125b3cbd9ff8cae3c915ca81df4bf02bb07dafc2c68640ddb88df9e1ee0097e7

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
05/06/2024, 11:04

Target
pdfstamp_cmd/example/10.bat
Size 251B
Sample240605-m6ek4aee74
SHA256 cca6c3b08b93defc852366338345e138ff882aca9fc2ec9c56204e8993c61911
MD5 f518d92606e9622b155f4b9039aefbde
SHA1 c8214d72630ef9b363f21d3a85fb9a05a4da6b7f
SHA512 650fb0cd3298cfbd1f776b1b5ba9cc73464a09f8075ed574bf158eae95c28a70e655105eb953b920c3e1e58aed072ba5ee0eea788009a89d258d5236a1edb1d9
MD5 SHA1 SHA512

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral3/memory/1924-1-0x0000000000640000-0x000000000070E000-memory.dmp	upx
behavioral3/memory/1924-8-0x0000000000640000-0x000000000070E000-memory.dmp	upx

Suspicious behavior: CmdExeWriteProcessMemorySpam 1 IoCs

pid	Process
1924	pdfstamp.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2084 wrote to memory of 1924	2084	cmd.exe	29
PID 2084 wrote to memory of 1924	2084	cmd.exe	29
PID 2084 wrote to memory of 1924	2084	cmd.exe	29
PID 2084 wrote to memory of 1924	2084	cmd.exe	29

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\pdfstamp_cmd\example\10.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:2084
- C:\Users\Admin\AppData\Local\Temp\pdfstamp_cmd\example\pdfstamp.exe
  pdfstamp -PDF "example.pdf" -o "10.pdf" -AT "Wrap text to a new line if it would otherwise be too long to fit in its margined area." -p9 -fs64 -c2666666
  2⤵
  - Suspicious behavior: CmdExeWriteProcessMemorySpam
  PID:1924

memory/1924-0-0x0000000010000000-0x0000000010103000-memory.dmp

Download

memory/1924-1-0x0000000000640000-0x000000000070E000-memory.dmp

Download

memory/1924-9-0x0000000010000000-0x0000000010103000-memory.dmp

Download

memory/1924-8-0x0000000000640000-0x000000000070E000-memory.dmp

Download