3abf44e087466a79ace2d065252566e77821ba6a74477c405c46ff9ed56d6a33

Analysis

max time kernel
142s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/01/2024, 23:16

Target

78a5dd4afb10f9ed93c3c03011e98b26.exe
Size

73KB
MD5

78a5dd4afb10f9ed93c3c03011e98b26
SHA1

f2350a71239a24a12adf149ec828a18282aee90e
SHA256

3abf44e087466a79ace2d065252566e77821ba6a74477c405c46ff9ed56d6a33
SHA512

e737c8e79b5b58ab67d190e5ccc32c570fb09af03a71295c0a54e972f476a9db5305c1023ac252f245cd888bbc636a0e02ffff0dea5219ff0bfbdeeb0858afb3
SSDEEP

1536:yx9PHK4mXQ0g8Kxmjb788jKwWhQre6J3B5r:yxx07V78GQhQBd

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2180-0-0x0000000000400000-0x000000000041B000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2180	78a5dd4afb10f9ed93c3c03011e98b26.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 3136	2180	78a5dd4afb10f9ed93c3c03011e98b26.exe	86
PID 2180 wrote to memory of 3136	2180	78a5dd4afb10f9ed93c3c03011e98b26.exe	86
PID 2180 wrote to memory of 3136	2180	78a5dd4afb10f9ed93c3c03011e98b26.exe	86
PID 2180 wrote to memory of 3136	2180	78a5dd4afb10f9ed93c3c03011e98b26.exe	86
PID 2180 wrote to memory of 3136	2180	78a5dd4afb10f9ed93c3c03011e98b26.exe	86

memory/2180-0-0x0000000000400000-0x000000000041B000-memory.dmp

Filesize
108KB

Download
memory/2180-1-0x0000000002420000-0x0000000002422000-memory.dmp

Filesize
8KB

Download
memory/2180-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2180-3-0x0000000002460000-0x000000000246E000-memory.dmp

Filesize
56KB

Download
memory/2180-4-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download