6044e92908ced3db8770db085aed180797b44dad3d34ba5a2a23c28be2c9ab80

Analysis

max time kernel
169s
max time network
163s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 06:28

Target

2bb8769fdc960723c35ed446d457676c.exe
Size

87KB
MD5

2bb8769fdc960723c35ed446d457676c
SHA1

97cbf4fa2f48cf1dc027aa75f1f670978564beda
SHA256

6044e92908ced3db8770db085aed180797b44dad3d34ba5a2a23c28be2c9ab80
SHA512

05ff1ed4fd84880c044900d52ec2fe36fd6efd9231699b65349a0cef4d0366e9546f11c555d2e41a00c7aa2eddfc9f207b238728477f17a3ba11ce82dc7d6f57
SSDEEP

1536:O7CCRUVEW2nI0uiAtGDWkajpqMsPB4U0PewCqI+t2+guDQB++cCkn+Nvy17U6nuk:6OfeI0mtGDWhFU0DI42+ftd1Ex0d

Score

1^/10

Suspicious use of UnmapMainImage 1 IoCs

pid	Process
2096	2bb8769fdc960723c35ed446d457676c.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2096 wrote to memory of 2816	2096	2bb8769fdc960723c35ed446d457676c.exe	27
PID 2096 wrote to memory of 2816	2096	2bb8769fdc960723c35ed446d457676c.exe	27
PID 2096 wrote to memory of 2816	2096	2bb8769fdc960723c35ed446d457676c.exe	27
PID 2096 wrote to memory of 2816	2096	2bb8769fdc960723c35ed446d457676c.exe	27
PID 2096 wrote to memory of 2816	2096	2bb8769fdc960723c35ed446d457676c.exe	27
PID 2096 wrote to memory of 2816	2096	2bb8769fdc960723c35ed446d457676c.exe	27
PID 2096 wrote to memory of 2816	2096	2bb8769fdc960723c35ed446d457676c.exe	27

memory/2096-0-0x0000000000400000-0x0000000000418000-memory.dmp

Filesize
96KB

Download
memory/2096-1-0x0000000000220000-0x0000000000222000-memory.dmp

Filesize
8KB

Download
memory/2096-3-0x0000000000230000-0x0000000000242000-memory.dmp

Filesize
72KB

Download
memory/2096-5-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2096-8-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/2816-6-0x00000000000D0000-0x00000000000D9000-memory.dmp

Filesize
36KB

Download
memory/2816-7-0x00000000000D0000-0x00000000000D9000-memory.dmp

Filesize
36KB

Download
memory/2816-9-0x00000000000D0000-0x00000000000D9000-memory.dmp

Filesize
36KB

Download
memory/2816-12-0x00000000000D0000-0x00000000000D9000-memory.dmp

Filesize
36KB

Download