40a90ddd4f4491ee74b28bdea5524fc01a484ab827954f2d2f1cb25461610573

Analysis

max time kernel
119s
max time network
122s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11-05-2024 17:47

Target

Super Hexagon/Super Hexagon/steam_api.dll
Size

103KB
MD5

e5578450156d19260fc06e2a72856595
SHA1

c15657dec995085ec83430c03367ab36f3af67a8
SHA256

b55054a9d9287c704b8e0ad3acfef1ea5c3fa6982b20b7e36466dc76a6ad8925
SHA512

70e16dd0978c9275d7ace9a608c67cab688b6ab35bb50c22c4c68427bfdfc0b760fd82ef084d185ecf65de271d29a83a48afebafd814aea4d01bd347ecc4a127
SSDEEP

1536:iNta1rZyGnqjdnFIrD4s1hRdjlRUWYG0HeT3W8zyXmnYyOIVoOu3a/kzQSC6F:iXaBUNnFo1hRjRxYWHwX1N3a8NF

Score

1^/10

Suspicious use of WriteProcessMemory 3 IoCs

Processes:

rundll32.exe

description	pid	Process	procid_target
PID 752 wrote to memory of 2368	752	rundll32.exe	84
PID 752 wrote to memory of 2368	752	rundll32.exe	84
PID 752 wrote to memory of 2368	752	rundll32.exe	84

C:\Windows\system32\rundll32.exe
rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Super Hexagon\Super Hexagon\steam_api.dll",#1
1⤵
- Suspicious use of WriteProcessMemory
PID:752
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe "C:\Users\Admin\AppData\Local\Temp\Super Hexagon\Super Hexagon\steam_api.dll",#1
  2⤵
  PID:2368