106f98506c752ed5d7e876c11933a4959e2a7ebeaee1f5e33a88168a123a7b84

Analysis

max time kernel
156s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12/01/2024, 09:13

Target

560defdc8c674519995891c0a3aa40be.exe
Size

728KB
MD5

560defdc8c674519995891c0a3aa40be
SHA1

bf16e7a6d852a02233926c31e99c3cd7bf89f247
SHA256

106f98506c752ed5d7e876c11933a4959e2a7ebeaee1f5e33a88168a123a7b84
SHA512

75bc385b7477671150c14fd26990b788d5f53de7b630d0c75452d223c00737368a7bdc558041d932a8f7f18869e7eeb10e3a827578a65097d28f501fe08f450f
SSDEEP

12288:7N+OIaOO7mjzHT3X/WKoRpZl1nc1vh6Pzf7ktM6bCnXhmmWWajM/ySK:7PIaOO7AzHDWl112QPrilbCUmWbjMaSK

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1624-0-0x0000000000D70000-0x0000000000F5E000-memory.dmp	upx
behavioral2/memory/1624-1-0x0000000000D70000-0x0000000000F5E000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3464	1624	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\560defdc8c674519995891c0a3aa40be.exe
"C:\Users\Admin\AppData\Local\Temp\560defdc8c674519995891c0a3aa40be.exe"
1⤵
PID:1624
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1624 -s 540
  2⤵
  - Program crash
  PID:3464

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 1624 -ip 1624
1⤵
PID:5112

memory/1624-0-0x0000000000D70000-0x0000000000F5E000-memory.dmp

Filesize
1.9MB

Download
memory/1624-1-0x0000000000D70000-0x0000000000F5E000-memory.dmp

Filesize
1.9MB

Download