ae54c518a119bbd0ea9b44d2fa5c0286d7699ab090198670c38ae501b5a5c4e6

Analysis

max time kernel
151s
max time network
176s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
05/12/2022, 18:17

Target

ae54c518a119bbd0ea9b44d2fa5c0286d7699ab090198670c38ae501b5a5c4e6.exe
Size

153KB
MD5

f2f259ca0f68e76565462ad7c5209ff3
SHA1

6b854028c70c7a5e3f641cb0900b8cce316a85f2
SHA256

ae54c518a119bbd0ea9b44d2fa5c0286d7699ab090198670c38ae501b5a5c4e6
SHA512

73b28e5b5c14f5999e81a52e57e981ff4b6379ee1027590ab9114ec508e7eaab10a6648d6b5309840105b769efbf973fe976d461aa66d9c98406e429ae3770c7
SSDEEP

1536:YGWeQVF5KcJwSVWQz5/UsyZU7yQPOT0Oa95ed6hhz9hvHmEvTZzJH2BnSD6fw8Ch:YJeQVhJwrAVyaGsjedEtnTZRU1CLoJc

Score

8^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/740-132-0x0000000000400000-0x0000000000428000-memory.dmp	upx
behavioral2/memory/740-133-0x0000000000400000-0x0000000000428000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1312	740	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\ae54c518a119bbd0ea9b44d2fa5c0286d7699ab090198670c38ae501b5a5c4e6.exe
"C:\Users\Admin\AppData\Local\Temp\ae54c518a119bbd0ea9b44d2fa5c0286d7699ab090198670c38ae501b5a5c4e6.exe"
1⤵
PID:740
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 740 -s 296
  2⤵
  - Program crash
  PID:1312

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 740 -ip 740
1⤵
PID:2064

memory/740-132-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/740-133-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download