d39f4bcda4ca64fccf0387e5aeb5ecb8533669e886cf9a8655a1bb3043043677

Analysis

max time kernel
24s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
12/10/2022, 14:19

Target

d39f4bcda4ca64fccf0387e5aeb5ecb8533669e886cf9a8655a1bb3043043677.exe
Size

174KB
MD5

6494c92f3b22bcc556a5e08db712e94e
SHA1

85cd958c64b588e39666f19e58a773eab484b606
SHA256

d39f4bcda4ca64fccf0387e5aeb5ecb8533669e886cf9a8655a1bb3043043677
SHA512

53c9b07fa5bb10f946ff56cae677028663cdcc8905a4130a7dfc39cbf33ab7d2c114b86302a2190f9bb334be601ccf2dfd5da1fae4b79dea1a4eded2ed25f48c
SSDEEP

3072:7pzRNYuluupWyvbOijh7UAoaI52pySvl3nW0CWcscGF8ZHmt4qsQA:7ZRvupm9UX5WflXW5Wc88wGcA

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1536	1520	WerFault.exe	16

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1520 wrote to memory of 1536	1520	d39f4bcda4ca64fccf0387e5aeb5ecb8533669e886cf9a8655a1bb3043043677.exe	27
PID 1520 wrote to memory of 1536	1520	d39f4bcda4ca64fccf0387e5aeb5ecb8533669e886cf9a8655a1bb3043043677.exe	27
PID 1520 wrote to memory of 1536	1520	d39f4bcda4ca64fccf0387e5aeb5ecb8533669e886cf9a8655a1bb3043043677.exe	27
PID 1520 wrote to memory of 1536	1520	d39f4bcda4ca64fccf0387e5aeb5ecb8533669e886cf9a8655a1bb3043043677.exe	27

C:\Users\Admin\AppData\Local\Temp\d39f4bcda4ca64fccf0387e5aeb5ecb8533669e886cf9a8655a1bb3043043677.exe
"C:\Users\Admin\AppData\Local\Temp\d39f4bcda4ca64fccf0387e5aeb5ecb8533669e886cf9a8655a1bb3043043677.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1520
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1520 -s 96
  2⤵
  - Program crash
  PID:1536