40a90ddd4f4491ee74b28bdea5524fc01a484ab827954f2d2f1cb25461610573

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
11-05-2024 17:47

Target

Super Hexagon/Super Hexagon/goggame.dll
Size

199KB
MD5

7f3014ac2a2c75f7bc69bbd1a5f39161
SHA1

7d74d0917546796ab8828c53e9c3ffb80551f90d
SHA256

513e05ad7b3b5df140c2c4d4ff9098c83f516bb8c27ed9f89b3befc9f854ad87
SHA512

467068d342e48c31aa1fe49916e9a6696001d6faf088ba2f1fcfb41189e24048806f94823bca6e22a45c7f5d4c66000a475b777bc385c8aeb3a7522030b5bf69
SSDEEP

3072:bx3avFRGzrsLPs9JaKI00vZzD+5qJ+cOmnb9mkXdUAn9gZ8FFKJsFFFF8FFFF0Ta:bxdrsLUEDKWnZhXdWS2

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	Process	procid_target
PID 816 wrote to memory of 3980	816	rundll32.exe	82
PID 816 wrote to memory of 3980	816	rundll32.exe	82
PID 816 wrote to memory of 3980	816	rundll32.exe	82

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Super Hexagon\Super Hexagon\goggame.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:816
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Super Hexagon\Super Hexagon\goggame.dll",#1
  2⤵
  PID:3980