Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6402	Aug. 17, 2021, 5:32 p.m.	Aug. 17, 2021, 5:57 p.m.

Size	90.5KB
Type	PE32 executable (console) Intel 80386, for MS Windows
MD5	`445dfcd1f7f35099093f7320d467c76d`
SHA256	`c4238705bebeb7b5a347ddb5d858a2f9748166cf633b949619dbd69802839db0`
CRC32	`CB23A2FC`
ssdeep	`1536:8WvNrof2xIZ2ToPCt6VkPRYLUbrjhd3d7t20WYwuIJLO+s8jcdi1vzGHY:8WufhgTeCt0uREWrdhdY0W5uIVO7AvKH`
Yara	PE_Header_Zero - PE File Signature OS_Processor_Check_Zero - OS Processor Check UPX_Zero - UPX packed file Malicious_Library_Zero - Malicious_Library IsPE32 - (no description)

03da82f27a042bb21948e80c78809783.exe "C:\Users\test22\AppData\Local\Temp\03da82f27a042bb21948e80c78809783.exe"
2024
- 03da82f27a042bb21948e80c78809783.exe "C:\Users\test22\AppData\Local\Temp\03da82f27a042bb21948e80c78809783.exe" -q
  2752

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
164.124.101.2	Active	Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available (1 event)

Time & API	Arguments	Status	Return	Repeated
GlobalMemoryStatusEx Aug. 17, 2021, 5:32 p.m.		1	1	0

The executable contains unknown PE section names indicative of a packer (could be a false positive) (1 event)

section

.gfids

One or more processes crashed (50 out of 65536 events)

Time & API	Arguments	Status
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x251c @ 0x87251c 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 10 registers.esi: 4258916 registers.ecx: 2	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x252b @ 0x87252b 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 24 registers.esi: 4258700 registers.ecx: 6	1
__exception__ Aug. 17, 2021, 5:32 p.m.	stacktrace: 03da82f27a042bb21948e80c78809783+0x250a @ 0x87250a 0x710073 exception.instruction_r: f3 a5 8b cb 83 e1 03 f3 a4 89 55 fc e8 56 93 fd exception.symbol: lstrcatW+0x40 CopyFileW-0x3f kernel32+0x382ce exception.instruction: movsd dword ptr es:[edi], dword ptr [esi] exception.module: kernel32.dll exception.exception_code: 0xc0000005 exception.offset: 230094 exception.address: 0x76a682ce registers.esp: 4258640 registers.edi: 4259838 registers.eax: 4258928 registers.ebp: 4258680 registers.edx: 4294967294 registers.ebx: 66 registers.esi: 4258752 registers.ecx: 16	1

Tries to unhook Windows functions monitored by Cuckoo (1 event)

Time & API	Arguments	Status	Return	Repeated
__anomaly__ Aug. 17, 2021, 5:32 p.m.	tid: 1260 message: Encountered 65537 exceptions, quitting. subcategory: exception function_name:	1	0	0

File has been identified by 20 AntiVirus engines on VirusTotal as malicious (20 events)

Lionic	Trojan.Win32.Sdum.4!c
MicroWorld-eScan	Trojan.GenericKD.37409201
FireEye	Trojan.GenericKD.37409201
McAfee	GenericRXAA-AA!445DFCD1F7F3
Cylance	Unsafe
APEX	Malicious
Kaspersky	VHO:Trojan.Win32.Sdum.gen
BitDefender	Trojan.GenericKD.37409201
Ad-Aware	Trojan.GenericKD.37409201
Sophos	Mal/Generic-S
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Trojan.GenericKD.37409201 (B)
Ikarus	Trojan.Win32.Clipbanker
eGambit	Unsafe.AI_Score_72%
MAX	malware (ai score=85)
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Trojan.GenericKD.37409201
VBA32	BScope.Trojan.Downloader
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat

03da82f27a042bb21948e80c78809783.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All