Summary | ZeroBOX

razzia.exe

PE64 PE File
Category Machine Started Completed
FILE s1_win7_x6403_us Nov. 1, 2021, 10:27 a.m. Nov. 1, 2021, 10:40 a.m.
Size 3.3MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 9b27bb9d633040a01a964d12b40b144f
SHA256 b464b774eb8a0f033ded0b5d0765f526cfbb4c38452c13e096f03dc7c8025094
CRC32 794578D2
ssdeep 49152:R9z8+aDmD+909PsxiNh1cOvthtWSOgylB2PaQDvZZ0EIp769z6jttfp8g:4ms6sKylAzDvz6Z5p8g
Yara
  • IsPE64 - (no description)
  • PE_Header_Zero - PE File Signature
  • themida_packer - themida packer

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section
section .themida
section .boot
Time & API Arguments Status Return Repeated

__exception__

stacktrace:
RaiseException+0x3d FreeEnvironmentStringsW-0x373 kernelbase+0xa49d @ 0x7fefd8ba49d
razzia+0x4978b2 @ 0x13f9278b2
razzia+0x5228e8 @ 0x13f9b28e8
HeapWalk-0x1ce0 kernel32+0x0 @ 0x76dc0000
0x25fa38
0x25fa38
0x25fa38

exception.instruction_r: 48 81 c4 c8 00 00 00 c3 48 85 f6 74 08 83 3b 00
exception.symbol: RaiseException+0x3d FreeEnvironmentStringsW-0x373 kernelbase+0xa49d
exception.instruction: add rsp, 0xc8
exception.module: KERNELBASE.dll
exception.exception_code: 0xc000008e
exception.offset: 42141
exception.address: 0x7fefd8ba49d
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0

__exception__

stacktrace:

        
      
      
      
exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x0
registers.r14: 0
registers.r15: 0
registers.rcx: 2487088
registers.rsi: 2000960208
registers.r10: 0
registers.rbx: 0
registers.rsp: 2488896
registers.r11: 514
registers.r8: 0
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 2488920
registers.rdi: 5356912640
registers.rax: 2003653519
registers.r13: 0
1 0 0
Time & API Arguments Status Return Repeated

NtProtectVirtualMemory

process_identifier: 2284
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 8192
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x0000000077457000
process_handle: 0xffffffffffffffff
1 0 0

NtProtectVirtualMemory

process_identifier: 2284
stack_dep_bypass: 0
stack_pivoted: 0
heap_dep_bypass: 0
length: 8192
protection: 64 (PAGE_EXECUTE_READWRITE)
base_address: 0x00000000773b0000
process_handle: 0xffffffffffffffff
1 0 0
section {u'size_of_data': u'0x0000b000', u'virtual_address': u'0x00001000', u'entropy': 7.977559740466368, u'name': u' ', u'virtual_size': u'0x00014fd0'} entropy 7.97755974047 description A section with a high entropy has been found
section {u'size_of_data': u'0x00005400', u'virtual_address': u'0x00016000', u'entropy': 7.909177631498448, u'name': u' ', u'virtual_size': u'0x0000f51c'} entropy 7.9091776315 description A section with a high entropy has been found
section {u'size_of_data': u'0x00001400', u'virtual_address': u'0x00026000', u'entropy': 7.726603911061293, u'name': u' ', u'virtual_size': u'0x00003778'} entropy 7.72660391106 description A section with a high entropy has been found
section {u'size_of_data': u'0x00000e00', u'virtual_address': u'0x0002a000', u'entropy': 7.526102338231308, u'name': u' ', u'virtual_size': u'0x0000189c'} entropy 7.52610233823 description A section with a high entropy has been found
section {u'size_of_data': u'0x00000800', u'virtual_address': u'0x0002e000', u'entropy': 7.609050368915436, u'name': u' ', u'virtual_size': u'0x00000a7c'} entropy 7.60905036892 description A section with a high entropy has been found
section {u'size_of_data': u'0x00332200', u'virtual_address': u'0x005da000', u'entropy': 7.964783442973078, u'name': u'.boot', u'virtual_size': u'0x00332200'} entropy 7.96478344297 description A section with a high entropy has been found
entropy 0.999402985075 description Overall entropy of this PE file is high
Time & API Arguments Status Return Repeated

__anomaly__

tid: 2268
message: Encountered 65537 exceptions, quitting.
subcategory: exception
function_name:
1 0 0
Lionic Trojan.Win64.Agentb.trtl
Elastic malicious (high confidence)
MicroWorld-eScan Gen:Variant.Razy.921612
CAT-QuickHeal Trojan.GenericRI.S22849637
McAfee Artemis!9B27BB9D6330
Cylance Unsafe
Sangfor Trojan.Win32.Save.a
Alibaba TrojanDropper:Win32/Scrop.81f357b6
Cybereason malicious.f9c7e8
Arcabit Trojan.Razy.DE100C
Cyren W64/S-6a34bfca!Eldorado
Symantec Trojan.Gen.MBT
ESET-NOD32 a variant of Win64/Packed.Themida.L suspicious
APEX Malicious
Paloalto generic.ml
Kaspersky HEUR:Trojan-Dropper.Win32.Scrop.pef
BitDefender Gen:Variant.Razy.921612
Avast Win64:CrypterX-gen [Trj]
Ad-Aware Gen:Variant.Razy.921612
Emsisoft Gen:Variant.Razy.921612 (B)
McAfee-GW-Edition BehavesLike.Win64.Generic.wc
FireEye Generic.mg.9b27bb9d633040a0
Sophos Mal/Generic-S
Ikarus PUA.Generic
eGambit Unsafe.AI_Score_96%
Avira TR/Drop.Scrop.qzoyc
Kingsoft Win32.Troj.Undef.(kcloud)
Gridinsoft Trojan.Heur!.032100A3
Microsoft Trojan:Script/Phonzy.C!ml
ZoneAlarm HEUR:Trojan-Dropper.Win32.Scrop.pef
GData Gen:Variant.Razy.921612
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win.ClipBanker.C4626406
ALYac Gen:Variant.Razy.921612
MAX malware (ai score=87)
Malwarebytes Trojan.ClipBanker
TrendMicro-HouseCall TROJ_GEN.R002H0CJU21
SentinelOne Static AI - Malicious PE
MaxSecure Trojan.Malware.300983.susgen
Fortinet Riskware/Application
AVG Win64:CrypterX-gen [Trj]
Panda Trj/CI.A