b4fba8a4ffa218678ca7cf1f75af4bcb2b6d2ee1880bd9a03e4c51c9030f2e49

Resubmissions

20/04/2024, 19:13

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
20/04/2024, 19:13

Target

LauncherModMenu v1.12.exe
Size

489KB
MD5

f42bf6d96690525c1736bb2d82e239ce
SHA1

ef66dcc2595d03b717fd664d8dda8a8352142fca
SHA256

b4fba8a4ffa218678ca7cf1f75af4bcb2b6d2ee1880bd9a03e4c51c9030f2e49
SHA512

146961a4d0e319a7606c121fc208722cd9f532b6db9a54443ecb65f46d7c42430f628450d6a0c3b2510308c9b0c8e9d7ed430b0d36a7fe5be24a8690b2b768e7
SSDEEP

12288:SU/qlWEJNgZ3Kcj0PP8oQkbdGy17kDGixc6hsWF76kpjoCe:nqlXJNYacgn/lbdGy0DuqYecR

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2912	1964	WerFault.exe	27

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 1964 wrote to memory of 2912	1964	LauncherModMenu v1.12.exe	29
PID 1964 wrote to memory of 2912	1964	LauncherModMenu v1.12.exe	29
PID 1964 wrote to memory of 2912	1964	LauncherModMenu v1.12.exe	29
PID 1964 wrote to memory of 2912	1964	LauncherModMenu v1.12.exe	29
PID 1964 wrote to memory of 2912	1964	LauncherModMenu v1.12.exe	29
PID 1964 wrote to memory of 2912	1964	LauncherModMenu v1.12.exe	29
PID 1964 wrote to memory of 2912	1964	LauncherModMenu v1.12.exe	29

C:\Users\Admin\AppData\Local\Temp\LauncherModMenu v1.12.exe
"C:\Users\Admin\AppData\Local\Temp\LauncherModMenu v1.12.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1964
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 1964 -s 200
  2⤵
  - Program crash
  PID:2912

memory/1964-0-0x0000000000A80000-0x0000000000AFE000-memory.dmp

Filesize
504KB

Download