33d0e5e173f8b94023257786775091c96b949eb106e41f728d7077e54bc7aed9

Analysis

max time kernel
119s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/04/2024, 17:58

Target

Pizza Tower/Steamworks_x64.dll
Size

443KB
MD5

04121386d3c6e139c159450ba9ad3a8c
SHA1

96f989f63808cb6e61d4900d31ff5cfe873bd340
SHA256

3a348a05e245b232d7c90a7674402b374e924dc975bc3d267800fcbc5e70d18d
SHA512

8b2da2a5cbca60b518ac619154034265942899bdfbbf47641457bf68d0f63111eb782861bd5220df91b0e485921172ee71794ac95e4d2e4a3a5c29f10445146b
SSDEEP

6144:OmZuQ9/zeq6Y93Y1EvyBgqn+YePRUz357/69el7vs0ohMcX9TRA0PwKW:OuNY1EvyBP+YERUbV68j3oOcX9n

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2912 wrote to memory of 2308	2912	rundll32.exe	28
PID 2912 wrote to memory of 2308	2912	rundll32.exe	28
PID 2912 wrote to memory of 2308	2912	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Pizza Tower\Steamworks_x64.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:2912
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2912 -s 196
  2⤵
  PID:2308