8257389d6264742d414404beaaaac869336c91f9f9af1e31ee081aa6e7857f3c

Resubmissions

19/01/2024, 19:16

19/01/2024, 14:16

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
19/01/2024, 14:16

Target

lib/gdk-pixbuf-2.0/2.10.0/loaders/libpixbufloader-jpeg.dll
Size

33KB
MD5

f929d877d58fab871b63c7af9d3254f7
SHA1

c03e537fc36a81e2c689936be58bb766919a7c52
SHA256

524660f33653282a829fb0eea32f7a88b329f2db057a37abaf017c0e43f092f7
SHA512

9c53bf27c6a7e440d29220b23e3190ac104e213f23f14257e65dc9782bf3e451dba9365769918020c1336684567a2f57d7add0e084a328d9f5335734d00b2220
SSDEEP

768:ybfE0S8ELsltjNzAVZ22JI19C6TzbSrB9Lv:iPGQNzAS2JI19fTSj

Score

1^/10

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 2344 wrote to memory of 1728	2344	rundll32.exe	17
PID 2344 wrote to memory of 1728	2344	rundll32.exe	17
PID 2344 wrote to memory of 1728	2344	rundll32.exe	17
PID 2344 wrote to memory of 1728	2344	rundll32.exe	17
PID 2344 wrote to memory of 1728	2344	rundll32.exe	17
PID 2344 wrote to memory of 1728	2344	rundll32.exe	17
PID 2344 wrote to memory of 1728	2344	rundll32.exe	17

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-jpeg.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2344
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\lib\gdk-pixbuf-2.0\2.10.0\loaders\libpixbufloader-jpeg.dll,#1
  2⤵
  PID:1728