5db3943cf6653385aec2985672d0a05c5ec562905a0d65d2e695e866d66bf128

Analysis

max time kernel
142s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 13:02

Target

37242ed27a0756d264bc0d09a4904548.exe
Size

31KB
MD5

37242ed27a0756d264bc0d09a4904548
SHA1

92d68bc05461390e9e065d0435c55a05986c9cce
SHA256

5db3943cf6653385aec2985672d0a05c5ec562905a0d65d2e695e866d66bf128
SHA512

2111ae607f086890538d636aeddb3deba550788bb14ba5af855fbdb7c7e9680922a0e3fac77f90dd4c5ae895f5a4c6d20f1fef00c1ea32e6d53ac302ef908371
SSDEEP

384:KNtkFnPF4xgxQdyEiiXwEmBlkcSv2Pk3ezlhQdy63bnTzWW/297pyYGqyHiMT:OWVPO4PmwE0icSRuzlsySvV2+YGb

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/220-0-0x0000000000400000-0x000000000145E000-memory.dmp	upx
behavioral2/memory/220-1-0x0000000000400000-0x000000000145E000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2108	220	WerFault.exe	16

C:\Users\Admin\AppData\Local\Temp\37242ed27a0756d264bc0d09a4904548.exe
"C:\Users\Admin\AppData\Local\Temp\37242ed27a0756d264bc0d09a4904548.exe"
1⤵
PID:220
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 220 -s 276
  2⤵
  - Program crash
  PID:2108

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 220 -ip 220
1⤵
PID:1804

memory/220-0-0x0000000000400000-0x000000000145E000-memory.dmp

Filesize
16.4MB

Download
memory/220-1-0x0000000000400000-0x000000000145E000-memory.dmp

Filesize
16.4MB

Download