654aa6e172bff10e712b9a09f59f2e1fd54bd36c7d7b46b84cc8925c9c07cb86

Analysis

max time kernel
141s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 15:25

Target

03a5a7d34675085db7e1a704228c015a.exe
Size

188KB
MD5

03a5a7d34675085db7e1a704228c015a
SHA1

219e9372ceb05df52ce6df8ed6ba356d4f18e1f6
SHA256

654aa6e172bff10e712b9a09f59f2e1fd54bd36c7d7b46b84cc8925c9c07cb86
SHA512

339cfdcf341af1aa27ee3cb485c4c9725bb7a5cf254d1c63733aa5fc9c6ff583fbeda6215231c8d6eebf49b1ad575026085760b2801a5d40083b74a3c5277772
SSDEEP

3072:FgvTSuGTDbbiIcdoy163KFzm2SWirIo/FpztsVnwniM2zIsYvscMVjMgMV+28sWe:9DbbiIc763KFi2SWirIo/zynwz2zIjUS

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2288 set thread context of 2424	2288	03a5a7d34675085db7e1a704228c015a.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2336	2424	WerFault.exe	28

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2288	03a5a7d34675085db7e1a704228c015a.exe

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 2288 wrote to memory of 2424	2288	03a5a7d34675085db7e1a704228c015a.exe	28
PID 2288 wrote to memory of 2424	2288	03a5a7d34675085db7e1a704228c015a.exe	28
PID 2288 wrote to memory of 2424	2288	03a5a7d34675085db7e1a704228c015a.exe	28
PID 2288 wrote to memory of 2424	2288	03a5a7d34675085db7e1a704228c015a.exe	28
PID 2288 wrote to memory of 2424	2288	03a5a7d34675085db7e1a704228c015a.exe	28
PID 2288 wrote to memory of 2424	2288	03a5a7d34675085db7e1a704228c015a.exe	28
PID 2288 wrote to memory of 2424	2288	03a5a7d34675085db7e1a704228c015a.exe	28
PID 2288 wrote to memory of 2424	2288	03a5a7d34675085db7e1a704228c015a.exe	28
PID 2288 wrote to memory of 2424	2288	03a5a7d34675085db7e1a704228c015a.exe	28
PID 2424 wrote to memory of 2336	2424	03a5a7d34675085db7e1a704228c015a.exe	29
PID 2424 wrote to memory of 2336	2424	03a5a7d34675085db7e1a704228c015a.exe	29
PID 2424 wrote to memory of 2336	2424	03a5a7d34675085db7e1a704228c015a.exe	29
PID 2424 wrote to memory of 2336	2424	03a5a7d34675085db7e1a704228c015a.exe	29

memory/2424-2-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/2424-4-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/2424-6-0x0000000000400000-0x0000000000419000-memory.dmp

Filesize
100KB

Download
memory/2424-7-0x0000000000220000-0x0000000000233000-memory.dmp

Filesize
76KB

Download