b39fc50bee5a51c5a143e799c7676af63cb06ab92e07f9e90a37ac12fc534b3e

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
30-10-2024 02:02

Target

b39fc50bee5a51c5a143e799c7676af63cb06ab92e07f9e90a37ac12fc534b3e.exe
Size

327KB
MD5

22d35cdedb4d4109510b9394610f5b2e
SHA1

5bc5e5856e4b2317966eff4dade064242db0948a
SHA256

b39fc50bee5a51c5a143e799c7676af63cb06ab92e07f9e90a37ac12fc534b3e
SHA512

9488d53bfb361cfbddb069ee59af2f14a3134a7cf585b318e2511df7eebaac8cd915a00b0457a9b16a96b4c289b41673bbfae87827749173b5e0bd359638ef2a
SSDEEP

6144:iJjREwLniAOzZx8pzwInnnpfnLItus2al85/Fj9QLMzhfOeQSK/04KSI:MmonhOzZx8pPnpTIKu0dj9yMzhfDdK8

Score

5^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/3044-0-0x000000013FB20000-0x000000013FCC0000-memory.dmp	upx
behavioral1/memory/3044-6-0x000000013FB20000-0x000000013FCC0000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\b39fc50bee5a51c5a143e799c7676af63cb06ab92e07f9e90a37ac12fc534b3e.exe
"C:\Users\Admin\AppData\Local\Temp\b39fc50bee5a51c5a143e799c7676af63cb06ab92e07f9e90a37ac12fc534b3e.exe"
1⤵
PID:3044
- C:\Windows\System32\werfault.exe
  \??\C:\Windows\System32\werfault.exe
  2⤵
  PID:2904

memory/2904-3-0x00000000000F0000-0x000000000013C000-memory.dmp

Filesize
304KB

Download
memory/3044-0-0x000000013FB20000-0x000000013FCC0000-memory.dmp

Filesize
1.6MB

Download
memory/3044-1-0x00000000778C0000-0x0000000077A69000-memory.dmp

Filesize
1.7MB

Download
memory/3044-2-0x00000000778C1000-0x00000000779C2000-memory.dmp

Filesize
1.0MB

Download
memory/3044-6-0x000000013FB20000-0x000000013FCC0000-memory.dmp

Filesize
1.6MB

Download