Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6401	Aug. 4, 2021, 9:31 a.m.	Aug. 4, 2021, 9:55 a.m.

Size	56.0KB
Type	PE32 executable (console) Intel 80386, for MS Windows
MD5	`4003498f5c38cf05a71125d4e8745791`
SHA256	`ad5711a5bdcd7c6334389a2ed722e16e774d8f55737e85f57c71ec3e1767c63b`
CRC32	`7F73651B`
ssdeep	`768:zQR+JJlY3yGJxNojkTnJI6TWzzejkZy/xbD9BxufhqXKCl3G9:nAoITdT0Zy5bZXYml3G9`
Yara	PE_Header_Zero - PE File Signature UPX_Zero - UPX packed file IsPE32 - (no description) Malicious_Library_Zero - Malicious_Library

32576e926d5ca198c9979adda70c821e.exe "C:\Users\test22\AppData\Local\Temp\32576e926d5ca198c9979adda70c821e.exe"
2648
- 32576e926d5ca198c9979adda70c821e.exe "C:\Users\test22\AppData\Local\Temp\32576e926d5ca198c9979adda70c821e.exe" -a
  2252

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
164.124.101.2	Active	Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available (1 event)

Time & API	Arguments	Status	Return	Repeated
GlobalMemoryStatusEx Aug. 4, 2021, 9:31 a.m.		1	1	0

The executable uses a known packer (1 event)

packer

Armadillo v1.71

One or more processes crashed (50 out of 65536 events)

Time & API	Arguments	Status
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638400 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637544 registers.ecx: 15	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 32576e926d5ca198c9979adda70c821e+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1

Tries to unhook Windows functions monitored by Cuckoo (1 event)

Time & API	Arguments	Status	Return	Repeated
__anomaly__ Aug. 4, 2021, 9:31 a.m.	tid: 2236 message: Encountered 65537 exceptions, quitting. subcategory: exception function_name:	1	0	0

File has been identified by 27 AntiVirus engines on VirusTotal as malicious (27 events)

Lionic	Trojan.Win32.Zusy.4!c
MicroWorld-eScan	Gen:Variant.Zusy.396323
FireEye	Gen:Variant.Zusy.396323
ALYac	Gen:Variant.Zusy.396323
Alibaba	TrojanDownloader:Win32/DropperX.1e209f8e
Arcabit	Trojan.Zusy.D60C23
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.FTP
Paloalto	generic.ml
BitDefender	Gen:Variant.Zusy.396323
Avast	Win32:DropperX-gen [Drp]
Ad-Aware	Gen:Variant.Zusy.396323
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Zusy.396323 (B)
Avira	TR/Dldr.Agent.sougy
MAX	malware (ai score=87)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Zusy.396323
Cynet	Malicious (score: 99)
AhnLab-V3	Dropper/Win.Generic.C4577737
McAfee	RDN/Generic Downloader.x
VBA32	BScope.Trojan.Wacatac
TrendMicro-HouseCall	TROJ_GEN.R002H09H321
Ikarus	Win32.Outbreak
Fortinet	W32/Agent.FTP!tr
AVG	Win32:DropperX-gen [Drp]
Qihoo-360	Win32/Trojan.Generic.HgIASZkA

32576e926d5ca198c9979adda70c821e.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All