ae5bc54d4b1043520dbdd68e3f40a298f0b501d0cbe4944d47fd9291ef64f235

Analysis

max time kernel
121s
max time network
139s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11/10/2023, 17:52

Target

2023-08-26_559f5f25bd112d878374614a912532fe_stop_JC.exe
Size

1.1MB
MD5

559f5f25bd112d878374614a912532fe
SHA1

cf5f724e5046eef9dcfd0f819679f55a5b39d311
SHA256

ae5bc54d4b1043520dbdd68e3f40a298f0b501d0cbe4944d47fd9291ef64f235
SHA512

ec1a1cd5d21d708c5ebe2bf73bc6c9bf7d29cac1d12455c5ec3ae265719e9ea2938264e8fcf248b7dc6b1b4786dc7e59ec7febe57fa6d5077acc1d065c97aac2
SSDEEP

24576:ZBUIKn/vwOXGUXAjCymYZiVtElVIBT2roqnTSSxWeT/XRPOO8hpHUq7:F0dwAYZt6C31WeTPRPOhh1Uq7

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2904	2348	WerFault.exe	18

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2348 wrote to memory of 2904	2348	2023-08-26_559f5f25bd112d878374614a912532fe_stop_JC.exe	28
PID 2348 wrote to memory of 2904	2348	2023-08-26_559f5f25bd112d878374614a912532fe_stop_JC.exe	28
PID 2348 wrote to memory of 2904	2348	2023-08-26_559f5f25bd112d878374614a912532fe_stop_JC.exe	28
PID 2348 wrote to memory of 2904	2348	2023-08-26_559f5f25bd112d878374614a912532fe_stop_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\2023-08-26_559f5f25bd112d878374614a912532fe_stop_JC.exe
"C:\Users\Admin\AppData\Local\Temp\2023-08-26_559f5f25bd112d878374614a912532fe_stop_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2348
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2348 -s 192
  2⤵
  - Program crash
  PID:2904