d132b4bf2c50fbeaf51ec81dd5d796d049ffddc8bea693131bcf45a85c763376

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08/03/2024, 12:35

Target

bb46206dda56783fd49894920bf0c711.dll
Size

44KB
MD5

bb46206dda56783fd49894920bf0c711
SHA1

f08144b9bc722fb31ab69abd16ae23c38f26073c
SHA256

d132b4bf2c50fbeaf51ec81dd5d796d049ffddc8bea693131bcf45a85c763376
SHA512

e57839c37483ca1914cf99197794115e456790a43ff8e35e6c89689deee9fb467fa8e0fc4749e3ef8e1717fc8fea8be395e93107fbaa3b66d5e2a84a4bc29f29
SSDEEP

768:Fa3YfFk2ZnO/F3NYRZkrGWNGqhe0aueMsLc6tAQ:U9CnO/F3NYRZddqnvO7

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2012	2216	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 2184 wrote to memory of 2216	2184	rundll32.exe	28
PID 2184 wrote to memory of 2216	2184	rundll32.exe	28
PID 2184 wrote to memory of 2216	2184	rundll32.exe	28
PID 2184 wrote to memory of 2216	2184	rundll32.exe	28
PID 2184 wrote to memory of 2216	2184	rundll32.exe	28
PID 2184 wrote to memory of 2216	2184	rundll32.exe	28
PID 2184 wrote to memory of 2216	2184	rundll32.exe	28
PID 2216 wrote to memory of 2012	2216	rundll32.exe	29
PID 2216 wrote to memory of 2012	2216	rundll32.exe	29
PID 2216 wrote to memory of 2012	2216	rundll32.exe	29
PID 2216 wrote to memory of 2012	2216	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bb46206dda56783fd49894920bf0c711.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2184
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\bb46206dda56783fd49894920bf0c711.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2216
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2216 -s 196
    3⤵
    - Program crash
    PID:2012