662efea9a69d84585e7f57fe17875a57fe1ddf8963440edc040389378c4d5f26

Analysis

max time kernel
41s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 08:21

Target

662efea9a69d84585e7f57fe17875a57fe1ddf8963440edc040389378c4d5f26.exe
Size

91KB
MD5

08709702e398644c021a59dba5642b21
SHA1

d5ffc10bf30ca00f8bdbfa7328e9374545dc6cd7
SHA256

662efea9a69d84585e7f57fe17875a57fe1ddf8963440edc040389378c4d5f26
SHA512

c891a87f645bde507ecf1f52d8f3d22bde09ece682ac78b2c28cae38092895c041ae61b87debf74aa959e8f9e94efbaabaa9f864f7499febe90203126dcd2533
SSDEEP

1536:xhJOz9xEuI30KuA5ifzPePa1qFo+ics4zsX7JtyWpVny/qtGVaYI0C6ZKAl11+O0:xGzWTYPUa1CoVcdq7JgAy1ah07/1fy

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
912	1832	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1832 wrote to memory of 912	1832	662efea9a69d84585e7f57fe17875a57fe1ddf8963440edc040389378c4d5f26.exe	28
PID 1832 wrote to memory of 912	1832	662efea9a69d84585e7f57fe17875a57fe1ddf8963440edc040389378c4d5f26.exe	28
PID 1832 wrote to memory of 912	1832	662efea9a69d84585e7f57fe17875a57fe1ddf8963440edc040389378c4d5f26.exe	28
PID 1832 wrote to memory of 912	1832	662efea9a69d84585e7f57fe17875a57fe1ddf8963440edc040389378c4d5f26.exe	28

C:\Users\Admin\AppData\Local\Temp\662efea9a69d84585e7f57fe17875a57fe1ddf8963440edc040389378c4d5f26.exe
"C:\Users\Admin\AppData\Local\Temp\662efea9a69d84585e7f57fe17875a57fe1ddf8963440edc040389378c4d5f26.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1832
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1832 -s 36
  2⤵
  - Program crash
  PID:912

memory/1832-54-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download