22e76698471878822877cab33b27b4ab082640755fab69129acfd7cac808def6

Analysis

max time kernel
147s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
08/01/2024, 10:11

Target

4b27fca69cff3d33d5d4bac885063f91.exe
Size

320KB
MD5

4b27fca69cff3d33d5d4bac885063f91
SHA1

5a198c2c755b9101a552b4bbbecee8a82115fc5e
SHA256

22e76698471878822877cab33b27b4ab082640755fab69129acfd7cac808def6
SHA512

072278e0a81d234f2774475b7ab8daabe67ba1cee9dc0c28353594c9b6f02b381dcdce900180f139c26f6590cf3f818f75a1c94a4277c7e8d185b65987ba25a2
SSDEEP

3072:Ja91YLpzIedJBOvLRarT3CkMYLJRyLZCoceZ8/KxiBA0w+lRw6FgHATuCWQsQOz2:9NHBI8ekMQBjlhW+lRC8fWQsQCpVtm3

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2336-0-0x0000000000400000-0x0000000000451000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2336	4b27fca69cff3d33d5d4bac885063f91.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2336 wrote to memory of 2324	2336	4b27fca69cff3d33d5d4bac885063f91.exe	16
PID 2336 wrote to memory of 2324	2336	4b27fca69cff3d33d5d4bac885063f91.exe	16
PID 2336 wrote to memory of 2324	2336	4b27fca69cff3d33d5d4bac885063f91.exe	16
PID 2336 wrote to memory of 2324	2336	4b27fca69cff3d33d5d4bac885063f91.exe	16
PID 2336 wrote to memory of 2324	2336	4b27fca69cff3d33d5d4bac885063f91.exe	16
PID 2336 wrote to memory of 2324	2336	4b27fca69cff3d33d5d4bac885063f91.exe	16
PID 2336 wrote to memory of 2324	2336	4b27fca69cff3d33d5d4bac885063f91.exe	16

memory/2324-6-0x00000000009A0000-0x00000000009A8000-memory.dmp

Filesize
32KB

Download
memory/2324-7-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2324-4-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2324-3-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2324-10-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2336-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2336-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2336-1-0x0000000000020000-0x0000000000022000-memory.dmp

Filesize
8KB

Download
memory/2336-0-0x0000000000400000-0x0000000000451000-memory.dmp

Filesize
324KB

Download