35f109d6c67a0f2fcc7b32cccf754079e682a423f44bdc1019094637080202e9

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
19/09/2023, 07:13

Target

file.exe
Size

393KB
MD5

dcf100f3cd279386734be0b6953cd771
SHA1

97ac468b9fb891181fee3007166683926a5dd436
SHA256

35f109d6c67a0f2fcc7b32cccf754079e682a423f44bdc1019094637080202e9
SHA512

b7ef05b404b6144c2ed84c80344faa869b787ba197a331dd94d42555b0f9864f2d4f77f3faeef7e976a53b429d74ec6991c492e403c845191fc011205e2e4109
SSDEEP

12288:ViC6qiG59ouZkHEC7VD1Su+40BnOr1Sa:ViCN5EEC79+4Yncs

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2292 set thread context of 2788	2292	file.exe	29

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2640	2788	WerFault.exe	29

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2292 wrote to memory of 2788	2292	file.exe	29
PID 2788 wrote to memory of 2640	2788	AppLaunch.exe	30
PID 2788 wrote to memory of 2640	2788	AppLaunch.exe	30
PID 2788 wrote to memory of 2640	2788	AppLaunch.exe	30
PID 2788 wrote to memory of 2640	2788	AppLaunch.exe	30
PID 2788 wrote to memory of 2640	2788	AppLaunch.exe	30
PID 2788 wrote to memory of 2640	2788	AppLaunch.exe	30
PID 2788 wrote to memory of 2640	2788	AppLaunch.exe	30

memory/2788-1-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2788-0-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2788-2-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2788-3-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2788-4-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2788-6-0x00000000FFFDE000-0x00000000FFFDF000-memory.dmp

Filesize
4KB

Download
memory/2788-5-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2788-7-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2788-9-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2788-11-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download