93deaf7cce52e3d1418cae80406e09906f35f58d0a159d1eb03e6524c3356d51

Analysis

max time kernel
174s
max time network
180s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
05/12/2022, 12:13

Target

93deaf7cce52e3d1418cae80406e09906f35f58d0a159d1eb03e6524c3356d51.exe
Size

128KB
MD5

22a4c70f0ae12c916ebc304f11059ce6
SHA1

ebbd2c520f4fe882c2f92503416b6928a409ea41
SHA256

93deaf7cce52e3d1418cae80406e09906f35f58d0a159d1eb03e6524c3356d51
SHA512

bac843dc21d0c6a4cf56e11a45de7992d6fa497ecfb769ba822c7723307a07a83749a6aa0c6c8ac68b5f7545b4c7549afa13c0a6d2cf5fdd00167149232b7779
SSDEEP

3072:bIWiL07ILGI7I2uZU8sPqP336L26MNz7BEv1:bIWiL0I17XuZU8kqPaL26M97K

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3032-132-0x0000000000400000-0x000000000044E000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4068	3032	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\93deaf7cce52e3d1418cae80406e09906f35f58d0a159d1eb03e6524c3356d51.exe
"C:\Users\Admin\AppData\Local\Temp\93deaf7cce52e3d1418cae80406e09906f35f58d0a159d1eb03e6524c3356d51.exe"
1⤵
PID:3032
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3032 -s 360
  2⤵
  - Program crash
  PID:4068

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3032 -ip 3032
1⤵
PID:540

memory/3032-132-0x0000000000400000-0x000000000044E000-memory.dmp

Filesize
312KB

Download
memory/3032-133-0x0000000000560000-0x0000000000568000-memory.dmp

Filesize
32KB

Download