e2d07b9632c7d49cd434a3b18f15ce21a3695ebe5570c42416c9b582cb86ef12

Analysis

max time kernel
144s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
17/01/2024, 22:20

Target

63c1db7f988ddec94a0f834c0727b466.exe
Size

80KB
MD5

63c1db7f988ddec94a0f834c0727b466
SHA1

7a2985af413e3655eac89db47ff8b54d49654565
SHA256

e2d07b9632c7d49cd434a3b18f15ce21a3695ebe5570c42416c9b582cb86ef12
SHA512

115f575e7d635317ad999f1e0cdc4858b46a16a67457628d4579a98f8aec1d92f916503d1134b4720edd6830ec04d8745dc3560555ad447ef52b99da9adb465e
SSDEEP

1536:0Lqg9b1sFn01Za1MNbDv/fx2gJXY0M0k07PQmj6/DZ9toVG2x:1sb1601Zucv/fxBo76P5

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/1760-0-0x0000000000400000-0x000000000041D000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
1760	63c1db7f988ddec94a0f834c0727b466.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 1760 wrote to memory of 628	1760	63c1db7f988ddec94a0f834c0727b466.exe	88
PID 1760 wrote to memory of 628	1760	63c1db7f988ddec94a0f834c0727b466.exe	88
PID 1760 wrote to memory of 628	1760	63c1db7f988ddec94a0f834c0727b466.exe	88
PID 1760 wrote to memory of 628	1760	63c1db7f988ddec94a0f834c0727b466.exe	88
PID 1760 wrote to memory of 628	1760	63c1db7f988ddec94a0f834c0727b466.exe	88

memory/1760-0-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/1760-4-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1760-3-0x0000000000920000-0x000000000092E000-memory.dmp

Filesize
56KB

Download
memory/1760-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/1760-1-0x00000000005A0000-0x00000000005A1000-memory.dmp

Filesize
4KB

Download