f9959ff3df780feb93abd6e4edc9fddb0976adf5120dd353455c391583bfd261

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11-05-2024 03:15

Target

PIC0502502016-JPEG.exe
Size

164KB
MD5

59ba34ea33c58125c0526bb2632ac424
SHA1

7e95f34f12771125764b21675f614cb9cc770d13
SHA256

952bf30d5b8964b441f3c70a3f41f8db5569c8285baa07d903bac94d580eae7e
SHA512

724a2282adccc42a029d7e97167273815904a95484a0d62e19a1041c606dcce094dfee5f77dcb034b1c1334d3297a9fc725a3d363365c512764083541269bf83
SSDEEP

3072:4vf0KfRASu/rLef4BO8a6Or8gmb57Bv/dXS0/j:4tfSSua4BO3608nb57Bv/lSyj

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 4896 set thread context of 3500	4896	PIC0502502016-JPEG.exe	87

Program crash 1 IoCs

pid	pid_target	Process	procid_target
4284	3500	WerFault.exe	87

Suspicious use of WriteProcessMemory 9 IoCs

description	pid	Process	procid_target
PID 4896 wrote to memory of 3500	4896	PIC0502502016-JPEG.exe	87
PID 4896 wrote to memory of 3500	4896	PIC0502502016-JPEG.exe	87
PID 4896 wrote to memory of 3500	4896	PIC0502502016-JPEG.exe	87
PID 4896 wrote to memory of 3500	4896	PIC0502502016-JPEG.exe	87
PID 4896 wrote to memory of 3500	4896	PIC0502502016-JPEG.exe	87
PID 4896 wrote to memory of 3500	4896	PIC0502502016-JPEG.exe	87
PID 4896 wrote to memory of 3500	4896	PIC0502502016-JPEG.exe	87
PID 4896 wrote to memory of 3500	4896	PIC0502502016-JPEG.exe	87
PID 4896 wrote to memory of 3500	4896	PIC0502502016-JPEG.exe	87

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3500 -ip 3500
1⤵
PID:2348

memory/3500-5-0x0000000000520000-0x000000000052C000-memory.dmp

Filesize
48KB

Download
memory/3500-8-0x0000000000520000-0x000000000052C000-memory.dmp

Filesize
48KB

Download
memory/3500-7-0x0000000000520000-0x000000000052C000-memory.dmp

Filesize
48KB

Download
memory/3500-6-0x0000000000520000-0x000000000052C000-memory.dmp

Filesize
48KB

Download
memory/3500-10-0x0000000000520000-0x000000000052C000-memory.dmp

Filesize
48KB

Download
memory/3500-13-0x0000000000520000-0x000000000052C000-memory.dmp

Filesize
48KB

Download
memory/4896-0-0x00000000751B2000-0x00000000751B3000-memory.dmp

Filesize
4KB

Download
memory/4896-1-0x00000000751B0000-0x0000000075761000-memory.dmp

Filesize
5.7MB

Download
memory/4896-2-0x00000000751B0000-0x0000000075761000-memory.dmp

Filesize
5.7MB

Download
memory/4896-15-0x00000000751B0000-0x0000000075761000-memory.dmp

Filesize
5.7MB

Download
memory/4896-16-0x00000000751B0000-0x0000000075761000-memory.dmp

Filesize
5.7MB

Download