi0p+XsRf8yNqXBehq+8Qa8X0/j/PrAQfS7SAD0:kPGphAjjb0IXCfGec+w8dHzD

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/2320-132-0x0000000000400000-0x000000000043A000-memory.dmp	upx

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4744 2320 WerFault.exe e1755eab1c4b2710cc304ea33727b5770de39cf265a575c0f4250ddb1594960e.exe

pid	pid_target	process	target process
4744	2320	WerFault.exe	e1755eab1c4b2710cc304ea33727b5770de39cf265a575c0f4250ddb1594960e.exe

C:\Users\Admin\AppData\Local\Temp\e1755eab1c4b2710cc304ea33727b5770de39cf265a575c0f4250ddb1594960e.exe
"C:\Users\Admin\AppData\Local\Temp\e1755eab1c4b2710cc304ea33727b5770de39cf265a575c0f4250ddb1594960e.exe"
1⤵
PID:2320

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2320 -s 224
2⤵
- Program crash
PID:4744

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 2320 -ip 2320
1⤵
PID:1140

memory/2320-132-0x0000000000400000-0x000000000043A000-memory.dmp

Filesize
232KB

Download