cbb06f01c562da87686ba5952c99cc0e3bf361a418dd261774be5d3f009b995d

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
01/10/2023, 20:41

Target

cbb06f01c562da87686ba5952c99cc0e3bf361a418dd261774be5d3f009b995d_JC.exe
Size

1.3MB
MD5

c81b4d4186ed5568fd8606bfa0aafa3f
SHA1

61ec767585f1f7f4096e34b094cc9f2cb0089472
SHA256

cbb06f01c562da87686ba5952c99cc0e3bf361a418dd261774be5d3f009b995d
SHA512

828bba52627ce5d030550fc9495ba0050ef9271527a830677ca0a3b19c4ae1be76754503bd1eeac1e81bb14224975bf5df1c9b88e074fad8f57a5e797fadd7ac
SSDEEP

12288:jhufBRgicAPbv6EmBzwhOaZ3hD2TRyzrPrBW0mwQVQujtQz6Sz:M5RA4i1sdMKrPrBW0mwi2Vz

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1068	2016	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2016 wrote to memory of 1068	2016	cbb06f01c562da87686ba5952c99cc0e3bf361a418dd261774be5d3f009b995d_JC.exe	28
PID 2016 wrote to memory of 1068	2016	cbb06f01c562da87686ba5952c99cc0e3bf361a418dd261774be5d3f009b995d_JC.exe	28
PID 2016 wrote to memory of 1068	2016	cbb06f01c562da87686ba5952c99cc0e3bf361a418dd261774be5d3f009b995d_JC.exe	28
PID 2016 wrote to memory of 1068	2016	cbb06f01c562da87686ba5952c99cc0e3bf361a418dd261774be5d3f009b995d_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\cbb06f01c562da87686ba5952c99cc0e3bf361a418dd261774be5d3f009b995d_JC.exe
"C:\Users\Admin\AppData\Local\Temp\cbb06f01c562da87686ba5952c99cc0e3bf361a418dd261774be5d3f009b995d_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2016
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2016 -s 36
  2⤵
  - Program crash
  PID:1068