Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6402	Aug. 4, 2021, 9:31 a.m.	Aug. 4, 2021, 9:41 a.m.

Size	56.0KB
Type	PE32 executable (console) Intel 80386, for MS Windows
MD5	`bbd9c29060936aa812c2b8aefb14258c`
SHA256	`469e5cd00ef10c7cdc37c647e0beca77e233ed11a5f34df087277a7ff3584a72`
CRC32	`13C37BD8`
ssdeep	`768:PQR+JJlY3yGJxNojkTnJI6TWzzejkZy/xbD9BxufhqXKCljb9:TAoITdT0Zy5bZXYmljb9`
Yara	PE_Header_Zero - PE File Signature UPX_Zero - UPX packed file IsPE32 - (no description) Malicious_Library_Zero - Malicious_Library

896c8decb45706dd597b53329732c305.exe "C:\Users\test22\AppData\Local\Temp\896c8decb45706dd597b53329732c305.exe"
1588
- 896c8decb45706dd597b53329732c305.exe "C:\Users\test22\AppData\Local\Temp\896c8decb45706dd597b53329732c305.exe" -a
  2180

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
158.101.44.242	Active	Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available (1 event)

Time & API	Arguments	Status	Return	Repeated
GlobalMemoryStatusEx Aug. 4, 2021, 9:31 a.m.		1	1	0

The executable uses a known packer (1 event)

packer

Armadillo v1.71

One or more processes crashed (50 out of 65536 events)

Time & API	Arguments	Status
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638400 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637544 registers.ecx: 15	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20d6 @ 0x4020d6 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20b8 @ 0x4020b8 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: 896c8decb45706dd597b53329732c305+0x20c7 @ 0x4020c7 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x750982ce registers.esp: 1637436 registers.edi: 1638406 registers.eax: 1637696 registers.ebp: 1637476 registers.edx: 4294967294 registers.ebx: 6 registers.esi: 1637508 registers.ecx: 1	1

Communicates with host for which no DNS query was performed (1 event)

host

158.101.44.242

File has been identified by 15 AntiVirus engines on VirusTotal as malicious (15 events)

MicroWorld-eScan	Gen:Variant.Jaik.47122
FireEye	Gen:Variant.Jaik.47122
McAfee	Artemis!BBD9C2906093
Arcabit	Trojan.Jaik.DB812
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Jaik.47122
Ad-Aware	Gen:Variant.Jaik.47122
McAfee-GW-Edition	Artemis
Emsisoft	Gen:Variant.Jaik.47122 (B)
Microsoft	Trojan:Win32/Wacatac.B!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Jaik.47122
VBA32	BScope.Trojan.Wacatac
ALYac	Gen:Variant.Jaik.47122
MAX	malware (ai score=89)

Tries to unhook Windows functions monitored by Cuckoo (1 event)

Time & API	Arguments	Status	Return	Repeated
__anomaly__ Aug. 4, 2021, 9:32 a.m.	tid: 2184 message: Encountered 65537 exceptions, quitting. subcategory: exception function_name:	1	0	0

896c8decb45706dd597b53329732c305.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All