2cc50d1f68196bcdd5c3d10eb7913237b3696bd254058399e5c93499a5ffd939

Analysis

max time kernel
147s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
27/03/2024, 16:43

Target

e2224345cd7f7ee12ccec19d73d2d061.exe
Size

113KB
MD5

e2224345cd7f7ee12ccec19d73d2d061
SHA1

817197c33119af6a636fdf99829ed0b59f91e588
SHA256

2cc50d1f68196bcdd5c3d10eb7913237b3696bd254058399e5c93499a5ffd939
SHA512

a08f01b93fe72ac062ec69468e580a3bd56e915d053b4c4ba37d2b2407e68315fb851212259cf30303b421ff1ca75fc0c9b1e667632b6f808ab65f775e312010
SSDEEP

1536:QH9ryUK9TmtwbTsqXYBTNeGMHwXJD+kHC11iNK1zt4wTDAIPj+kxGmLV5L+mqAqW:yDMmt+TsqWEGWoJC8CUUTZsmPLNqAp5

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/560-0-0x0000000000400000-0x0000000000431000-memory.dmp	upx

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
560	e2224345cd7f7ee12ccec19d73d2d061.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 560 wrote to memory of 696	560	e2224345cd7f7ee12ccec19d73d2d061.exe	88
PID 560 wrote to memory of 696	560	e2224345cd7f7ee12ccec19d73d2d061.exe	88
PID 560 wrote to memory of 696	560	e2224345cd7f7ee12ccec19d73d2d061.exe	88
PID 560 wrote to memory of 696	560	e2224345cd7f7ee12ccec19d73d2d061.exe	88
PID 560 wrote to memory of 696	560	e2224345cd7f7ee12ccec19d73d2d061.exe	88

memory/560-0-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/560-2-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/560-1-0x0000000002300000-0x0000000002301000-memory.dmp

Filesize
4KB

Download
memory/560-3-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/560-4-0x0000000000420000-0x000000000042E000-memory.dmp

Filesize
56KB

Download