Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6403_us	Oct. 31, 2023, 5:42 p.m.	Oct. 31, 2023, 5:48 p.m.

Size	4.3MB
Type	PE32+ executable (GUI) x86-64, for MS Windows
MD5	`b19c968d8ef12e145edacf8578f3440b`
SHA256	`79c621ca4b6e73deefbd9e2c8dd69b762db796e75809cbd3ce23bce22074ad88`
CRC32	`A07FD7DD`
ssdeep	`98304:Zht/xglJbdi6vLPnGlGXUn1k42L4NodEiAG7gbR7XMqcqYhWxtGj:ZhtxglJbgAPGlGkiVcS/+d7XrIMxo`
Yara	Malicious_Library_Zero - Malicious_Library PE_Header_Zero - PE File Signature IsPE64 - (no description) themida_packer - themida packer Generic_Malware_Zero - Generic Malware

clip.exe "C:\Users\test22\AppData\Local\Temp\clip.exe"
884

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

The executable contains unknown PE section names indicative of a packer (could be a false positive) (5 events)

section
section	.exports
section	.imports
section	.themida
section	.boot

One or more processes crashed (50 out of 65536 events)

Time & API	Arguments	Status
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: RaiseException+0x3d FreeEnvironmentStringsW-0x373 kernelbase+0xa49d @ 0x7fefdbfa49d DotNetRuntimeDebugHeader+0x4b96d4 clip+0x6b9c94 @ 0x13f6e9c94 DotNetRuntimeDebugHeader+0x5030fc clip+0x7036bc @ 0x13f7336bc HeapWalk-0x1ce0 kernel32+0x0 @ 0x76fc0000 0x13fed8 0x13fed8 0x13fed8 0x1d84c4 0x1a329e 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 0x1d41e000000030 exception.instruction_r: 48 81 c4 c8 00 00 00 c3 48 85 f6 74 08 83 3b 00 exception.symbol: RaiseException+0x3d FreeEnvironmentStringsW-0x373 kernelbase+0xa49d exception.instruction: add rsp, 0xc8 exception.module: KERNELBASE.dll exception.exception_code: 0xc000008e exception.offset: 42141 exception.address: 0x7fefdbfa49d registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 2004499152 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310448 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 1310456 registers.rdi: 5354418176 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: RtlRestoreContext+0x293 __chkstk-0x1fe ntdll+0x50bd2 @ 0x77710bd2 exception.instruction_r: 48 cf 48 83 ec 30 4c 8b c4 48 81 ec d0 04 00 00 exception.symbol: RtlRestoreContext+0x293 __chkstk-0x1fe ntdll+0x50bd2 exception.instruction: iretq exception.module: ntdll.dll exception.exception_code: 0xc0000005 exception.offset: 330706 exception.address: 0x77710bd2 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1
__exception__ Oct. 31, 2023, 5:42 p.m.	stacktrace: exception.symbol: exception.exception_code: 0xc0000005 exception.address: 0x0 registers.r14: 0 registers.r15: 0 registers.rcx: 1308624 registers.rsi: 0 registers.r10: 0 registers.rbx: 5354755307 registers.rsp: 1310536 registers.r11: 514 registers.r8: 0 registers.r9: 0 registers.rdx: 0 registers.r12: 0 registers.rbp: 2003748129 registers.rdi: 0 registers.rax: 2003689500 registers.r13: 0	1

Allocates read-write-execute memory (usually to unpack itself) (2 events)

Time & API	Arguments	Status	Return	Repeated
NtProtectVirtualMemory Oct. 31, 2023, 5:42 p.m.	process_identifier: 884 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 8192 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00000000777b7000 process_handle: 0xffffffffffffffff	1	0	0
NtProtectVirtualMemory Oct. 31, 2023, 5:42 p.m.	process_identifier: 884 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 8192 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0000000077710000 process_handle: 0xffffffffffffffff	1	0	0

The binary likely contains encrypted or compressed data indicative of a packer (9 events)

section

{u'size_of_data': u'0x0003175d', u'virtual_address': u'0x00001000', u'entropy': 7.9840191542538985, u'name': u' ', u'virtual_size': u'0x00070c78'}

entropy

7.98401915425

description