e66bf1336b1c1e943d7eb2bf8d9f233f9ea5eba94d491431e6ed1827f6006e23

Analysis

max time kernel
156s
max time network
173s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
23-01-2024 21:04

Target

708e10d759fd609d146dafe2c66cf02e.exe
Size

109KB
MD5

708e10d759fd609d146dafe2c66cf02e
SHA1

f36f39c3e4d0239bb401a8e23af3f0521e57ea83
SHA256

e66bf1336b1c1e943d7eb2bf8d9f233f9ea5eba94d491431e6ed1827f6006e23
SHA512

ae4aa98287a25aa72a47aa5c2f906a25a69941d6c305a1f39127d4cf1a42dd3b94f732326be5f64dfd05fa9feba8c3f06cac448a382bf63ddcdc84332fa55a02
SSDEEP

3072:yDcLAo501fUX1AHH+uzrmTwwB+Uyq/CwU5jXJToY:QohXYeuStYUENjp

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/436-0-0x0000000000400000-0x0000000000434000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
436	708e10d759fd609d146dafe2c66cf02e.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 436 wrote to memory of 4048	436	708e10d759fd609d146dafe2c66cf02e.exe	87
PID 436 wrote to memory of 4048	436	708e10d759fd609d146dafe2c66cf02e.exe	87
PID 436 wrote to memory of 4048	436	708e10d759fd609d146dafe2c66cf02e.exe	87
PID 436 wrote to memory of 4048	436	708e10d759fd609d146dafe2c66cf02e.exe	87
PID 436 wrote to memory of 4048	436	708e10d759fd609d146dafe2c66cf02e.exe	87

memory/436-0-0x0000000000400000-0x0000000000434000-memory.dmp

Filesize
208KB

Download
memory/436-1-0x0000000000520000-0x0000000000521000-memory.dmp

Filesize
4KB

Download
memory/436-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/436-3-0x0000000000420000-0x000000000042E000-memory.dmp

Filesize
56KB

Download
memory/436-4-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download