65f7ebc11cbc4f159ed5ed79d51b3f86417cc498e64adfffde5474689646265e

Analysis

max time kernel
51s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
12-06-2024 02:01

Target

724f18dce5a53a2547ef3babedf4ff60.exe
Size

684KB
MD5

724f18dce5a53a2547ef3babedf4ff60
SHA1

7d31d0a4bd319db7eaa49e855272cfdea425bb72
SHA256

65f7ebc11cbc4f159ed5ed79d51b3f86417cc498e64adfffde5474689646265e
SHA512

a60176b55205d4b2c6b1f93d1ca46e5b2a47025f6f00adcf57959f2c6fee3fafb2afd696d7c714cdae71834d40986f829ee79449827b5bedd0d8588ac20c2ce9
SSDEEP

12288:fwDGo0iNyUl8n+OnrwF/w64BnxgLWIBwRnEmbbFdjqWeANhYnjg51s7h:46o0iNyU+ntrwFI6QnqLWIYnfbzjqmNK

Score

7^/10

upx

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral2/memory/2984-1-0x0000000000400000-0x0000000000515000-memory.dmp	upx

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1672	2984	WerFault.exe	81

C:\Users\Admin\AppData\Local\Temp\724f18dce5a53a2547ef3babedf4ff60.exe
"C:\Users\Admin\AppData\Local\Temp\724f18dce5a53a2547ef3babedf4ff60.exe"
1⤵
PID:2984
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2984 -s 768
  2⤵
  - Program crash
  PID:1672

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 2984 -ip 2984
1⤵
PID:3304

memory/2984-0-0x0000000000740000-0x0000000000744000-memory.dmp

Filesize
16KB

Download
memory/2984-1-0x0000000000400000-0x0000000000515000-memory.dmp

Filesize
1.1MB

Download