33efaec5e7bf92ea8d9e82abe7ece9f01b183a0876082623b2b3bb54787a1666

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13-01-2024 14:49

Target

58fca46d0f6a57d4772bb5cf39b253cb.exe
Size

9KB
MD5

58fca46d0f6a57d4772bb5cf39b253cb
SHA1

1a39d19b10f868310622a9606b3c0472e3ad8fa0
SHA256

33efaec5e7bf92ea8d9e82abe7ece9f01b183a0876082623b2b3bb54787a1666
SHA512

57374bdf67efcb42321cc3fe99c37f061f94d9332fdc2605cc0a9b1c0cf2dbdc741ecebcb76c3cd0556ea9dab4f395a7a4cab21cda484456adf0f087f67ceb9a
SSDEEP

192:aN39memAmim6NmeCL/rGOuvzHog5a9+AzeC3Em1fKyzy9FRwTDFw8:aN39memAmim6NmeCLjGOuvzIg5aAAZRL

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2788	2544	WerFault.exe	27

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2544 wrote to memory of 2788	2544	58fca46d0f6a57d4772bb5cf39b253cb.exe	28
PID 2544 wrote to memory of 2788	2544	58fca46d0f6a57d4772bb5cf39b253cb.exe	28
PID 2544 wrote to memory of 2788	2544	58fca46d0f6a57d4772bb5cf39b253cb.exe	28
PID 2544 wrote to memory of 2788	2544	58fca46d0f6a57d4772bb5cf39b253cb.exe	28

C:\Users\Admin\AppData\Local\Temp\58fca46d0f6a57d4772bb5cf39b253cb.exe
"C:\Users\Admin\AppData\Local\Temp\58fca46d0f6a57d4772bb5cf39b253cb.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2544
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 2544 -s 36
  2⤵
  - Program crash
  PID:2788