63d4921535149bf1803ef865241642f3ba44806797d2ad94b9f132b0a56f1090

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
13/03/2024, 15:51

Target

c64539e6b05d5eb8a10ce53a544cf6aa.exe
Size

278KB
MD5

c64539e6b05d5eb8a10ce53a544cf6aa
SHA1

e31c3b5ae5d79b314a4fa6fb56282e9450443ac5
SHA256

63d4921535149bf1803ef865241642f3ba44806797d2ad94b9f132b0a56f1090
SHA512

50d04af49361f6e8ee2de6a88118119ebdd79e59941c57df61fa63deb4ae3aa47e0dae7b0cc9b24d570ea0caecfe0e4d472f5f30e28e85390e616435814153cf
SSDEEP

6144:ZBHudQL7mABY2P10bWD/ODr+/EdarTu3EQAZTk1ENFY:jHu6DBYYSWDqriEdXEQnE

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3528-0-0x0000000000400000-0x0000000000481000-memory.dmp	upx
behavioral2/memory/3528-2-0x0000000000400000-0x0000000000481000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2532	3528	WerFault.exe	88

C:\Users\Admin\AppData\Local\Temp\c64539e6b05d5eb8a10ce53a544cf6aa.exe
"C:\Users\Admin\AppData\Local\Temp\c64539e6b05d5eb8a10ce53a544cf6aa.exe"
1⤵
PID:3528
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3528 -s 428
  2⤵
  - Program crash
  PID:2532

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3528 -ip 3528
1⤵
PID:4048

memory/3528-0-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/3528-1-0x0000000000190000-0x000000000019E000-memory.dmp

Filesize
56KB

Download
memory/3528-2-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download