6c66e484a2fa3a51f556e6fd9f894bd5445e952c7c669ef43a85f23ab98ff3fc

Analysis

max time kernel
147s
max time network
168s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
01-03-2024 02:47

Target

WallHack PB Windows 7 28.10.2011/PerX.exe
Size

298KB
MD5

045a1bd611d3a3347945307e785cae9a
SHA1

505248f1d003b828f28211175fd6f91d9822c70c
SHA256

aaafc970e116fc78017319970bd4bb2522a6754e99ac7e696c7fc6dc94d49b39
SHA512

2955c22b88b8b07fc6d992dfb6eddae5b3ba97bc0c623152669081e170cb2b781925247a29d4028ef6f425322122403d67b86b3354c8d82fb123dcd73e3279d7
SSDEEP

6144:EYPOodm30xwcP9n2U82xZkckexoS8pm97WQPhFzo0naGr:zdm3xc4L24cVoS8c97WyXPaGr

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral4/memory/3612-0-0x0000000000400000-0x00000000004BD000-memory.dmp	upx
behavioral4/memory/3612-1-0x0000000000400000-0x00000000004BD000-memory.dmp	upx

Program crash 1 IoCs

Processes:

WerFault.exe

pid	pid_target	Process	procid_target
2536	3612	WerFault.exe	87

C:\Users\Admin\AppData\Local\Temp\WallHack PB Windows 7 28.10.2011\PerX.exe
"C:\Users\Admin\AppData\Local\Temp\WallHack PB Windows 7 28.10.2011\PerX.exe"
1⤵
PID:3612
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3612 -s 476
  2⤵
  - Program crash
  PID:2536

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 420 -p 3612 -ip 3612
1⤵
PID:4972

memory/3612-0-0x0000000000400000-0x00000000004BD000-memory.dmp

Filesize
756KB

Download
memory/3612-1-0x0000000000400000-0x00000000004BD000-memory.dmp

Filesize
756KB

Download