7154c746326095505d9d5c8f555dd01891c4527137f1bc59f9434b13697cbc6e

Analysis

max time kernel
194s
max time network
165s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
05/01/2024, 02:25

Target

4287bc37cab3fd8c199e4e62383a5178.exe
Size

92KB
MD5

4287bc37cab3fd8c199e4e62383a5178
SHA1

62aaaaf8d2255d9820551d6ab6a9cba44761d368
SHA256

7154c746326095505d9d5c8f555dd01891c4527137f1bc59f9434b13697cbc6e
SHA512

1c57e639ffe4ba6150afcef05303c5b590415aaf49cbcb170cbce33eaac48bee8408330b3e593e59f39c59e23e52efcddbba90c6e3a8077ea895fec18463efd3
SSDEEP

1536:KYg64oaTJ5YJnslQz7OjcJwDBZS+oB34s6Pv1RGeSTa4jGKfGEVs2J:rg64DWJslQz7O46PS+oB3h6X2BrjlfGW

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 744 set thread context of 2512	744	4287bc37cab3fd8c199e4e62383a5178.exe	29

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1440	2512	WerFault.exe	29

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 744 wrote to memory of 2512	744	4287bc37cab3fd8c199e4e62383a5178.exe	29
PID 744 wrote to memory of 2512	744	4287bc37cab3fd8c199e4e62383a5178.exe	29
PID 744 wrote to memory of 2512	744	4287bc37cab3fd8c199e4e62383a5178.exe	29
PID 744 wrote to memory of 2512	744	4287bc37cab3fd8c199e4e62383a5178.exe	29
PID 744 wrote to memory of 2512	744	4287bc37cab3fd8c199e4e62383a5178.exe	29
PID 744 wrote to memory of 2512	744	4287bc37cab3fd8c199e4e62383a5178.exe	29
PID 744 wrote to memory of 2512	744	4287bc37cab3fd8c199e4e62383a5178.exe	29
PID 744 wrote to memory of 2512	744	4287bc37cab3fd8c199e4e62383a5178.exe	29
PID 744 wrote to memory of 2512	744	4287bc37cab3fd8c199e4e62383a5178.exe	29
PID 2512 wrote to memory of 1440	2512	4287bc37cab3fd8c199e4e62383a5178.exe	30
PID 2512 wrote to memory of 1440	2512	4287bc37cab3fd8c199e4e62383a5178.exe	30
PID 2512 wrote to memory of 1440	2512	4287bc37cab3fd8c199e4e62383a5178.exe	30
PID 2512 wrote to memory of 1440	2512	4287bc37cab3fd8c199e4e62383a5178.exe	30

memory/2512-0-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2512-2-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2512-4-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2512-5-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2512-6-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2512-8-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2512-10-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2512-11-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download
memory/2512-12-0x0000000000400000-0x000000000041D000-memory.dmp

Filesize
116KB

Download