58ace8404d8fbfca96c562f3415948073f713c799eb466627dbd9988cabd1c56

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-01-2024 23:59

Target

file.exe
Size

631KB
MD5

1850ff637de86020fe977b676b5c81ca
SHA1

3e4774068a1412a979644427ed505c9a1ae72f8e
SHA256

58ace8404d8fbfca96c562f3415948073f713c799eb466627dbd9988cabd1c56
SHA512

73597991c552f44cab018b57278a416a32ee42b886bfa9b6697bb6a6040093b2ec9980b20c58b28f57939e5a80fa7850862ea7f8f8c1d556d8d3fb814c5c4d0b
SSDEEP

12288:xSVqEbPdYx17gyJZEFy3a55a+xwdcq8N8NRyaPxJTTIrCoiycyN:xS4Eb1Yx17JmyK7jUcqrXLPxJ0Ckc4

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

Processes:

file.exe

description pid process target process

PID 2228 set thread context of 1428 2228 file.exe RegAsm.exe
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2732 1428 WerFault.exe RegAsm.exe

description	pid	process	target process
PID 2228 set thread context of 1428	2228	file.exe	RegAsm.exe

pid	pid_target	process	target process
2732	1428	WerFault.exe	RegAsm.exe

Suspicious use of WriteProcessMemory 17 IoCs

Processes:

file.exeRegAsm.exe

description	pid	process	target process
PID 2228 wrote to memory of 1428	2228	file.exe	RegAsm.exe
PID 2228 wrote to memory of 1428	2228	file.exe	RegAsm.exe
PID 2228 wrote to memory of 1428	2228	file.exe	RegAsm.exe
PID 2228 wrote to memory of 1428	2228	file.exe	RegAsm.exe
PID 2228 wrote to memory of 1428	2228	file.exe	RegAsm.exe
PID 2228 wrote to memory of 1428	2228	file.exe	RegAsm.exe
PID 2228 wrote to memory of 1428	2228	file.exe	RegAsm.exe
PID 2228 wrote to memory of 1428	2228	file.exe	RegAsm.exe
PID 2228 wrote to memory of 1428	2228	file.exe	RegAsm.exe
PID 2228 wrote to memory of 1428	2228	file.exe	RegAsm.exe
PID 2228 wrote to memory of 1428	2228	file.exe	RegAsm.exe
PID 2228 wrote to memory of 1428	2228	file.exe	RegAsm.exe
PID 2228 wrote to memory of 1428	2228	file.exe	RegAsm.exe
PID 1428 wrote to memory of 2732	1428	RegAsm.exe	WerFault.exe
PID 1428 wrote to memory of 2732	1428	RegAsm.exe	WerFault.exe
PID 1428 wrote to memory of 2732	1428	RegAsm.exe	WerFault.exe
PID 1428 wrote to memory of 2732	1428	RegAsm.exe	WerFault.exe

memory/1428-13-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/1428-10-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/1428-20-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/1428-5-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/1428-7-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/1428-9-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/1428-18-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/1428-12-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/1428-15-0x0000000000400000-0x000000000048B000-memory.dmp

Filesize
556KB

Download
memory/2228-0-0x00000000008E0000-0x0000000000982000-memory.dmp

Filesize
648KB

Download
memory/2228-11-0x0000000002210000-0x0000000004210000-memory.dmp

Filesize
32.0MB

Download
memory/2228-1-0x0000000073E10000-0x00000000744FE000-memory.dmp

Filesize
6.9MB

Download
memory/2228-19-0x0000000073E10000-0x00000000744FE000-memory.dmp

Filesize
6.9MB

Download
memory/2228-2-0x00000000042F0000-0x0000000004330000-memory.dmp

Filesize
256KB

Download