Analysis
-
max time kernel
171s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12-10-2023 15:31
Behavioral task
behavioral1
Sample
193220x00000000004000000x0000000000486000memory_JC.exe
Resource
win7-20230831-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
193220x00000000004000000x0000000000486000memory_JC.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
193220x00000000004000000x0000000000486000memory_JC.exe
-
Size
536KB
-
MD5
e26af6cca9dc833bf82f8d7f11dc2932
-
SHA1
b26ba0b306524fc00f867edd2b09aa9aad745659
-
SHA256
ce74055a03c4f995c25e831a7c74e30adaf61607e5361357167f520a97a9e6de
-
SHA512
17c56d00ab317cc528a6ead9625c4ae2a903077545c810c41d981d1400115adfa40198ce805e1c31f8793c798998ea79dee1810fd96d6e218384755d9ccc7ea0
-
SSDEEP
3072:TrPI5jSu1UgDgfA4D3j+6XrgGHT4SW4NsnGC4EN/kMBsupYX9c5omTSTtyl:zu1UgDGJrj+6JHT4+WlkgQLmTSTk
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
Processes:
WerFault.exepid pid_target process target process 2936 3148 WerFault.exe 193220x00000000004000000x0000000000486000memory_JC.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\193220x00000000004000000x0000000000486000memory_JC.exe"C:\Users\Admin\AppData\Local\Temp\193220x00000000004000000x0000000000486000memory_JC.exe"1⤵PID:3148
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3148 -s 2162⤵
- Program crash
PID:2936
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3148 -ip 31481⤵PID:4348