3b76efae01ef7da0b7b91e32e7a7d22b0e1218b3d9277a383c844c8507d985c2

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
23/07/2023, 16:06

Target

NA_NA_1344814440f562exeexe_JC.exe
Size

179KB
MD5

1344814440f562fe65644d3908381517
SHA1

778a85b5abb2bd50ed5f726dfe76237c7ff69f40
SHA256

3b76efae01ef7da0b7b91e32e7a7d22b0e1218b3d9277a383c844c8507d985c2
SHA512

edfa13f8911fac2d3baa2fbb0bc21f8341c67679c8df8acfb2d964ae504a3d5660141ad696b7f11c9e97b9ad79f45de96745052406ea69eb536ff7934e89546b
SSDEEP

3072:8jHMg9eLlRdMB8BFIjy6J1vQsVkqiswZw2cA1fPOmTZ32rl:uGLlR5ubJ1vDXiswZ91OeVs

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2312	2300	WerFault.exe	19

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 2312	2300	NA_NA_1344814440f562exeexe_JC.exe	28
PID 2300 wrote to memory of 2312	2300	NA_NA_1344814440f562exeexe_JC.exe	28
PID 2300 wrote to memory of 2312	2300	NA_NA_1344814440f562exeexe_JC.exe	28
PID 2300 wrote to memory of 2312	2300	NA_NA_1344814440f562exeexe_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\NA_NA_1344814440f562exeexe_JC.exe
"C:\Users\Admin\AppData\Local\Temp\NA_NA_1344814440f562exeexe_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2300 -s 36
  2⤵
  - Program crash
  PID:2312

memory/2300-54-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download
memory/2300-55-0x0000000000400000-0x000000000042E000-memory.dmp

Filesize
184KB

Download