d2682f2f2ba590628fe77deb4996d72f959b9e725aa125b68e1c4f34cab0b05a

Analysis

max time kernel
337s
max time network
393s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2022, 19:41

Target

d2682f2f2ba590628fe77deb4996d72f959b9e725aa125b68e1c4f34cab0b05a.exe
Size

816KB
MD5

5c641be4bfd4073dc1052232288ca2da
SHA1

958cf482212d22b2dc94cfbaa42cfb7f7b089504
SHA256

d2682f2f2ba590628fe77deb4996d72f959b9e725aa125b68e1c4f34cab0b05a
SHA512

bb27eefa7ef96c4bc875e3c7352f495c645e6429aeb5afd51a5214d3ff6e6de62ca42d9b7809b321e039abe99fe051c3603d6e4b912316184d41b4dc6c690452
SSDEEP

12288:Y8EYLUCtkVZTb/SncdOMEIbP2EfWyv+4A9QSIE/IUnQYs0uls3RHJMVrV9AUtNW:l1JkVF79v7Hfc4cuynG0uyBpfM

Score

8^/10

upx

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2636-132-0x0000000000400000-0x00000000007A8000-memory.dmp	upx
behavioral2/memory/2636-133-0x0000000000400000-0x00000000007A8000-memory.dmp	upx
behavioral2/memory/2636-134-0x0000000000400000-0x00000000007A8000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2600	2636	WerFault.exe	79

C:\Users\Admin\AppData\Local\Temp\d2682f2f2ba590628fe77deb4996d72f959b9e725aa125b68e1c4f34cab0b05a.exe
"C:\Users\Admin\AppData\Local\Temp\d2682f2f2ba590628fe77deb4996d72f959b9e725aa125b68e1c4f34cab0b05a.exe"
1⤵
PID:2636
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2636 -s 532
  2⤵
  - Program crash
  PID:2600

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 2636 -ip 2636
1⤵
PID:2960

memory/2636-132-0x0000000000400000-0x00000000007A8000-memory.dmp

Filesize
3.7MB

Download
memory/2636-133-0x0000000000400000-0x00000000007A8000-memory.dmp

Filesize
3.7MB

Download
memory/2636-134-0x0000000000400000-0x00000000007A8000-memory.dmp

Filesize
3.7MB

Download