79f80d73209a92fb6660bd6e4f9d47d63c09b5114181ed5dc742a66647b4052b

Analysis

max time kernel
97s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
24/12/2023, 21:28

Target

12fb2dbf6978d2b9be11736f2b913321.exe
Size

145KB
MD5

12fb2dbf6978d2b9be11736f2b913321
SHA1

ebb17ae202c8d035579e134ddae75d6e10b649a8
SHA256

79f80d73209a92fb6660bd6e4f9d47d63c09b5114181ed5dc742a66647b4052b
SHA512

95578ac9a6b9de76b3e4c08734c763a08ca57b8a2886279cb3846505273fdc4baec23f18ea7a4222f0ea4fdf113130a9d654e04169f36597a74982e40a6c4297
SSDEEP

3072:fUgV5ZSsb0tGsYRpwhT5MQJQGMX2UFPAmPiyWDwpyeusYxFj1bT:8G/b+0RpwhxmGMXtxmBV

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4676-0-0x0000000000400000-0x0000000000451000-memory.dmp	upx
behavioral2/memory/4676-2-0x0000000000400000-0x0000000000451000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2832	4676	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\12fb2dbf6978d2b9be11736f2b913321.exe
"C:\Users\Admin\AppData\Local\Temp\12fb2dbf6978d2b9be11736f2b913321.exe"
1⤵
PID:4676
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4676 -s 272
  2⤵
  - Program crash
  PID:2832

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4676 -ip 4676
1⤵
PID:3332

memory/4676-0-0x0000000000400000-0x0000000000451000-memory.dmp

Filesize
324KB

Download
memory/4676-1-0x00000000021A0000-0x00000000021A8000-memory.dmp

Filesize
32KB

Download
memory/4676-2-0x0000000000400000-0x0000000000451000-memory.dmp

Filesize
324KB

Download