bc2e6203b8fa8257272828ec2195740aab4d37f573f19fee94a165e2b843b847

Analysis

max time kernel
37s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
30/10/2022, 21:47

Target

bc2e6203b8fa8257272828ec2195740aab4d37f573f19fee94a165e2b843b847.exe
Size

314KB
MD5

a2272072efa13e64029e530e038e9770
SHA1

34321889b87f652c990032c26207f6945e5635a5
SHA256

bc2e6203b8fa8257272828ec2195740aab4d37f573f19fee94a165e2b843b847
SHA512

a219dfc604698bae555a0a91356b554badd45b4c6b92f5f931f3dc9e6376a574901661c2c856d386309a3330efcb8752a13769ea1e52e7370c31a8d26a5170dc
SSDEEP

6144:S6KkJbTUnIe7eBqYvaHFMIhEEFjfq0Xp3Bm7aAb3:SqJfgZw/vaHXhD5RmVb3

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1876	944	WerFault.exe	26

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 944 wrote to memory of 1876	944	bc2e6203b8fa8257272828ec2195740aab4d37f573f19fee94a165e2b843b847.exe	27
PID 944 wrote to memory of 1876	944	bc2e6203b8fa8257272828ec2195740aab4d37f573f19fee94a165e2b843b847.exe	27
PID 944 wrote to memory of 1876	944	bc2e6203b8fa8257272828ec2195740aab4d37f573f19fee94a165e2b843b847.exe	27
PID 944 wrote to memory of 1876	944	bc2e6203b8fa8257272828ec2195740aab4d37f573f19fee94a165e2b843b847.exe	27

C:\Users\Admin\AppData\Local\Temp\bc2e6203b8fa8257272828ec2195740aab4d37f573f19fee94a165e2b843b847.exe
"C:\Users\Admin\AppData\Local\Temp\bc2e6203b8fa8257272828ec2195740aab4d37f573f19fee94a165e2b843b847.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:944
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 944 -s 156
  2⤵
  - Program crash
  PID:1876

memory/944-54-0x0000000075C61000-0x0000000075C63000-memory.dmp

Filesize
8KB

Download
memory/944-56-0x0000000000400000-0x0000000000452000-memory.dmp

Filesize
328KB

Download