342505c7400e19d4fcc67efbe5ae6693721c72b97a5b4335beb399f669f6f205

Analysis

max time kernel
151s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14-03-2024 12:45

Target

c8a6283ed8385a75bd85558a55014237.exe
Size

134KB
MD5

c8a6283ed8385a75bd85558a55014237
SHA1

147f40afbeb9bbf309955a9ee8d41c48ebee3095
SHA256

342505c7400e19d4fcc67efbe5ae6693721c72b97a5b4335beb399f669f6f205
SHA512

4acede7e800b9a0ab445407a661c5d0fb33c246e16c7f90a665c4d81f097c4ef1eafac39f4e0921261b78c9f43d76952e43bda5e8dac19d397187fcd168bb15b
SSDEEP

3072:HFzRIu4+RewPb21yLb8Mf6zuX+KqbPzjsx:H/IuDPb2kGEqY

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/4780-0-0x0000000000400000-0x0000000000434000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
4780	c8a6283ed8385a75bd85558a55014237.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 4780 wrote to memory of 3948	4780	c8a6283ed8385a75bd85558a55014237.exe	98
PID 4780 wrote to memory of 3948	4780	c8a6283ed8385a75bd85558a55014237.exe	98
PID 4780 wrote to memory of 3948	4780	c8a6283ed8385a75bd85558a55014237.exe	98
PID 4780 wrote to memory of 3948	4780	c8a6283ed8385a75bd85558a55014237.exe	98
PID 4780 wrote to memory of 3948	4780	c8a6283ed8385a75bd85558a55014237.exe	98

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4004 --field-trial-handle=2280,i,716736634476467098,11449718822158202904,262144 --variations-seed-version /prefetch:8
1⤵
PID:4620

memory/4780-0-0x0000000000400000-0x0000000000434000-memory.dmp

Filesize
208KB

Download
memory/4780-2-0x00000000005E0000-0x00000000005E2000-memory.dmp

Filesize
8KB

Download
memory/4780-3-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/4780-4-0x0000000000420000-0x000000000042E000-memory.dmp

Filesize
56KB

Download
memory/4780-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download