750aad0a2be39125c168382f8b5eda9b6000add5798e904ffb4987005a24cf3e

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 23:12

Target

750aad0a2be39125c168382f8b5eda9b6000add5798e904ffb4987005a24cf3e.exe
Size

86KB
MD5

7b7bebc6d482dfe288cb6f3ea0664d6a
SHA1

329ae58a2b7586490babf091f452e8377006320e
SHA256

750aad0a2be39125c168382f8b5eda9b6000add5798e904ffb4987005a24cf3e
SHA512

025f91e72de1ce948c2ff0d15cc2011eaf50f36012f810eb6ac31ab6a04bf5a42942266da73f1d48da4996d0eb8e35947b61ffbde046ca12aceefc433d3a7d39
SSDEEP

768:Cq0vdNL9vUupWcNa8Zz5iQlmxQuoKgPvkHVyXUEv1GBAE:Cq0vdNLtUuFNa8Zz5iQlmxFoKgXk1

Score

9^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource	yara_rule
behavioral2/memory/836-0-0x0000000000400000-0x0000000000493000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/836-0-0x0000000000400000-0x0000000000493000-memory.dmp	upx

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2896 836 WerFault.exe 750aad0a2be39125c168382f8b5eda9b6000add5798e904ffb4987005a24cf3e.exe

pid	pid_target	process	target process
2896	836	WerFault.exe	750aad0a2be39125c168382f8b5eda9b6000add5798e904ffb4987005a24cf3e.exe

C:\Users\Admin\AppData\Local\Temp\750aad0a2be39125c168382f8b5eda9b6000add5798e904ffb4987005a24cf3e.exe
"C:\Users\Admin\AppData\Local\Temp\750aad0a2be39125c168382f8b5eda9b6000add5798e904ffb4987005a24cf3e.exe"
1⤵
PID:836

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 836 -s 220
2⤵
- Program crash
PID:2896

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 440 -p 836 -ip 836
1⤵
PID:4052

memory/836-0-0x0000000000400000-0x0000000000493000-memory.dmp

Filesize
588KB

Download