Analysis
-
max time kernel
93s -
max time network
118s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
29/02/2024, 08:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Packed.Win32.PePatch.exe
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Packed.Win32.PePatch.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
-
Target
Packed.Win32.PePatch.exe
-
Size
736KB
-
MD5
37b60826a526fd03386c48d01a1cba6d
-
SHA1
b17a014440a1449dd0fce824ea9fcb1e6f34e372
-
SHA256
983802cb5d8124051b3b75f3fb92f344a82414688dfa7d50e2be41a37094bb80
-
SHA512
79a56fbb7c01a47c0465e6b2bff5c3a273e715211bb5247189352c001be2f79a4f7ae560d7fc19c38b30cc677bd8160aca9c3bdc635e57475e4f9fb38b0d52aa
-
SSDEEP
12288:I35VRdnH2sT/NSvW5AEy3NR7Tawha6ElkV2arWq5bcmrtq5/hPJ9dOvEDd/gQwo8:I3Hvn/TFSvW5AEyrfaNnmHrWq5bcmq7F
Score
3/10
Malware Config
Signatures
-
Program crash 2 IoCs
pid pid_target Process procid_target 924 1996 WerFault.exe 57 4916 1996 WerFault.exe 57
Processes
-
C:\Users\Admin\AppData\Local\Temp\Packed.Win32.PePatch.exe"C:\Users\Admin\AppData\Local\Temp\Packed.Win32.PePatch.exe"1⤵PID:1996
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1996 -s 5162⤵
- Program crash
PID:924
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 1996 -s 5242⤵
- Program crash
PID:4916
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 1996 -ip 19961⤵PID:4528
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 536 -p 1996 -ip 19961⤵PID:4488