Analysis
-
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 08:18
Behavioral task
behavioral1
Sample
2056-13-0x0000000000400000-0x0000000000426000-memory.exe
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2056-13-0x0000000000400000-0x0000000000426000-memory.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2056-13-0x0000000000400000-0x0000000000426000-memory.exe
command="C:\Users\Admin\AppData\Local\Temp\2056-13-0x0000000000400000-0x0000000000426000-memory.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
-
Target
2056-13-0x0000000000400000-0x0000000000426000-memory.exe
-
Size
152KB
-
MD5
a98ffba8fe4a91947ee58a7f3c537050
-
SHA1
4622ca9b009b0fb4a62fd68b28c7b8137a9df834
-
SHA256
5d2509116eb0a9acdd28e0bb04a609592a79f7ee769116b5e6eb0657114e6c63
-
SHA512
57f6e5df94aed7ca9b2203fc70ff0f01bfbb21a30e8d309c34cc541a17e47336c7f3b555e45674019bfe48bf28047acaf6f8a3ddc91a59bfa545274e617e1886
-
SSDEEP
3072:3nEMnPqsUxLFpl5vGM91ZbnV9mlblrmdbwvcX28E3FgbY:rPqskLF9zbClbQE3mb
Score
1/10