b9af457abc6a1ba8abf2b857847578b888964dfa671599985fe7649695a6cb60

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20240319-en
resource tags

arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
submitted
26/03/2024, 04:38 UTC

Target

e5693e87e9b7e438f4246f80f13d0f5e.exe
Size

3.9MB
MD5

e5693e87e9b7e438f4246f80f13d0f5e
SHA1

bfa226389fbeed4172d6c06dd9e5865c085945f0
SHA256

b9af457abc6a1ba8abf2b857847578b888964dfa671599985fe7649695a6cb60
SHA512

7cb5765cf7c60b9ab4ec96f600572ace3f93ba98cb899a05ad8d0ee7c62cba6c97f7308be4a7ea70bdc72225b127e2b67ae7b52b1fd53f3c33bb999670ad50d0
SSDEEP

98304:WbzczBM9Czp5+Yq501qQQS4pJ+02Ww/GJcBYX8QbvxLptP6FbKEqT:Wb4zjzKY/F4pJ2KJcBYsmxL76FbKEqT

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 2296 set thread context of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2540	2744	WerFault.exe	29

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 2296 wrote to memory of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29
PID 2296 wrote to memory of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29
PID 2296 wrote to memory of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29
PID 2296 wrote to memory of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29
PID 2296 wrote to memory of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29
PID 2296 wrote to memory of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29
PID 2296 wrote to memory of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29
PID 2296 wrote to memory of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29
PID 2296 wrote to memory of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29
PID 2296 wrote to memory of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29
PID 2296 wrote to memory of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29
PID 2296 wrote to memory of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29
PID 2296 wrote to memory of 2744	2296	e5693e87e9b7e438f4246f80f13d0f5e.exe	29
PID 2744 wrote to memory of 2540	2744	RegAsm.exe	30
PID 2744 wrote to memory of 2540	2744	RegAsm.exe	30
PID 2744 wrote to memory of 2540	2744	RegAsm.exe	30
PID 2744 wrote to memory of 2540	2744	RegAsm.exe	30

memory/2296-0-0x0000000000970000-0x00000000009C6000-memory.dmp

Filesize
344KB

Download
memory/2296-1-0x00000000742C0000-0x00000000749AE000-memory.dmp

Filesize
6.9MB

Download
memory/2296-4-0x0000000002350000-0x0000000004350000-memory.dmp

Filesize
32.0MB

Download
memory/2296-16-0x00000000742C0000-0x00000000749AE000-memory.dmp

Filesize
6.9MB

Download
memory/2744-8-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2744-7-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2744-6-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2744-9-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2744-10-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2744-12-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2744-15-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2744-5-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2744-17-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download