Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6401	Aug. 4, 2021, 9:31 a.m.	Aug. 4, 2021, 10 a.m.

Size	56.0KB
Type	PE32 executable (console) Intel 80386, for MS Windows
MD5	`a92922a71a9bf58cc2d95a6039c9a1b6`
SHA256	`213ea943865069cf1210a58860c619a8fa8928258abe8919fee8180feafea547`
CRC32	`FA6427C6`
ssdeep	`768:URFJRVA3O2pxNojkTnJQ6XWzQjkpC/xbjNxxuCqXKClZt9:MMoITVXGpC5bpHPmlZt9`
Yara	PE_Header_Zero - PE File Signature UPX_Zero - UPX packed file IsPE32 - (no description) Malicious_Library_Zero - Malicious_Library

a24a7a925420fc48542f870656109fb0.exe "C:\Users\test22\AppData\Local\Temp\a24a7a925420fc48542f870656109fb0.exe"
540
- a24a7a925420fc48542f870656109fb0.exe "C:\Users\test22\AppData\Local\Temp\a24a7a925420fc48542f870656109fb0.exe" -a
  3016

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
164.124.101.2	Active	Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available (1 event)

Time & API	Arguments	Status	Return	Repeated
GlobalMemoryStatusEx Aug. 4, 2021, 9:31 a.m.		1	1	0

The executable uses a known packer (1 event)

packer

Armadillo v1.71

One or more processes crashed (50 out of 65536 events)

Time & API	Arguments	Status
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637508 registers.ecx: 1	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20c2 @ 0x4020c2 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 1637540 registers.ecx: 16	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20d1 @ 0x4020d1 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 1637504 registers.ecx: 2	1
__exception__ Aug. 4, 2021, 9:31 a.m.	stacktrace: a24a7a925420fc48542f870656109fb0+0x20e0 @ 0x4020e0 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x757582ce registers.esp: 1637432 registers.edi: 1638398 registers.eax: 1637696 registers.ebp: 1637472 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637516 registers.ecx: 6	1

Tries to unhook Windows functions monitored by Cuckoo (1 event)

Time & API	Arguments	Status	Return	Repeated
__anomaly__ Aug. 4, 2021, 9:32 a.m.	tid: 2056 message: Encountered 65537 exceptions, quitting. subcategory: exception function_name:	1	0	0

File has been identified by 31 AntiVirus engines on VirusTotal as malicious (31 events)

Lionic	Trojan.Win32.Jaik.4!c
MicroWorld-eScan	Gen:Variant.Zusy.396323
FireEye	Gen:Variant.Zusy.396323
McAfee	RDN/Wacatac
Alibaba	TrojanDownloader:Win32/DropperX.2abc5cbc
K7GW	Trojan-Downloader ( 0057feab1 )
Symantec	Trojan.Gen.2
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.FTP
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Zusy.396323
Avast	Win32:DropperX-gen [Drp]
Ad-Aware	Gen:Variant.Zusy.396323
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Gen:Variant.Zusy.396323 (B)
Webroot	W32.Trojan.Gen
Avira	TR/Dldr.Agent.xxmmf
MAX	malware (ai score=85)
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Gridinsoft	Trojan.Win32.Agent.oa
Microsoft	Trojan:Win32/Sabsik.FL.A!ml
GData	Gen:Variant.Zusy.396323
Cynet	Malicious (score: 99)
AhnLab-V3	Dropper/Win.Generic.C4577737
ALYac	Gen:Variant.Jaik.47122
VBA32	BScope.Trojan.Wacatac
TrendMicro-HouseCall	TROJ_GEN.R002H09H221
Ikarus	Trojan-Downloader.Win32.Agent
Fortinet	W32/Agent.FTP!tr.dldr
AVG	Win32:DropperX-gen [Drp]
Qihoo-360	Win32/Trojan.Generic.HgIASZkA

a24a7a925420fc48542f870656109fb0.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All