765ab8fd3605fb6ecd0dd70507d3a21f5a49e21f4dd0b369767d7bf364a3fda4

Analysis

max time kernel
157s
max time network
145s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 12:35

Target

6eec719e104b53e6311ea935d32b3fc7.exe
Size

90KB
MD5

6eec719e104b53e6311ea935d32b3fc7
SHA1

4abe9c0c281465a1fa2a178d371c901c084e3791
SHA256

765ab8fd3605fb6ecd0dd70507d3a21f5a49e21f4dd0b369767d7bf364a3fda4
SHA512

962957215e4b66ea55fde8b4d689bdec3b063610bb83886620b0219db4920cb72800a49718ddbf5c51101df157aac92e3241fbe62da54db1e619d466e076ab8d
SSDEEP

1536:AAsqhD+MFIoGMfa4PhAJkAluAOv2xMbwp+uaEst7ez5WnmP6XOSLr+k/8YjF:AAsqplIo9pAluAdM8aEsxez5WnCpCh/p

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2728-0-0x0000000000400000-0x0000000000425000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2728	6eec719e104b53e6311ea935d32b3fc7.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2728 wrote to memory of 2680	2728	6eec719e104b53e6311ea935d32b3fc7.exe	28
PID 2728 wrote to memory of 2680	2728	6eec719e104b53e6311ea935d32b3fc7.exe	28
PID 2728 wrote to memory of 2680	2728	6eec719e104b53e6311ea935d32b3fc7.exe	28
PID 2728 wrote to memory of 2680	2728	6eec719e104b53e6311ea935d32b3fc7.exe	28
PID 2728 wrote to memory of 2680	2728	6eec719e104b53e6311ea935d32b3fc7.exe	28
PID 2728 wrote to memory of 2680	2728	6eec719e104b53e6311ea935d32b3fc7.exe	28
PID 2728 wrote to memory of 2680	2728	6eec719e104b53e6311ea935d32b3fc7.exe	28

memory/2680-6-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2680-7-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2680-9-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2680-12-0x00000000000C0000-0x00000000000C9000-memory.dmp

Filesize
36KB

Download
memory/2728-0-0x0000000000400000-0x0000000000425000-memory.dmp

Filesize
148KB

Download
memory/2728-2-0x00000000001C0000-0x00000000001C1000-memory.dmp

Filesize
4KB

Download
memory/2728-3-0x0000000000260000-0x0000000000272000-memory.dmp

Filesize
72KB

Download
memory/2728-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2728-8-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download