e8582220f161aef10bcba30369f4d9a3f2a53024b9cd4a5f9f9fecfb98ba8be2

Analysis

max time kernel
140s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 20:47

Target

WindowBlinds/patch.exe
Size

36KB
MD5

31ca2744a3501cee069cc6179e44c057
SHA1

6eb3e2fbe56f06ed7389357cd31e8244af66cf05
SHA256

1134e33a50dc10b8f8a99d586f7075c586f0b8a8360cf393189a676c67521058
SHA512

e0d0c7b486f8e1a03d30cf72872ec61f0327772c723c7525c978260794cc30b431cb75e2af3884d35198688938e3d170692733a5239ae1a727e4d02171d5c28c
SSDEEP

768:NqGFvPjopUeWTcog4duXftugTzAicY1PCL:UGFvroyeWXg+uXBEiZKL

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral15/memory/2316-0-0x0000000000400000-0x0000000000414000-memory.dmp	upx
behavioral15/memory/2316-3-0x0000000000400000-0x0000000000414000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\WindowBlinds\patch.exe
"C:\Users\Admin\AppData\Local\Temp\WindowBlinds\patch.exe"
1⤵
PID:2316

memory/2316-0-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2316-1-0x0000000000020000-0x0000000000034000-memory.dmp

Filesize
80KB

Download
memory/2316-2-0x0000000000020000-0x0000000000034000-memory.dmp

Filesize
80KB

Download
memory/2316-3-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2316-6-0x0000000000020000-0x0000000000034000-memory.dmp

Filesize
80KB

Download
memory/2316-5-0x0000000000020000-0x0000000000034000-memory.dmp

Filesize
80KB

Download
memory/2316-7-0x0000000000020000-0x0000000000034000-memory.dmp

Filesize
80KB

Download