48f933a38aab37017bdf6cfcd3e3b98aa0b8d8a7948bfe25388962a249f572c7

Analysis

max time kernel
150s
max time network
127s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
19/09/2022, 22:00

Target

48f933a38aab37017bdf6cfcd3e3b98aa0b8d8a7948bfe25388962a249f572c7.exe
Size

78KB
MD5

80b75fa5daa1689cce23708cce9abe9c
SHA1

acef299c0b3df38e6d72140973fd76e1231627b2
SHA256

48f933a38aab37017bdf6cfcd3e3b98aa0b8d8a7948bfe25388962a249f572c7
SHA512

9db0f9b77ee2b589c328d5a7a81f909b462127c235095b6550c8fb6e514090f806e514a332109b635d0dfef9ea2bc55e65918dbee27b2af9084a877c960f6399
SSDEEP

1536:PvUNVqfX+zUy6k73mZ1POSZd9UK2pv2QaE3xz9SSkdLQnq:3U6fXxvy38NOSjGK2d2Q3SFd3

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
1604	48f933a38aab37017bdf6cfcd3e3b98aa0b8d8a7948bfe25388962a249f572c7.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1604 wrote to memory of 976	1604	48f933a38aab37017bdf6cfcd3e3b98aa0b8d8a7948bfe25388962a249f572c7.exe	27
PID 1604 wrote to memory of 976	1604	48f933a38aab37017bdf6cfcd3e3b98aa0b8d8a7948bfe25388962a249f572c7.exe	27
PID 1604 wrote to memory of 976	1604	48f933a38aab37017bdf6cfcd3e3b98aa0b8d8a7948bfe25388962a249f572c7.exe	27
PID 1604 wrote to memory of 976	1604	48f933a38aab37017bdf6cfcd3e3b98aa0b8d8a7948bfe25388962a249f572c7.exe	27
PID 1604 wrote to memory of 976	1604	48f933a38aab37017bdf6cfcd3e3b98aa0b8d8a7948bfe25388962a249f572c7.exe	27
PID 1604 wrote to memory of 976	1604	48f933a38aab37017bdf6cfcd3e3b98aa0b8d8a7948bfe25388962a249f572c7.exe	27
PID 1604 wrote to memory of 976	1604	48f933a38aab37017bdf6cfcd3e3b98aa0b8d8a7948bfe25388962a249f572c7.exe	27

memory/976-54-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/976-56-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/976-59-0x0000000000C40000-0x0000000000C48000-memory.dmp

Filesize
32KB

Download
memory/976-60-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1604-58-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download