94f1368e8b484e17f0081631eaa20273f73b0a050b15c02a83c131d245a41521

Analysis

max time kernel
141s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2022, 18:46

Target
94f1368e8b484e17f0081631eaa20273f73b0a050b15c02a83c131d245a41521.exe
Size 277KB
Sample221206-xe4e9aga81
SHA256 94f1368e8b484e17f0081631eaa20273f73b0a050b15c02a83c131d245a41521
MD5 0f5efce57c5e383562d280f76983d6c9
SHA1 df8cd696b0a441776119a3a5fab3c80d9e997695
SHA512 b1b6e62180c8e6650f0e2ecd715b70920e575d7d13f98eb779913a18026de3bf2f1db62bf92e09c5e207bd8f0ad245835361a8e8d284e6f04690e81e4733d748
SSDEEP 6144:WUjUtlCty4Dl8Li+h1HZOFPCQRzIy0/jL15sDSH11xGA47:ETCty47+bH0FP9zWL15sDoaAY
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4664-132-0x0000000000400000-0x0000000000828000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2520	4664	WerFault.exe	80

C:\Users\Admin\AppData\Local\Temp\94f1368e8b484e17f0081631eaa20273f73b0a050b15c02a83c131d245a41521.exe
"C:\Users\Admin\AppData\Local\Temp\94f1368e8b484e17f0081631eaa20273f73b0a050b15c02a83c131d245a41521.exe"
1⤵
PID:4664
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4664 -s 292
  2⤵
  - Program crash
  PID:2520

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 4664 -ip 4664
1⤵
PID:4328

memory/4664-132-0x0000000000400000-0x0000000000828000-memory.dmp

Download