c5f12df3ea1a353211d78d2fee55c7efdf9ff6ada6ec21ffb513661734072543

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/01/2024, 14:00

Target

PO SENDFAFE600.exe
Size

1.0MB
MD5

ecbfd514f4c2e49d00cfc028f79b8de9
SHA1

c6fad2f3781b734690d9fb7cc3e44c5ae6ce16dd
SHA256

c5f12df3ea1a353211d78d2fee55c7efdf9ff6ada6ec21ffb513661734072543
SHA512

07a18904309f1b9ab99d3bb96386836739e00b851649ffa2ac7a66b8ecd10bfe9571980a080fdac7234f86bdcba34216905b1ca45cdb3a1dbe9cb9c261aeab49
SSDEEP

12288:vETzHr7FLOYmpEzAZ3wSCB93O7P+qnAivnyo9rMS9NaWoH8J5s1pkvgV:KNL2+zAaO7P7nAEyo+S9UVHmuog

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1712 set thread context of 2824	1712	PO SENDFAFE600.exe	28

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2728	2824	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1712 wrote to memory of 2824	1712	PO SENDFAFE600.exe	28
PID 1712 wrote to memory of 2824	1712	PO SENDFAFE600.exe	28
PID 1712 wrote to memory of 2824	1712	PO SENDFAFE600.exe	28
PID 1712 wrote to memory of 2824	1712	PO SENDFAFE600.exe	28
PID 1712 wrote to memory of 2824	1712	PO SENDFAFE600.exe	28
PID 1712 wrote to memory of 2824	1712	PO SENDFAFE600.exe	28
PID 1712 wrote to memory of 2824	1712	PO SENDFAFE600.exe	28
PID 2824 wrote to memory of 2728	2824	PO SENDFAFE600.exe	29
PID 2824 wrote to memory of 2728	2824	PO SENDFAFE600.exe	29
PID 2824 wrote to memory of 2728	2824	PO SENDFAFE600.exe	29
PID 2824 wrote to memory of 2728	2824	PO SENDFAFE600.exe	29

memory/1712-6-0x0000000074E90000-0x000000007557E000-memory.dmp

Filesize
6.9MB

Download
memory/1712-1-0x0000000074E90000-0x000000007557E000-memory.dmp

Filesize
6.9MB

Download
memory/1712-2-0x0000000004E60000-0x0000000004EA0000-memory.dmp

Filesize
256KB

Download
memory/1712-3-0x0000000000410000-0x0000000000422000-memory.dmp

Filesize
72KB

Download
memory/1712-4-0x00000000004B0000-0x00000000004BE000-memory.dmp

Filesize
56KB

Download
memory/1712-5-0x0000000005240000-0x00000000052BE000-memory.dmp

Filesize
504KB

Download
memory/1712-0-0x0000000000AE0000-0x0000000000BF0000-memory.dmp

Filesize
1.1MB

Download
memory/1712-7-0x0000000004E60000-0x0000000004EA0000-memory.dmp

Filesize
256KB

Download
memory/1712-14-0x0000000074E90000-0x000000007557E000-memory.dmp

Filesize
6.9MB

Download
memory/2824-8-0x0000000000400000-0x000000000043F000-memory.dmp

Filesize
252KB

Download
memory/2824-11-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2824-10-0x0000000000400000-0x000000000043F000-memory.dmp

Filesize
252KB

Download
memory/2824-13-0x0000000000400000-0x000000000043F000-memory.dmp

Filesize
252KB

Download