7de749de564aef57bfd4f5d23e9f7b7615861bef17cf482ea875e9d2de53b187

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
29-12-2023 21:16

Target

04382a6392123d7695f1dc366b6b5b17.exe
Size

147KB
MD5

04382a6392123d7695f1dc366b6b5b17
SHA1

303c1c0275b68462792c6a1d09291013d206a4f0
SHA256

7de749de564aef57bfd4f5d23e9f7b7615861bef17cf482ea875e9d2de53b187
SHA512

6f1b188f3bd7e0484b763c81da7d976e8fd1d53f638dc77a9521ca378d031aaa0ecfe47afaadf1e05c32110367f2126b7bc0732b1f7274e0a42de42d0f8eb7e9
SSDEEP

3072:yd5zAXrmbOzJnTb5PiiTJAFQilqW9Cx20ItfPzBo2fIWsv8Do++Pe+oDoEZaLoNa:sAXr7nh7JmJlqcztVzfsEt+PhoDoyaEv

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/232-0-0x0000000000400000-0x000000000045A000-memory.dmp	upx
behavioral2/memory/232-1-0x0000000000400000-0x000000000045A000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3460	232	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\04382a6392123d7695f1dc366b6b5b17.exe
"C:\Users\Admin\AppData\Local\Temp\04382a6392123d7695f1dc366b6b5b17.exe"
1⤵
PID:232
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 232 -s 284
  2⤵
  - Program crash
  PID:3460

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 416 -p 232 -ip 232
1⤵
PID:4752

memory/232-0-0x0000000000400000-0x000000000045A000-memory.dmp

Filesize
360KB

Download
memory/232-1-0x0000000000400000-0x000000000045A000-memory.dmp

Filesize
360KB

Download