2f9aadf04977d5ec167ab8634c7d5c53c115880d1b8084b199c353148025864d

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
17/09/2023, 17:35

Target

file.exe
Size

371KB
MD5

94cf9634c3557b08eabb0e85310cebb2
SHA1

665e12c79c2af3fdb26f73d6e5dd49fc36c12236
SHA256

2f9aadf04977d5ec167ab8634c7d5c53c115880d1b8084b199c353148025864d
SHA512

3dbc043f0a2ddbd3e4bcbf63fa5240e9379330d33f8b358e0ab86f8546fc20b1b52caa9571628abffc35d35a153f754c39f9b8d62e7ba40f2992c233296a73f0
SSDEEP

6144:VwvJm09zORs+z/TMify9DAOPgQoDasDQkxpDR8JIw8/:Vgw09CK5N+1DasDQkxpDR8P8/

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2960 set thread context of 2112	2960	file.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2800	2112	WerFault.exe	28

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2960 wrote to memory of 2112	2960	file.exe	28
PID 2112 wrote to memory of 2800	2112	AppLaunch.exe	29
PID 2112 wrote to memory of 2800	2112	AppLaunch.exe	29
PID 2112 wrote to memory of 2800	2112	AppLaunch.exe	29
PID 2112 wrote to memory of 2800	2112	AppLaunch.exe	29
PID 2112 wrote to memory of 2800	2112	AppLaunch.exe	29
PID 2112 wrote to memory of 2800	2112	AppLaunch.exe	29
PID 2112 wrote to memory of 2800	2112	AppLaunch.exe	29

memory/2112-0-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2112-1-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2112-2-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2112-3-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2112-4-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2112-5-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2112-6-0x00000000FFFDE000-0x00000000FFFDF000-memory.dmp

Filesize
4KB

Download
memory/2112-7-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2112-9-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2112-11-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download