58bd29b9e9fde75b70ab6cdf70bab713b88f43f51f9ae3e9e6b7027f223208db

Analysis

max time kernel
147s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
06/01/2024, 10:52

Target

460be36ebcbacf96ff47a806bc04364f.exe
Size

90KB
MD5

460be36ebcbacf96ff47a806bc04364f
SHA1

c7a984193b147aef4c789a0d27aba8e084ebca8a
SHA256

58bd29b9e9fde75b70ab6cdf70bab713b88f43f51f9ae3e9e6b7027f223208db
SHA512

a0131125dba7151f8525d81da1b0dcb1ce3aeb968c3875e4952a892be2347bb58f7538b53c1932579b7c89d93f5d83a12018653369a534f3bf5f3040bab63c25
SSDEEP

1536:FpWcYVoEnEW7L6xBAl2DNFdoNrkiEQBZ2nR1ma/acHKu2DZD3:FpPEnEWf6xNDNPoKQBMRVS1u2D

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/5040-0-0x0000000000400000-0x0000000000444000-memory.dmp	upx
behavioral2/memory/5040-1-0x0000000000400000-0x0000000000444000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4628	5040	WerFault.exe	12

C:\Users\Admin\AppData\Local\Temp\460be36ebcbacf96ff47a806bc04364f.exe
"C:\Users\Admin\AppData\Local\Temp\460be36ebcbacf96ff47a806bc04364f.exe"
1⤵
PID:5040
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5040 -s 712
  2⤵
  - Program crash
  PID:4628

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 5040 -ip 5040
1⤵
PID:452

memory/5040-0-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download
memory/5040-1-0x0000000000400000-0x0000000000444000-memory.dmp

Filesize
272KB

Download