9661f2075ff6572dcd35ed7fcb74c4ba11771ddba99f230815962a43b90e907d

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12/10/2023, 16:14

Target

9661f2075ff6572dcd35ed7fcb74c4ba11771ddba99f230815962a43b90e907d_JC.exe
Size

784KB
MD5

8d648228155569c24528c387c666f91d
SHA1

6e2d9d9511e21589f619fa5500d7366fb032210a
SHA256

9661f2075ff6572dcd35ed7fcb74c4ba11771ddba99f230815962a43b90e907d
SHA512

d499cb6727a67bad8edffb8b66f03c5cb95a84c1cc387e9d25ab58bc52fd6ee6ed81b367750e034be036a17eea9d673eb4b7ec728205ecbd64db9c886956e710
SSDEEP

24576:ulX1LJ1na1B5m+ncj4MrJeYh1y+ZPy+D+jBz:u9/1na1fncjjY6PPy+a

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2604	1888	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1888 wrote to memory of 2604	1888	9661f2075ff6572dcd35ed7fcb74c4ba11771ddba99f230815962a43b90e907d_JC.exe	30
PID 1888 wrote to memory of 2604	1888	9661f2075ff6572dcd35ed7fcb74c4ba11771ddba99f230815962a43b90e907d_JC.exe	30
PID 1888 wrote to memory of 2604	1888	9661f2075ff6572dcd35ed7fcb74c4ba11771ddba99f230815962a43b90e907d_JC.exe	30
PID 1888 wrote to memory of 2604	1888	9661f2075ff6572dcd35ed7fcb74c4ba11771ddba99f230815962a43b90e907d_JC.exe	30

C:\Users\Admin\AppData\Local\Temp\9661f2075ff6572dcd35ed7fcb74c4ba11771ddba99f230815962a43b90e907d_JC.exe
"C:\Users\Admin\AppData\Local\Temp\9661f2075ff6572dcd35ed7fcb74c4ba11771ddba99f230815962a43b90e907d_JC.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1888
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1888 -s 664
  2⤵
  - Program crash
  PID:2604

memory/1888-0-0x00000000740D0000-0x00000000747BE000-memory.dmp

Filesize
6.9MB

Download
memory/1888-1-0x0000000000DA0000-0x0000000000E6A000-memory.dmp

Filesize
808KB

Download
memory/1888-2-0x0000000000CE0000-0x0000000000D20000-memory.dmp

Filesize
256KB

Download
memory/1888-3-0x0000000000460000-0x0000000000472000-memory.dmp

Filesize
72KB

Download
memory/1888-4-0x00000000740D0000-0x00000000747BE000-memory.dmp

Filesize
6.9MB

Download
memory/1888-5-0x0000000000CE0000-0x0000000000D20000-memory.dmp

Filesize
256KB

Download
memory/1888-6-0x0000000000480000-0x0000000000490000-memory.dmp

Filesize
64KB

Download