c34a2e9340309d8a2acc0849b3709e21d656924f9eb8ff1d2cef9be253fc9f49

Analysis

max time kernel
149s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/01/2024, 16:19

Target

77d1a8843509e1af8b86bbce2d6e0fc3.exe
Size

92KB
MD5

77d1a8843509e1af8b86bbce2d6e0fc3
SHA1

5f8c693e6cf32f875c160ce723b8244549830a3b
SHA256

c34a2e9340309d8a2acc0849b3709e21d656924f9eb8ff1d2cef9be253fc9f49
SHA512

e6f1d43a41be1c04b24660a70e22dd64386de8e7a63fd89af587788e744c6e00a8f2bb8555dfebd462c47cb8a010a74d83de55827613560654c92c5fed88edaa
SSDEEP

1536:/BDc61hqfc8U8XrPtFMaNk8Kw2r/Op6VcjyV9GyRt4/bruU/8Jth:CDfLLtFPk8nQcgGyRqPB/st

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2228-0-0x0000000000400000-0x0000000000426000-memory.dmp	upx
behavioral1/memory/2228-3-0x0000000000250000-0x0000000000262000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2228	77d1a8843509e1af8b86bbce2d6e0fc3.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 1956	2228	77d1a8843509e1af8b86bbce2d6e0fc3.exe	28
PID 2228 wrote to memory of 1956	2228	77d1a8843509e1af8b86bbce2d6e0fc3.exe	28
PID 2228 wrote to memory of 1956	2228	77d1a8843509e1af8b86bbce2d6e0fc3.exe	28
PID 2228 wrote to memory of 1956	2228	77d1a8843509e1af8b86bbce2d6e0fc3.exe	28
PID 2228 wrote to memory of 1956	2228	77d1a8843509e1af8b86bbce2d6e0fc3.exe	28
PID 2228 wrote to memory of 1956	2228	77d1a8843509e1af8b86bbce2d6e0fc3.exe	28
PID 2228 wrote to memory of 1956	2228	77d1a8843509e1af8b86bbce2d6e0fc3.exe	28

memory/1956-6-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1956-7-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1956-9-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1956-12-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/2228-0-0x0000000000400000-0x0000000000426000-memory.dmp

Filesize
152KB

Download
memory/2228-1-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/2228-3-0x0000000000250000-0x0000000000262000-memory.dmp

Filesize
72KB

Download
memory/2228-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2228-8-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download