7958e15bb821de6753a483175b9f834b2a0c8c95e32d6b4470e939d651650ddf

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 23:25

Target

7958e15bb821de6753a483175b9f834b2a0c8c95e32d6b4470e939d651650ddf.exe
Size

77KB
MD5

662570563c58515acd3072296ed2ad40
SHA1

4e9569e7d5541487a17e3c52b05aa13f9fc547b9
SHA256

7958e15bb821de6753a483175b9f834b2a0c8c95e32d6b4470e939d651650ddf
SHA512

e1bb4bde63f37cd4787531d54acc8af4e2112d4b40c49943617960bc0a88e2368cc7da902f8893f9d02fd649ad52fbc95648eebb58c7ca51a783a55722b4145f
SSDEEP

768:m0vdNL9vUupWcNa8Zz5iQlmx6uoKgPvkHVyXUw:m0vdNLtUuFNa8Zz5iQlmxPoKgXk1+

Score

9^/10

upx

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource	yara_rule
behavioral2/memory/1876-0-0x0000000000400000-0x0000000000492000-memory.dmp	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

Processes:

resource	yara_rule
behavioral2/memory/1876-0-0x0000000000400000-0x0000000000492000-memory.dmp	upx

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

5068 1876 WerFault.exe 7958e15bb821de6753a483175b9f834b2a0c8c95e32d6b4470e939d651650ddf.exe

pid	pid_target	process	target process
5068	1876	WerFault.exe	7958e15bb821de6753a483175b9f834b2a0c8c95e32d6b4470e939d651650ddf.exe

C:\Users\Admin\AppData\Local\Temp\7958e15bb821de6753a483175b9f834b2a0c8c95e32d6b4470e939d651650ddf.exe
"C:\Users\Admin\AppData\Local\Temp\7958e15bb821de6753a483175b9f834b2a0c8c95e32d6b4470e939d651650ddf.exe"
1⤵
PID:1876

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1876 -s 216
2⤵
- Program crash
PID:5068

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 428 -p 1876 -ip 1876
1⤵
PID:2436

memory/1876-0-0x0000000000400000-0x0000000000492000-memory.dmp

Filesize
584KB

Download