ba29e82bc53b3e5083c4534729736dffe2af971a66bc71961a09e221bffdfd16

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
23/11/2023, 09:02

Target

ba29e82bc53b3e5083c4534729736dffe2af971a66bc71961a09e221bffdfd16.exe
Size

14.5MB
MD5

f4569ba9b13f2c823d6fe01a6e520594
SHA1

04c2a90495c8c4b923a06c9c47aed6eb2516d612
SHA256

ba29e82bc53b3e5083c4534729736dffe2af971a66bc71961a09e221bffdfd16
SHA512

503b82ebf3da18a68760288c376e82bca900efc4777a8bd1a56b7da4037399bb9f7093388bb9740e1d540629a68a423fd0f11c4d7aa78b06efed324976539086
SSDEEP

393216:cY0mcRRZuQTJ1g/dh6n57MbtXqXlrbHDTlqQz3wj26gH:cYKRWQTfAun52qpbjzg6pH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3016	2516	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2516 wrote to memory of 3016	2516	ba29e82bc53b3e5083c4534729736dffe2af971a66bc71961a09e221bffdfd16.exe	28
PID 2516 wrote to memory of 3016	2516	ba29e82bc53b3e5083c4534729736dffe2af971a66bc71961a09e221bffdfd16.exe	28
PID 2516 wrote to memory of 3016	2516	ba29e82bc53b3e5083c4534729736dffe2af971a66bc71961a09e221bffdfd16.exe	28
PID 2516 wrote to memory of 3016	2516	ba29e82bc53b3e5083c4534729736dffe2af971a66bc71961a09e221bffdfd16.exe	28

C:\Users\Admin\AppData\Local\Temp\ba29e82bc53b3e5083c4534729736dffe2af971a66bc71961a09e221bffdfd16.exe
"C:\Users\Admin\AppData\Local\Temp\ba29e82bc53b3e5083c4534729736dffe2af971a66bc71961a09e221bffdfd16.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2516
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2516 -s 304
  2⤵
  - Program crash
  PID:3016

memory/2516-0-0x0000000000400000-0x0000000001C55000-memory.dmp

Filesize
24.3MB

Download
memory/2516-2-0x00000000077D0000-0x0000000007B92000-memory.dmp

Filesize
3.8MB

Download
memory/2516-1-0x00000000077D0000-0x0000000007B92000-memory.dmp

Filesize
3.8MB

Download
memory/2516-4-0x00000000077D0000-0x0000000007B92000-memory.dmp

Filesize
3.8MB

Download
memory/2516-7-0x00000000077D0000-0x0000000007B92000-memory.dmp

Filesize
3.8MB

Download
memory/2516-11-0x00000000077D0000-0x0000000007B92000-memory.dmp

Filesize
3.8MB

Download
memory/2516-15-0x00000000077D0000-0x0000000007B92000-memory.dmp

Filesize
3.8MB

Download
memory/2516-19-0x00000000077D0000-0x0000000007B92000-memory.dmp

Filesize
3.8MB

Download
memory/2516-23-0x00000000077D0000-0x0000000007B92000-memory.dmp

Filesize
3.8MB

Download
memory/2516-26-0x00000000077D0000-0x0000000007B92000-memory.dmp

Filesize
3.8MB

Download
memory/2516-28-0x00000000077D0000-0x0000000007B92000-memory.dmp

Filesize
3.8MB

Download
memory/2516-27-0x00000000077D0000-0x0000000007B92000-memory.dmp

Filesize
3.8MB

Download
memory/2516-29-0x0000000000400000-0x0000000001C55000-memory.dmp

Filesize
24.3MB

Download