96057fe835bba32454d81a1a6dfa9643d40be8f59604b65cdd80184d03869dac

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 21:49

Target

04d8839bd94072bb9f975de7b81046c0.exe
Size

125KB
MD5

04d8839bd94072bb9f975de7b81046c0
SHA1

c9b58e41c44849a652399e53d83744325685a263
SHA256

96057fe835bba32454d81a1a6dfa9643d40be8f59604b65cdd80184d03869dac
SHA512

267d6e35aae16a672fd24b64d96caf54a2b6b00846518439b261aa6a585225f571d7dbaf3510ed43eaaa0a5d067c04c71e0a944b767424804a4100b593140b7c
SSDEEP

3072:uv6nW5VmhmlRkGGvy+xmFa7U9DZnjzGEq75E68VonareMw3RkU:hnNmlRkGayPa7Udo95E68aarcRkU

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2344	2216	WerFault.exe	18

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2216 wrote to memory of 2344	2216	04d8839bd94072bb9f975de7b81046c0.exe	28
PID 2216 wrote to memory of 2344	2216	04d8839bd94072bb9f975de7b81046c0.exe	28
PID 2216 wrote to memory of 2344	2216	04d8839bd94072bb9f975de7b81046c0.exe	28
PID 2216 wrote to memory of 2344	2216	04d8839bd94072bb9f975de7b81046c0.exe	28

C:\Users\Admin\AppData\Local\Temp\04d8839bd94072bb9f975de7b81046c0.exe
"C:\Users\Admin\AppData\Local\Temp\04d8839bd94072bb9f975de7b81046c0.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2216
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2216 -s 36
  2⤵
  - Program crash
  PID:2344

memory/2216-0-0x0000000000400000-0x0000000000455000-memory.dmp

Filesize
340KB

Download