9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd

Analysis

max time kernel
83s
max time network
51s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 20:32

Target

9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe
Size

289KB
MD5

f0e641c7a4c0776ba1924e282b63e2f2
SHA1

7b25dc7e864594cc64cc185a51ae61cc6430a22b
SHA256

9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd
SHA512

e2451b41fff455f2d8c7cde6790c1043101fe61f202d5490e91662d5a9a78f874903c83d6fab110321db2639d315c3ad735c2fb1276b956ff4bcd2e50fdd52d5
SSDEEP

6144:3cIC75yWIT8ucQAFdEOqo7kJcKUO7qtDDboJdchbSTe/Tw:cyW7pQKnnGJ68JdchbS6rw

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1308 set thread context of 1924	1308	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	27

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1920	1924	WerFault.exe	27

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 1308 wrote to memory of 1924	1308	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	27
PID 1308 wrote to memory of 1924	1308	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	27
PID 1308 wrote to memory of 1924	1308	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	27
PID 1308 wrote to memory of 1924	1308	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	27
PID 1308 wrote to memory of 1924	1308	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	27
PID 1308 wrote to memory of 1924	1308	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	27
PID 1308 wrote to memory of 1924	1308	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	27
PID 1308 wrote to memory of 1924	1308	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	27
PID 1308 wrote to memory of 1924	1308	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	27
PID 1924 wrote to memory of 1920	1924	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	28
PID 1924 wrote to memory of 1920	1924	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	28
PID 1924 wrote to memory of 1920	1924	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	28
PID 1924 wrote to memory of 1920	1924	9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe	28

memory/1924-54-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/1924-55-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/1924-57-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/1924-58-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/1924-60-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/1924-62-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/1924-65-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/1924-66-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download