bacc3c5ef9707dc3a7a10eb479c0035755042cead506a929900a659547d6f94b

Analysis

max time kernel
44s
max time network
48s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
30/10/2022, 11:15

Target

bacc3c5ef9707dc3a7a10eb479c0035755042cead506a929900a659547d6f94b.exe
Size

56KB
MD5

92fa2a35217987130b09229fbf06b61e
SHA1

5d50ff1ffdd863ee6fd11663a05481e2a47ab311
SHA256

bacc3c5ef9707dc3a7a10eb479c0035755042cead506a929900a659547d6f94b
SHA512

2135833485aa40996e6cdf1319a42ddd19dd0a89bab2d01809270b8ab4ccd4dae515fa908541a368c22ba0dbc6436614f97d5addbd3712db0f3efb47e05ceef9
SSDEEP

1536:IzWLE7lb/cGOKAdj25FxKrlYzW8Dc4OKsQuM:iW0RcUAdYrKh8puM

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1080	2016	WerFault.exe	25

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2016 wrote to memory of 1080	2016	bacc3c5ef9707dc3a7a10eb479c0035755042cead506a929900a659547d6f94b.exe	26
PID 2016 wrote to memory of 1080	2016	bacc3c5ef9707dc3a7a10eb479c0035755042cead506a929900a659547d6f94b.exe	26
PID 2016 wrote to memory of 1080	2016	bacc3c5ef9707dc3a7a10eb479c0035755042cead506a929900a659547d6f94b.exe	26
PID 2016 wrote to memory of 1080	2016	bacc3c5ef9707dc3a7a10eb479c0035755042cead506a929900a659547d6f94b.exe	26

C:\Users\Admin\AppData\Local\Temp\bacc3c5ef9707dc3a7a10eb479c0035755042cead506a929900a659547d6f94b.exe
"C:\Users\Admin\AppData\Local\Temp\bacc3c5ef9707dc3a7a10eb479c0035755042cead506a929900a659547d6f94b.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2016
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2016 -s 36
  2⤵
  - Program crash
  PID:1080