Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6402	Aug. 12, 2021, 9:29 a.m.	Aug. 12, 2021, 9:47 a.m.

Size	56.0KB
Type	PE32 executable (console) Intel 80386, for MS Windows
MD5	`067c339dcdcb526383f64a591eca6d97`
SHA256	`6647ec66a0bc49efe7b873499aeb5feb9abe8c18e0ab078e40d6eb7f00654244`
CRC32	`5669D725`
ssdeep	`768:POI8YVeUvnXH9+msT0k7U96PgXUNmTU9NEeelt5:GfOeA+msT+6Rw4HKlt5`
Yara	UPX_Zero - UPX packed file Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE32 - (no description)

cd20abfd34fb6042d0c7450da9e61a77.exe "C:\Users\test22\AppData\Local\Temp\cd20abfd34fb6042d0c7450da9e61a77.exe"
2480
- cd20abfd34fb6042d0c7450da9e61a77.exe "C:\Users\test22\AppData\Local\Temp\cd20abfd34fb6042d0c7450da9e61a77.exe" -q
  2752

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available (1 event)

Time & API	Arguments	Status	Return	Repeated
GlobalMemoryStatusEx Aug. 12, 2021, 9:29 a.m.		1	1	0

The executable uses a known packer (1 event)

packer

Armadillo v1.71

One or more processes crashed (50 out of 65536 events)

Time & API	Arguments	Status
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637600 registers.ecx: 2	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1
__exception__ Aug. 12, 2021, 9:29 a.m.	stacktrace: cd20abfd34fb6042d0c7450da9e61a77+0x1f29 @ 0x401f29 0x3a0073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 1637412 registers.edi: 1638398 registers.eax: 1637680 registers.ebp: 1637452 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 1637584 registers.ecx: 6	1

Tries to unhook Windows functions monitored by Cuckoo (1 event)

Time & API	Arguments	Status	Return	Repeated
__anomaly__ Aug. 12, 2021, 9:30 a.m.	tid: 1260 message: Encountered 65537 exceptions, quitting. subcategory: exception function_name:	1	0	0

File has been identified by 39 AntiVirus engines on VirusTotal as malicious (39 events)

Lionic	Trojan.Win32.Midie.4!c
MicroWorld-eScan	Gen:Variant.Midie.95922
FireEye	Gen:Variant.Midie.95922
McAfee	RDN/Generic Downloader.x
Cylance	Unsafe
Sangfor	Trojan.Win32.Malgent.MSR
K7AntiVirus	Trojan-Downloader ( 005800a81 )
Alibaba	TrojanDownloader:Win32/DropperX.d3d16beb
K7GW	Trojan-Downloader ( 005800a81 )
Arcabit	Trojan.Midie.D176B2
Cyren	W32/Agent.DFR.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.FTP
APEX	Malicious
Paloalto	generic.ml
BitDefender	Gen:Variant.Midie.95922
Avast	Win32:DropperX-gen [Drp]
Ad-Aware	Gen:Variant.Midie.95922
Sophos	Mal/Generic-S
Comodo	Malware@#3r3edvcx6w8q0
DrWeb	Trojan.DownLoader41.8124
McAfee-GW-Edition	RDN/Generic Downloader.x
Emsisoft	Gen:Variant.Midie.95922 (B)
Avira	TR/Dldr.Agent.frogz
Gridinsoft	Trojan.Win32.Downloader.sa
Microsoft	Trojan:Win32/Malgent!MSR
GData	Gen:Variant.Midie.95922
Cynet	Malicious (score: 100)
AhnLab-V3	Dropper/Win.Generic.R436113
ALYac	Gen:Variant.Midie.95922
MAX	malware (ai score=84)
Malwarebytes	Trojan.Downloader
TrendMicro-HouseCall	TROJ_GEN.R002H09H521
Tencent	Win32.Trojan-downloader.Agent.Eym
Ikarus	Trojan-Downloader.Win32.Agent
Fortinet	W32/Agent.FTP!tr.dldr
AVG	Win32:DropperX-gen [Drp]
Panda	Trj/GdSda.A
Qihoo-360	Win32/Trojan.Generic.HgIASZwA

cd20abfd34fb6042d0c7450da9e61a77.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All