Summary | ZeroBOX

Category	Machine	Started	Completed
FILE	s1_win7_x6402	Feb. 4, 2024, 4:35 p.m.	Feb. 4, 2024, 4:37 p.m.

Size	616.2KB
Type	PE32 executable (console) Intel 80386, for MS Windows
MD5	`a7dcdb8a4ecf815beac47a344d9b7259`
SHA256	`0d00beb388e6341c9d0b6742b2737516cc9466fbcca78017fb2292f6e1dc32bf`
CRC32	`9F766A53`
ssdeep	`12288:Yh1Fk70Tnvjcu6EP3WMTaeCkrkVRkDU/PmgT9CeoweE7EJE9I7:uk70TrcuD3jToMDU/eq3eEX9Y`
PDB Path
Yara	Malicious_Library_Zero - Malicious_Library IsPE32 - (no description) MALWARE_Win_VT_RedLine - Detects RedLine infostealer UltraVNC_Zero - UltraVNC PE_Header_Zero - PE File Signature UPX_Zero - UPX packed file OS_Processor_Check_Zero - OS Processor Check

logo3.jpg.exe "C:\Users\test22\AppData\Local\Temp\logo3.jpg.exe"
2992

Name	Response	Post-Analysis Lookup
No hosts contacted.

IP Address	Status	Action
164.124.101.2	Active	Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Checks if process is being debugged by a debugger (2 events)

Time & API	Arguments	Status	Return	Repeated
IsDebuggerPresent Feb. 4, 2024, 4:35 p.m.			0	0
IsDebuggerPresent Feb. 4, 2024, 4:35 p.m.			0	0

Uses Windows APIs to generate a cryptographic key (4 events)

Time & API	Arguments	Status	Return
CryptExportKey Feb. 4, 2024, 4:35 p.m.	buffer: <INVALID POINTER> crypto_handle: 0x00610af8 flags: 0 crypto_export_handle: 0x00000000 blob_type: 6	1	1
CryptExportKey Feb. 4, 2024, 4:35 p.m.	buffer: <INVALID POINTER> crypto_handle: 0x00610af8 flags: 0 crypto_export_handle: 0x00000000 blob_type: 6	1	1
CryptExportKey Feb. 4, 2024, 4:35 p.m.	buffer: <INVALID POINTER> crypto_handle: 0x00610b38 flags: 0 crypto_export_handle: 0x00000000 blob_type: 6	1	1
CryptExportKey Feb. 4, 2024, 4:35 p.m.	buffer: <INVALID POINTER> crypto_handle: 0x00610b38 flags: 0 crypto_export_handle: 0x00000000 blob_type: 6	1	1

This executable has a PDB path (1 event)

pdb_path

Checks amount of memory in system, this can be used to detect virtual machines that have a low amount of memory available (1 event)

Time & API	Arguments	Status	Return	Repeated
GlobalMemoryStatusEx Feb. 4, 2024, 4:35 p.m.		1	1	0

One or more processes crashed (50 out of 118 events)

Time & API	Arguments	Status
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: f3 aa 8b 45 f0 8b 4d 08 8b 55 10 03 c8 2b d0 52 exception.symbol: logo3+0xf088 exception.instruction: stosb byte ptr es:[edi], al exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61576 exception.address: 0x40f088 registers.esp: 1636996 registers.edi: 4350244 registers.eax: 0 registers.ebp: 1637012 registers.edx: 0 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 12	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4353968 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3714	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4358064 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3682	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4362160 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3650	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4366256 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3618	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4370352 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3586	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4374448 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3554	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4378544 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3522	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4382640 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3490	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4386736 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3458	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4390832 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3426	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4394928 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3394	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4399024 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3362	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4403120 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3330	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4407216 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3298	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4411312 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3266	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4415408 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3234	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4419504 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3202	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4423600 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3170	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4427696 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3138	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4431792 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3106	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4435888 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3074	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4439984 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3042	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4444080 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 3010	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4448176 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2978	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4452272 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2946	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4456368 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2914	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4460464 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2882	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4464560 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2850	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4468656 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2818	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4472752 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2786	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4476848 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2754	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4480944 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2722	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4485040 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2690	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4489136 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2658	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4493232 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2626	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4497328 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2594	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4501424 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2562	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4505520 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2530	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4509616 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2498	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4513712 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2466	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4517808 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2434	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4521904 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2402	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4526000 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2370	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4530096 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2338	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4534192 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2306	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4538288 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2274	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4542384 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2242	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4546480 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2210	1
__exception__ Feb. 4, 2024, 4:35 p.m.	stacktrace: logo3+0xf054 @ 0x40f054 logo3+0xf0a0 @ 0x40f0a0 logo3+0x1fa2 @ 0x401fa2 exception.instruction_r: 66 0f 7f 47 50 66 0f 7f 47 60 66 0f 7f 47 70 8d exception.symbol: logo3+0xefff exception.address: 0x40efff exception.module: logo3.jpg.exe exception.exception_code: 0xc0000005 exception.offset: 61439 registers.esp: 1636940 registers.edi: 4550576 registers.eax: 4350256 registers.ebp: 1636944 registers.edx: 48 registers.ebx: 0 registers.esi: 33030216 registers.ecx: 2178	1

Allocates read-write-execute memory (usually to unpack itself) (24 events)

Time & API	Arguments	Status
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 1376256 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x02280000 allocation_type: 8192 (MEM_RESERVE) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x02390000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 1572864 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x023d0000 allocation_type: 8192 (MEM_RESERVE) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x02510000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtProtectVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73d41000 process_handle: 0xffffffff	1
NtProtectVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 length: 4096 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x73d42000 process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 589824 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 0 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x02280000 allocation_type: 8192 (MEM_RESERVE) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x022d0000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00532000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x02511000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x02512000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0053a000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0053c000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x02513000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0055c000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 8192 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x02514000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x0057b000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00577000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x04b50000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x00575000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x04b51000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x04b52000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x04ecf000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1
NtAllocateVirtualMemory Feb. 4, 2024, 4:35 p.m.	process_identifier: 2992 region_size: 4096 stack_dep_bypass: 0 stack_pivoted: 0 heap_dep_bypass: 1 protection: 64 (PAGE_EXECUTE_READWRITE) base_address: 0x04ec0000 allocation_type: 4096 (MEM_COMMIT) process_handle: 0xffffffff	1

The binary likely contains encrypted or compressed data indicative of a packer (2 events)

section

{u'size_of_data': u'0x00075800', u'virtual_address': u'0x00026000', u'entropy': 7.999344848123964, u'name': u'.rsrc', u'virtual_size': u'0x00075644'}

entropy

7.99934484812

description

A section with a high entropy has been found

entropy

0.776859504132

description

Overall entropy of this PE file is high

Looks for the Windows Idle Time to determine the uptime (1 event)

Time & API	Arguments	Status	Return	Repeated
NtQuerySystemInformation Feb. 4, 2024, 4:35 p.m.	information_class: 8 (SystemProcessorPerformanceInformation)	1	0	0

File has been identified by 25 AntiVirus engines on VirusTotal as malicious (25 events)

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Stealer.12!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
Skyhigh	Artemis!Trojan
Cylance	unsafe
Sangfor	Trojan.Win32.Agent.V6ov
Cybereason	malicious.a35fe5
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
McAfee	Artemis!A7DCDB8A4ECF
Avast	Win32:TrojanX-gen [Trj]
Kaspersky	UDS:DangerousObject.Multi.Generic
Rising	Trojan.Generic@AI.100 (RDML:z3aDTbSmRwEAGqK/cCU+TA)
Sophos	Mal/Generic-S
Kingsoft	malware.kb.a.984
Gridinsoft	Trojan.Win32.Stealer.ns
Microsoft	Trojan:Win32/Phonzy.B!ml
ZoneAlarm	UDS:DangerousObject.Multi.Generic
BitDefenderTheta	Gen:NN.ZexaF.36744.Mq2@amKgYn
VBA32	Trojan.Dynara
SentinelOne	Static AI - Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_60% (D)

logo3.jpg.exe

Process Tree Toggle all

Network Toggle all

Suricata Toggle all

Suricata Alerts

Suricata TLS

Signatures Toggle All