29fbb5c452c0458c358c204b574cc433fd41b2c42c68a37ce7d7a588e834d92a

Analysis

max time kernel
37s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/10/2022, 21:34

Target

29fbb5c452c0458c358c204b574cc433fd41b2c42c68a37ce7d7a588e834d92a.exe
Size

62KB
MD5

a395165fdc6ace2034099f8e44201796
SHA1

86fc677d7ccc3d2425b05aac96dab5a49b806dc8
SHA256

29fbb5c452c0458c358c204b574cc433fd41b2c42c68a37ce7d7a588e834d92a
SHA512

2e688dfab9f9910405785e36bae84a5c3f9f1f7c080dbb48724ef6cd3681df1d2dca220d7fd9f2bb92f6850681ebce4d8e988ed2fa30e42ee42374d0e76fc078
SSDEEP

1536:DcIdclybpT97oEFpF7ww0javq6wWVP+a3rKWsMNbp:DclybpTvww0uIk2fMNb

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1456	904	WerFault.exe	18

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 904 wrote to memory of 1456	904	29fbb5c452c0458c358c204b574cc433fd41b2c42c68a37ce7d7a588e834d92a.exe	27
PID 904 wrote to memory of 1456	904	29fbb5c452c0458c358c204b574cc433fd41b2c42c68a37ce7d7a588e834d92a.exe	27
PID 904 wrote to memory of 1456	904	29fbb5c452c0458c358c204b574cc433fd41b2c42c68a37ce7d7a588e834d92a.exe	27
PID 904 wrote to memory of 1456	904	29fbb5c452c0458c358c204b574cc433fd41b2c42c68a37ce7d7a588e834d92a.exe	27

C:\Users\Admin\AppData\Local\Temp\29fbb5c452c0458c358c204b574cc433fd41b2c42c68a37ce7d7a588e834d92a.exe
"C:\Users\Admin\AppData\Local\Temp\29fbb5c452c0458c358c204b574cc433fd41b2c42c68a37ce7d7a588e834d92a.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:904
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 904 -s 36
  2⤵
  - Program crash
  PID:1456