37dd38c4f61450923c360d539723e115ff52b519b572330e22488a85f055556e

Analysis

max time kernel
38s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19/09/2022, 15:34

Target

37dd38c4f61450923c360d539723e115ff52b519b572330e22488a85f055556e.exe
Size

161KB
MD5

822f57b056b29db19c708822f11ce866
SHA1

9bcdc9c14c83ca56767a3d963898aa36b3ed8826
SHA256

37dd38c4f61450923c360d539723e115ff52b519b572330e22488a85f055556e
SHA512

a689a229f25fccff0832800ad5e5d302ad95b48913365165a45e631d918de0f1111a5626e50e14ab9d403314f31a8ce2238df395aadbe9a62fa3d87471fe851e
SSDEEP

3072:gEfkHaJmVFesmh/Ntbp5vl08jV9lc6AS9s3zKk:lfASXNRgD7

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1460	1504	WerFault.exe	25

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1504 wrote to memory of 1460	1504	37dd38c4f61450923c360d539723e115ff52b519b572330e22488a85f055556e.exe	26
PID 1504 wrote to memory of 1460	1504	37dd38c4f61450923c360d539723e115ff52b519b572330e22488a85f055556e.exe	26
PID 1504 wrote to memory of 1460	1504	37dd38c4f61450923c360d539723e115ff52b519b572330e22488a85f055556e.exe	26
PID 1504 wrote to memory of 1460	1504	37dd38c4f61450923c360d539723e115ff52b519b572330e22488a85f055556e.exe	26

C:\Users\Admin\AppData\Local\Temp\37dd38c4f61450923c360d539723e115ff52b519b572330e22488a85f055556e.exe
"C:\Users\Admin\AppData\Local\Temp\37dd38c4f61450923c360d539723e115ff52b519b572330e22488a85f055556e.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1504
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1504 -s 88
  2⤵
  - Program crash
  PID:1460