d013cae1e77291e719022d0066dcdb0057e048f2a1d592b584a6384b2a2e4eac

Analysis

max time kernel
165s
max time network
173s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03-12-2022 17:49

Target

d013cae1e77291e719022d0066dcdb0057e048f2a1d592b584a6384b2a2e4eac.dll
Size

16KB
MD5

0f083eafa23b66204efb00fc83774f00
SHA1

0ec083dffba270b8b22da8b7ba76c98f5996fce6
SHA256

d013cae1e77291e719022d0066dcdb0057e048f2a1d592b584a6384b2a2e4eac
SHA512

0b1eec9d01ffa9685019acbf5413a5098cb28a4387e0848710fc3e6ac12e495305e98222f8dc9881b5e7753e9c426b70bdab2a765191cce60e157e388bf8bf11
SSDEEP

384:S9a7L+KQ6B1WiXZopmPgzXmRYElh1LB9RTlnXLRbzl9:SYW6rGpUIJmLNlXFbf

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4040-133-0x0000000010000000-0x000000001000F000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4928	4040	WerFault.exe	80

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 4040	2240	rundll32.exe	80
PID 2240 wrote to memory of 4040	2240	rundll32.exe	80
PID 2240 wrote to memory of 4040	2240	rundll32.exe	80

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\d013cae1e77291e719022d0066dcdb0057e048f2a1d592b584a6384b2a2e4eac.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\d013cae1e77291e719022d0066dcdb0057e048f2a1d592b584a6384b2a2e4eac.dll,#1
  2⤵
  PID:4040
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 4040 -s 600
    3⤵
    - Program crash
    PID:4928

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4040 -ip 4040
1⤵
PID:4388

memory/4040-132-0x0000000000000000-mapping.dmp

Download
memory/4040-133-0x0000000010000000-0x000000001000F000-memory.dmp

Filesize
60KB

Download