2febb8a54b22f8816842338482bde82173adaa19f7afc240a0e0848cc95fe911

Analysis

max time kernel
87s
max time network
93s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
24-06-2023 18:13

Target

2febb8a54b22f8816842338482bde82173adaa19f7afc240a0e0848cc95fe911.exe
Size

4.3MB
MD5

369f4e683a0601d66456f58f57e7c550
SHA1

d6435bff8adef225ec444fdb2f1abe0b67cc636d
SHA256

2febb8a54b22f8816842338482bde82173adaa19f7afc240a0e0848cc95fe911
SHA512

726b86085a6f6c2fd918b177d62e7bfce83d7845206a16f9ba3ea3a212ff1c943baa40e9df749b36624a507c7c4f1c8fe38a1bc041a145f3a9dd61246d696d39
SSDEEP

98304:z2mTtL7dfhcq/aaVJFN6Cv4T4T5evsUrOii159TcEY:aq/aaVJFN694T5ar4Q

Score

7^/10

aspackv2

ASPack v2.12-2.42 1 IoCs

Detects executables packed with ASPack v2.12-2.42

Processes:

resource	yara_rule
behavioral2/memory/1716-133-0x0000000000400000-0x0000000000842000-memory.dmp	aspack_v212_v242

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4128 1716 WerFault.exe 2febb8a54b22f8816842338482bde82173adaa19f7afc240a0e0848cc95fe911.exe

pid	pid_target	process	target process
4128	1716	WerFault.exe	2febb8a54b22f8816842338482bde82173adaa19f7afc240a0e0848cc95fe911.exe

C:\Users\Admin\AppData\Local\Temp\2febb8a54b22f8816842338482bde82173adaa19f7afc240a0e0848cc95fe911.exe
"C:\Users\Admin\AppData\Local\Temp\2febb8a54b22f8816842338482bde82173adaa19f7afc240a0e0848cc95fe911.exe"
1⤵
PID:1716

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1716 -s 212
2⤵
- Program crash
PID:4128

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 1716 -ip 1716
1⤵
PID:700

memory/1716-133-0x0000000000400000-0x0000000000842000-memory.dmp

Filesize
4.3MB

Download