b1eb77eda01eb8b2a125d4863ed9efd97e5bea7aabc61929ae17ae99968c95db

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12-10-2023 15:06

Target

b1eb77eda01eb8b2a125d4863ed9efd97e5bea7aabc61929ae17ae99968c95db_JC.exe
Size

181KB
MD5

044b91a89365ed356eefe7915183db7e
SHA1

fb240e8630c4fff01af7c0eea5bc7535fe4044f1
SHA256

b1eb77eda01eb8b2a125d4863ed9efd97e5bea7aabc61929ae17ae99968c95db
SHA512

08959c87499fdf88a51103007a94072ae7b6afeababb887d90eea977ae2ed661bc1de774de2e62b06d576d2a029de3fd99d7a51a9801c237ea70c3b4461146c7
SSDEEP

3072:JeS0t1K2btjKQvnegAyOj5vqdE+++Ma3HAX:ES0Teg+j5veE+++Ma3H

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2212	2204	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 2212	2204	b1eb77eda01eb8b2a125d4863ed9efd97e5bea7aabc61929ae17ae99968c95db_JC.exe	28
PID 2204 wrote to memory of 2212	2204	b1eb77eda01eb8b2a125d4863ed9efd97e5bea7aabc61929ae17ae99968c95db_JC.exe	28
PID 2204 wrote to memory of 2212	2204	b1eb77eda01eb8b2a125d4863ed9efd97e5bea7aabc61929ae17ae99968c95db_JC.exe	28
PID 2204 wrote to memory of 2212	2204	b1eb77eda01eb8b2a125d4863ed9efd97e5bea7aabc61929ae17ae99968c95db_JC.exe	28

C:\Users\Admin\AppData\Local\Temp\b1eb77eda01eb8b2a125d4863ed9efd97e5bea7aabc61929ae17ae99968c95db_JC.exe
"C:\Users\Admin\AppData\Local\Temp\b1eb77eda01eb8b2a125d4863ed9efd97e5bea7aabc61929ae17ae99968c95db_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 36
  2⤵
  - Program crash
  PID:2212