dd19a3c43973a183117180131838255cbde47eaa0d21f4155ec46410a99807b7

Analysis

max time kernel
47s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
23/11/2022, 20:10

Target

dd19a3c43973a183117180131838255cbde47eaa0d21f4155ec46410a99807b7.exe
Size

267KB
MD5

e66f935eadb3031345ae07f7e471caa0
SHA1

5894e47060f9c38d8189a34024c714b4cadb6c88
SHA256

dd19a3c43973a183117180131838255cbde47eaa0d21f4155ec46410a99807b7
SHA512

73fc05811b7da3735a23ceca17f38da322b475fbe613cd889751fd334820d9096d97a8a2f2ce35626a6dc1e12453f0f41ec063934b97e923e9be28ae7591c2cf
SSDEEP

6144:jYzE4ZT5/4GqVGbxKhuPgQKiuqMyZ+Irqltw+a:jYAoTHuRc1TJsI+YT

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
824	1380	WerFault.exe	26

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1380	dd19a3c43973a183117180131838255cbde47eaa0d21f4155ec46410a99807b7.exe
1380	dd19a3c43973a183117180131838255cbde47eaa0d21f4155ec46410a99807b7.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1380 wrote to memory of 824	1380	dd19a3c43973a183117180131838255cbde47eaa0d21f4155ec46410a99807b7.exe	27
PID 1380 wrote to memory of 824	1380	dd19a3c43973a183117180131838255cbde47eaa0d21f4155ec46410a99807b7.exe	27
PID 1380 wrote to memory of 824	1380	dd19a3c43973a183117180131838255cbde47eaa0d21f4155ec46410a99807b7.exe	27
PID 1380 wrote to memory of 824	1380	dd19a3c43973a183117180131838255cbde47eaa0d21f4155ec46410a99807b7.exe	27

C:\Users\Admin\AppData\Local\Temp\dd19a3c43973a183117180131838255cbde47eaa0d21f4155ec46410a99807b7.exe
"C:\Users\Admin\AppData\Local\Temp\dd19a3c43973a183117180131838255cbde47eaa0d21f4155ec46410a99807b7.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1380
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1380 -s 260
  2⤵
  - Program crash
  PID:824

memory/1380-54-0x00000000757A1000-0x00000000757A3000-memory.dmp

Filesize
8KB

Download