41f4ff2abb633a51dad2f534a4d6b325e63a877d043ad9fc31b49fa62a8346d4

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 21:48

Target

04d3fed52cc199376f5e464d29dc56e6.exe
Size

93KB
MD5

04d3fed52cc199376f5e464d29dc56e6
SHA1

392c4243d1dd79355fea8e382647ea683c0e541c
SHA256

41f4ff2abb633a51dad2f534a4d6b325e63a877d043ad9fc31b49fa62a8346d4
SHA512

4aa0161ca2dc6cd23f2d72604bd4a0b68545b7a687cdf31f979dbf3a67926a8b95bf28a2c504bf9a6d2bd518b29d890340a4249dc5a27e34aa3313a0e61bc805
SSDEEP

1536:rmPIcSnHJeSlEaivYtWklNs6hDSDyyKw2ZbjFDuPBNg+uYvb0xlCsofGHb8dctVJ:rmAcSJ1lOY8uNsI7NXlYDmMso2ZtVyCD

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2156	2204	WerFault.exe	16

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2204 wrote to memory of 2156	2204	04d3fed52cc199376f5e464d29dc56e6.exe	28
PID 2204 wrote to memory of 2156	2204	04d3fed52cc199376f5e464d29dc56e6.exe	28
PID 2204 wrote to memory of 2156	2204	04d3fed52cc199376f5e464d29dc56e6.exe	28
PID 2204 wrote to memory of 2156	2204	04d3fed52cc199376f5e464d29dc56e6.exe	28

C:\Users\Admin\AppData\Local\Temp\04d3fed52cc199376f5e464d29dc56e6.exe
"C:\Users\Admin\AppData\Local\Temp\04d3fed52cc199376f5e464d29dc56e6.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2204
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2204 -s 88
  2⤵
  - Program crash
  PID:2156

memory/2204-0-0x0000000001C70000-0x0000000001D49000-memory.dmp

Filesize
868KB

Download