8f4667d0fefae205d398be8b143c2c6e42d8a035c100cd3fe02c67fb855e606d

Analysis

max time kernel
91s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
05-12-2022 12:45

Target

8f4667d0fefae205d398be8b143c2c6e42d8a035c100cd3fe02c67fb855e606d.exe
Size

210KB
MD5

b948a89b8b24188440b393b2b818710d
SHA1

e325a1eca27f355c754c67e29ab7f954976a6aad
SHA256

8f4667d0fefae205d398be8b143c2c6e42d8a035c100cd3fe02c67fb855e606d
SHA512

ebbaf659c4589fb41a2c31f835957057d11f8dc68953a1f2ebf4ad0443c542bde43f64e5a07dd6a6aac3e2ba3ac6a7dc92fc61beefa53040f6178d18ce13aca7
SSDEEP

3072:oxyDkkylFPYjpXIbUVmXDN8YkWc7xnQa9Bz2OlYP+hhRnf+8DcP4acga+w1Y7vf+:ntlXIIoTNLENQmtlRhhJDXSrqMNLG

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/5064-132-0x0000000000400000-0x0000000000451000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3588	5064	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\8f4667d0fefae205d398be8b143c2c6e42d8a035c100cd3fe02c67fb855e606d.exe
"C:\Users\Admin\AppData\Local\Temp\8f4667d0fefae205d398be8b143c2c6e42d8a035c100cd3fe02c67fb855e606d.exe"
1⤵
PID:5064
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5064 -s 264
  2⤵
  - Program crash
  PID:3588

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 5064 -ip 5064
1⤵
PID:3752

memory/5064-132-0x0000000000400000-0x0000000000451000-memory.dmp

Filesize
324KB

Download
memory/5064-133-0x0000000000460000-0x0000000000474000-memory.dmp

Filesize
80KB

Download