78ea6aae2227c96fe1f5e0042be914bc454bbe7756dd57efde6226014d0bc84f

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
18/09/2023, 22:38

Target

file.exe
Size

393KB
MD5

541f1a758fcc5b6dfb46636d2fe39f32
SHA1

e81c018c49a63b2dd6e4e5f04c2c8c773739f055
SHA256

78ea6aae2227c96fe1f5e0042be914bc454bbe7756dd57efde6226014d0bc84f
SHA512

97c774940ad3baa5a8a76b70d20e9eb8129cd0ab7ae94d715248a02a3b0562735f7feb80ec9b92038f205fc653e1580bf83d391c8066214d21e6cf6d8f467eb4
SSDEEP

6144:SvtjEG2jicP5iOo2T8VrSd/sUAO4klRQechYHjLizs6juUzfHFYvc1aR1Sa:SvtjqiG59ouqkTu6Wzs6ZYvc1u1Sa

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2952 set thread context of 2456	2952	file.exe	29

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2984	2456	WerFault.exe	29

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2952 wrote to memory of 2456	2952	file.exe	29
PID 2456 wrote to memory of 2984	2456	AppLaunch.exe	30
PID 2456 wrote to memory of 2984	2456	AppLaunch.exe	30
PID 2456 wrote to memory of 2984	2456	AppLaunch.exe	30
PID 2456 wrote to memory of 2984	2456	AppLaunch.exe	30
PID 2456 wrote to memory of 2984	2456	AppLaunch.exe	30
PID 2456 wrote to memory of 2984	2456	AppLaunch.exe	30
PID 2456 wrote to memory of 2984	2456	AppLaunch.exe	30

memory/2456-0-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2456-1-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2456-2-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2456-4-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2456-3-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2456-7-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2456-6-0x00000000FFFDE000-0x00000000FFFDF000-memory.dmp

Filesize
4KB

Download
memory/2456-5-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2456-9-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2456-11-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download