649c8ef74e35819c668d35f6d47d9822abb8d039f98dcb4f37e179ca9abe6e14

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12-10-2023 13:02

Target

file.exe
Size

393KB
MD5

1f5d049dcab776f87b0fbd5db1ca1f5c
SHA1

6efebc061ec9011d3aa8ee3b652dafa4fc650395
SHA256

649c8ef74e35819c668d35f6d47d9822abb8d039f98dcb4f37e179ca9abe6e14
SHA512

0acebc11063c3c72a1304f8dde929b4f1d44708e71a444f25b6291edd8fa4885b918ff20c00290e7aa4cba11fdf3df5c4df71d8a7fe688b065373832d8da1c1c
SSDEEP

6144:N5IjEe2jicP5iOo2T8VrSd/sUAOnklyGQGIFlJdVVaTFHz1Sa:N5ILqiG59ouRkOGoJdaTFHz1Sa

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2412 set thread context of 2636	2412	file.exe	29

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2812	2636	WerFault.exe	29

Suspicious use of WriteProcessMemory 21 IoCs

description	pid	Process	procid_target
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2412 wrote to memory of 2636	2412	file.exe	29
PID 2636 wrote to memory of 2812	2636	AppLaunch.exe	30
PID 2636 wrote to memory of 2812	2636	AppLaunch.exe	30
PID 2636 wrote to memory of 2812	2636	AppLaunch.exe	30
PID 2636 wrote to memory of 2812	2636	AppLaunch.exe	30
PID 2636 wrote to memory of 2812	2636	AppLaunch.exe	30
PID 2636 wrote to memory of 2812	2636	AppLaunch.exe	30
PID 2636 wrote to memory of 2812	2636	AppLaunch.exe	30

memory/2636-2-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2636-1-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2636-0-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2636-4-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2636-6-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2636-8-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2636-10-0x00000000FFFDE000-0x00000000FFFDF000-memory.dmp

Filesize
4KB

Download
memory/2636-11-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2636-13-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download
memory/2636-15-0x0000000000400000-0x000000000042F000-memory.dmp

Filesize
188KB

Download