5504fe7d1106fd18ec79d7ef6d42704e0dceadf7fa593fae94c36c10ba465a9e

Analysis

max time kernel
150s
max time network
126s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
02/10/2022, 21:18

Target

5504fe7d1106fd18ec79d7ef6d42704e0dceadf7fa593fae94c36c10ba465a9e.exe
Size

104KB
MD5

65f56e970d2a647a6363a36366884ae0
SHA1

5ea10eb0063fe49ecca63588db302c55bf2265cc
SHA256

5504fe7d1106fd18ec79d7ef6d42704e0dceadf7fa593fae94c36c10ba465a9e
SHA512

3bce995e28e7fd30399fbaae721b7851392d23d288fb8ad287d6b2acd156d5fc485b52fda313781109724278912981ebc9d6c5181dfaf726caa02197b513c024
SSDEEP

1536:FZz5gm7arsCm3lCcML/svA4s62gTLQV1EnMEhw2d9rHc/878PDV:PF7q038TAAOLQV17Ehw+8/i8rV

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
1896	5504fe7d1106fd18ec79d7ef6d42704e0dceadf7fa593fae94c36c10ba465a9e.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1896 wrote to memory of 1880	1896	5504fe7d1106fd18ec79d7ef6d42704e0dceadf7fa593fae94c36c10ba465a9e.exe	27
PID 1896 wrote to memory of 1880	1896	5504fe7d1106fd18ec79d7ef6d42704e0dceadf7fa593fae94c36c10ba465a9e.exe	27
PID 1896 wrote to memory of 1880	1896	5504fe7d1106fd18ec79d7ef6d42704e0dceadf7fa593fae94c36c10ba465a9e.exe	27
PID 1896 wrote to memory of 1880	1896	5504fe7d1106fd18ec79d7ef6d42704e0dceadf7fa593fae94c36c10ba465a9e.exe	27
PID 1896 wrote to memory of 1880	1896	5504fe7d1106fd18ec79d7ef6d42704e0dceadf7fa593fae94c36c10ba465a9e.exe	27
PID 1896 wrote to memory of 1880	1896	5504fe7d1106fd18ec79d7ef6d42704e0dceadf7fa593fae94c36c10ba465a9e.exe	27
PID 1896 wrote to memory of 1880	1896	5504fe7d1106fd18ec79d7ef6d42704e0dceadf7fa593fae94c36c10ba465a9e.exe	27

memory/1880-55-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1880-57-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1880-60-0x00000000003E0000-0x00000000003E8000-memory.dmp

Filesize
32KB

Download
memory/1880-61-0x0000000000080000-0x0000000000089000-memory.dmp

Filesize
36KB

Download
memory/1896-54-0x0000000000400000-0x000000000041C000-memory.dmp

Filesize
112KB

Download
memory/1896-59-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download