2f09cfd635e40f7548f68635b756eb1d1e15e15bfaab596b612e5a4463c04cb2

Analysis

max time kernel
53s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23/09/2022, 18:20

Target

file.exe
Size

11.0MB
MD5

c66dd75502e3ded2bf8eb4e76c38fec5
SHA1

8b0a45af4401e699e80027f850e085614147229f
SHA256

2f09cfd635e40f7548f68635b756eb1d1e15e15bfaab596b612e5a4463c04cb2
SHA512

28cc2fcbb1523c03512786f6b060fe8aeed5e13150c775ec607c6d50e5707e1a9bdf30bb75081b87f118488f9f8ebc35ecea4042b093a7251a0b73e2edb45a05
SSDEEP

196608:/MT19VKUbMT11pK2vMT1lMKieWeEAkVePGfAkuePnmxH4oGr57oJCs77rOzIh/Qs:qJ

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1404 set thread context of 2000	1404	file.exe	27

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1896	2000	WerFault.exe	27

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 1404 wrote to memory of 2000	1404	file.exe	27
PID 1404 wrote to memory of 2000	1404	file.exe	27
PID 1404 wrote to memory of 2000	1404	file.exe	27
PID 1404 wrote to memory of 2000	1404	file.exe	27
PID 1404 wrote to memory of 2000	1404	file.exe	27
PID 1404 wrote to memory of 2000	1404	file.exe	27
PID 1404 wrote to memory of 2000	1404	file.exe	27
PID 1404 wrote to memory of 2000	1404	file.exe	27
PID 1404 wrote to memory of 2000	1404	file.exe	27
PID 1404 wrote to memory of 2000	1404	file.exe	27
PID 2000 wrote to memory of 1896	2000	file.exe	28
PID 2000 wrote to memory of 1896	2000	file.exe	28
PID 2000 wrote to memory of 1896	2000	file.exe	28
PID 2000 wrote to memory of 1896	2000	file.exe	28

memory/1404-54-0x0000000001310000-0x0000000001E14000-memory.dmp

Filesize
11.0MB

Download
memory/2000-55-0x00000000000C0000-0x00000000000F6000-memory.dmp

Filesize
216KB

Download
memory/2000-56-0x00000000000C0000-0x00000000000F6000-memory.dmp

Filesize
216KB

Download
memory/2000-58-0x00000000000C0000-0x00000000000F6000-memory.dmp

Filesize
216KB

Download
memory/2000-60-0x00000000000C0000-0x00000000000F6000-memory.dmp

Filesize
216KB

Download
memory/2000-62-0x00000000000C0000-0x00000000000F6000-memory.dmp

Filesize
216KB

Download
memory/2000-64-0x00000000000C0000-0x00000000000F6000-memory.dmp

Filesize
216KB

Download
memory/2000-69-0x00000000000C0000-0x00000000000F6000-memory.dmp

Filesize
216KB

Download
memory/2000-72-0x00000000000C0000-0x00000000000F6000-memory.dmp

Filesize
216KB

Download