293611ae6bdb0517260724485a9d669c9040dc69b2c1f282b5fefd174edfb4e7

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
22/07/2024, 15:35

Target

Installer/Installer.exe
Size

351KB
MD5

c083c3af46c7e1c955b4e7b4df33636b
SHA1

e1d3169769e419284fcde1f3721f04e522c174da
SHA256

f1f8a75979ba412b0818330b2b6aa4ce8fce42199c2df35d2829c5b358882105
SHA512

1b26c4771ce6cce5373217dee5105dd93138a541d6985ccfbfc3801f206b2f7ce23bdb4ab781e86254dc690da759c38730d5822f1347f97189bb47eea62ebf28
SSDEEP

6144:fYvW5bKTSlM4VUgJZOXT7HN5eOqKF0KdIhil40X5ReuOzOsomRmLjwW:fUTSvVUgJKPyOqKWKdIhiNZ6OsommLU

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 592 set thread context of 2524	592	Installer.exe	30

Program crash 1 IoCs

pid	pid_target	Process	procid_target
2684	2524	WerFault.exe	30

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 592 wrote to memory of 2524	592	Installer.exe	30
PID 592 wrote to memory of 2524	592	Installer.exe	30
PID 592 wrote to memory of 2524	592	Installer.exe	30
PID 592 wrote to memory of 2524	592	Installer.exe	30
PID 592 wrote to memory of 2524	592	Installer.exe	30
PID 592 wrote to memory of 2524	592	Installer.exe	30
PID 592 wrote to memory of 2524	592	Installer.exe	30
PID 592 wrote to memory of 2524	592	Installer.exe	30
PID 592 wrote to memory of 2524	592	Installer.exe	30
PID 592 wrote to memory of 2524	592	Installer.exe	30
PID 592 wrote to memory of 2524	592	Installer.exe	30
PID 592 wrote to memory of 2524	592	Installer.exe	30
PID 592 wrote to memory of 2524	592	Installer.exe	30
PID 2524 wrote to memory of 2684	2524	RegAsm.exe	31
PID 2524 wrote to memory of 2684	2524	RegAsm.exe	31
PID 2524 wrote to memory of 2684	2524	RegAsm.exe	31
PID 2524 wrote to memory of 2684	2524	RegAsm.exe	31

memory/592-0-0x000000007469E000-0x000000007469F000-memory.dmp

Filesize
4KB

Download
memory/592-1-0x0000000000120000-0x000000000017E000-memory.dmp

Filesize
376KB

Download
memory/592-15-0x0000000074690000-0x0000000074D7E000-memory.dmp

Filesize
6.9MB

Download
memory/592-12-0x0000000002290000-0x0000000004290000-memory.dmp

Filesize
32.0MB

Download
memory/2524-9-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

Filesize
4KB

Download
memory/2524-11-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2524-14-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2524-8-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2524-6-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2524-5-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2524-16-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2524-7-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download
memory/2524-4-0x0000000000400000-0x000000000044A000-memory.dmp

Filesize
296KB

Download