7053be8da661d6ceb43ab8ae8bbbd1cfc3b5297880da534eb89851926ec0f38f

Analysis

max time kernel
150s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
18/03/2024, 11:11

Target

d35b75a12183289a2b392706905b0077.exe
Size

57KB
MD5

d35b75a12183289a2b392706905b0077
SHA1

12b96b9eeb7e3e270c2c0e6256e601214a03c487
SHA256

7053be8da661d6ceb43ab8ae8bbbd1cfc3b5297880da534eb89851926ec0f38f
SHA512

8f9dcb9b499229abcdf3bfeb50134f1d484c00507b107d2a6f08e3e81a6e2da3f5f781790a021ff422791800d506f2fb5ceadc26bf881e88b56e88650a41c630
SSDEEP

1536:sBKK9S/y1Eqv9FvDW/e9l7i7lOThWWl7tkHYnOt6igx7b:sMK9S/y1Ee7bGIl79lWWl7YiOt0

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/3984-0-0x0000000000400000-0x0000000000429000-memory.dmp	upx
behavioral2/memory/3984-1-0x0000000000400000-0x0000000000429000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2656	3984	WerFault.exe	82

C:\Users\Admin\AppData\Local\Temp\d35b75a12183289a2b392706905b0077.exe
"C:\Users\Admin\AppData\Local\Temp\d35b75a12183289a2b392706905b0077.exe"
1⤵
PID:3984
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3984 -s 528
  2⤵
  - Program crash
  PID:2656

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 184 -p 3984 -ip 3984
1⤵
PID:4256

memory/3984-0-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download
memory/3984-1-0x0000000000400000-0x0000000000429000-memory.dmp

Filesize
164KB

Download