9fb9ee846cefd63f787e188863178aae02e63ba23ca95dc6c37283c23799cd43

Analysis

max time kernel
120s
max time network
133s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11-01-2024 15:57

Target

53f37a37047fc295202d7d71732d62ff.exe
Size

2.2MB
MD5

53f37a37047fc295202d7d71732d62ff
SHA1

be04522932cfe0002b5e9e19bffa7a4f4a76ed18
SHA256

9fb9ee846cefd63f787e188863178aae02e63ba23ca95dc6c37283c23799cd43
SHA512

2951bd81691df2b3e5c07d05676b4c119042b5033c473d720c03f5bf43c84dbcaee24d3c99916bf2cf21593e3ee6ccfc85be9939170c3513fa7a53f806713e2e
SSDEEP

49152:gpiLWz6b3xs2Be94W/+hm1vrbO16m0pQ/Ec6bGXSn+qqGUbNb:gAW03xs2Be94xhm1W16m0pjc6bGCn+q6

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1736	2504	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2504 wrote to memory of 1736	2504	53f37a37047fc295202d7d71732d62ff.exe	28
PID 2504 wrote to memory of 1736	2504	53f37a37047fc295202d7d71732d62ff.exe	28
PID 2504 wrote to memory of 1736	2504	53f37a37047fc295202d7d71732d62ff.exe	28
PID 2504 wrote to memory of 1736	2504	53f37a37047fc295202d7d71732d62ff.exe	28

C:\Users\Admin\AppData\Local\Temp\53f37a37047fc295202d7d71732d62ff.exe
"C:\Users\Admin\AppData\Local\Temp\53f37a37047fc295202d7d71732d62ff.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2504
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2504 -s 232
  2⤵
  - Program crash
  PID:1736

memory/2504-0-0x00000000012D0000-0x000000000150F000-memory.dmp

Filesize
2.2MB

Download