c728c5e2d35cf7dc6e5d91db9b1c8567fa1839160cdd9e6c4129d51d2d214292

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 15:44

Target

SuperOneClickv2.3.3-ShortFuse Modded/ADB/AdbWinApi.dll
Size

99KB
MD5

3c2fa76cdac99822742baf2ad30a2e2c
SHA1

5fd9ccc53b2dd4b52ca21428f5604ba18d1fc91c
SHA256

ad4a81bc6efd565119f1d796268257c790207e9c34152467fa826ea7d2baafd8
SHA512

54d7f6608293a4dcecaccd17fd289912d629214f02636807fdfbfdd6c8de19cd927a2386e3747c641ba6039f9c9d1ffd8d3fb2d045ae0bafcd0f3ec845e538b5
SSDEEP

1536:7pCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGtMmQh:7po0k6ZWVTaif6sCG0

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2316	2284	WerFault.exe	16

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2172 wrote to memory of 2284	2172	rundll32.exe	16
PID 2172 wrote to memory of 2284	2172	rundll32.exe	16
PID 2172 wrote to memory of 2284	2172	rundll32.exe	16
PID 2172 wrote to memory of 2284	2172	rundll32.exe	16
PID 2172 wrote to memory of 2284	2172	rundll32.exe	16
PID 2172 wrote to memory of 2284	2172	rundll32.exe	16
PID 2172 wrote to memory of 2284	2172	rundll32.exe	16
PID 2284 wrote to memory of 2316	2284	rundll32.exe	18
PID 2284 wrote to memory of 2316	2284	rundll32.exe	18
PID 2284 wrote to memory of 2316	2284	rundll32.exe	18
PID 2284 wrote to memory of 2316	2284	rundll32.exe	18

C:\Windows\SysWOW64\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\SuperOneClickv2.3.3-ShortFuse Modded\ADB\AdbWinApi.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2284
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2284 -s 244
  2⤵
  - Program crash
  PID:2316

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\SuperOneClickv2.3.3-ShortFuse Modded\ADB\AdbWinApi.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2172