6c0e868e5f7221fd942251784f8aad1e0da1b0b6abbbc52985845d8c1c7a316d

Resubmissions

07-11-2023 19:57

max time kernel
1557s
max time network
1577s
platform
windows7_x64
resource
win7-20231020-es
resource tags

arch:x64arch:x86image:win7-20231020-eslocale:es-esos:windows7-x64systemwindows
submitted
07-11-2023 19:57

Target

GD 2.11 paint/GD Paint.exe
Size

6.5MB
MD5

fdf231f7dc5d1c57e023f4148227edae
SHA1

dbb13500a972217b801d5d7656a19ebff1a24524
SHA256

a2b2424171870437cd55743572dc717982a0b2f33abe4f6e1ff7bc3cafb9ab3b
SHA512

5a133c3318e694e699428f9e9c7a94e14e7bcd4aa997f4ce52a66bc70d527393a037e93183fde230bdaffd5b92fc9a6a209bb5c63312a12c38356d206eae7813
SSDEEP

49152:Bug8dPHi2XXq8dWlHIuKO77iX+4kVoVNG+w6xfS+w6xfSExfSRaTQAYjzDTjE:QDnq8W9KO7e2GVNVVxfS+VxfSgfSR

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2712 2416 WerFault.exe GD Paint.exe

pid	pid_target	process	target process
2712	2416	WerFault.exe	GD Paint.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

GD Paint.exe

description	pid	process	target process
PID 2416 wrote to memory of 2712	2416	GD Paint.exe	WerFault.exe
PID 2416 wrote to memory of 2712	2416	GD Paint.exe	WerFault.exe
PID 2416 wrote to memory of 2712	2416	GD Paint.exe	WerFault.exe
PID 2416 wrote to memory of 2712	2416	GD Paint.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\GD 2.11 paint\GD Paint.exe
"C:\Users\Admin\AppData\Local\Temp\GD 2.11 paint\GD Paint.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2416

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2416 -s 320
2⤵
- Program crash
PID:2712