940dc30ce88f39a69b9b34f4f432314cf835a69b75fd725d220d3ed8c1f40258

Analysis

max time kernel
282s
max time network
332s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
03/12/2022, 18:07

Target

940dc30ce88f39a69b9b34f4f432314cf835a69b75fd725d220d3ed8c1f40258.exe
Size

1.2MB
MD5

fb3f315f0f4571871fe5e1922cc53d51
SHA1

f8561751b51747e4d8c638945d0378d35666dfe2
SHA256

940dc30ce88f39a69b9b34f4f432314cf835a69b75fd725d220d3ed8c1f40258
SHA512

3f70bb0f489f2dde7965368446c840978aa957209ab69db3d6f398b0064f82cce0207abdf5b34977342a35ac7d5229f8b449a2fd856255fb8bee52f8d71901c1
SSDEEP

24576:wBUioN75pBAWLkMKOotTKdNUVF42Dj7iCuxvepY9/xjDb:FiW5pBhk/NKIf42DxuNepyJ

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4100-132-0x0000000000400000-0x0000000000423000-memory.dmp	upx

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4100	940dc30ce88f39a69b9b34f4f432314cf835a69b75fd725d220d3ed8c1f40258.exe
4100	940dc30ce88f39a69b9b34f4f432314cf835a69b75fd725d220d3ed8c1f40258.exe

C:\Users\Admin\AppData\Local\Temp\940dc30ce88f39a69b9b34f4f432314cf835a69b75fd725d220d3ed8c1f40258.exe
"C:\Users\Admin\AppData\Local\Temp\940dc30ce88f39a69b9b34f4f432314cf835a69b75fd725d220d3ed8c1f40258.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4100

memory/4100-132-0x0000000000400000-0x0000000000423000-memory.dmp

Filesize
140KB

Download