9669d01ac7c432a79c329f4bec5df37c070ad65ccb5007987109411412b58afd

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
31-05-2024 11:21

Target

TRANSCEND-SM32X-PV1.2.44-BY-USBDEV-Q1022/UFD_3269AA/DLLLIB/PretestIF_N0626V1.dll
Size

1.6MB
MD5

97a93e73723709f30d5258b15c3a4819
SHA1

8dce2d84881fa6c1508e2fff45866ec9b94b83e1
SHA256

09e3e5e2f73015718cd80f7000cec5dc066e6597453d464e6b22e44e8292dc2d
SHA512

a1ffa3cca927969083ff340b5367d1153a4f82390ea93716b2be948f85b0800e221ab9fff777c94cbd2152fb99498df0423029f91623a62ce8c6996f5038f898
SSDEEP

12288:KvzPbnD51ibqnoYxPDXJsurZnmsLdsuLNBjCNAp4zj9PuhLzv2AyNG95noDmBise:21EML3WNj9W6G92Dmyd/GWj3Vp

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2752	2236	WerFault.exe	28

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1844 wrote to memory of 2236	1844	rundll32.exe	28
PID 1844 wrote to memory of 2236	1844	rundll32.exe	28
PID 1844 wrote to memory of 2236	1844	rundll32.exe	28
PID 1844 wrote to memory of 2236	1844	rundll32.exe	28
PID 1844 wrote to memory of 2236	1844	rundll32.exe	28
PID 1844 wrote to memory of 2236	1844	rundll32.exe	28
PID 1844 wrote to memory of 2236	1844	rundll32.exe	28
PID 2236 wrote to memory of 2752	2236	rundll32.exe	29
PID 2236 wrote to memory of 2752	2236	rundll32.exe	29
PID 2236 wrote to memory of 2752	2236	rundll32.exe	29
PID 2236 wrote to memory of 2752	2236	rundll32.exe	29

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\TRANSCEND-SM32X-PV1.2.44-BY-USBDEV-Q1022\UFD_3269AA\DLLLIB\PretestIF_N0626V1.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1844
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\TRANSCEND-SM32X-PV1.2.44-BY-USBDEV-Q1022\UFD_3269AA\DLLLIB\PretestIF_N0626V1.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2236
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2236 -s 244
    3⤵
    - Program crash
    PID:2752