popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

procexp64.exe

Emotet Generic Malware Malicious Library UPX Malicious Packer Admin Tool (Sysinternals etc ...) PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 April 30, 2024, 7:32 a.m. April 30, 2024, 7:43 a.m.
Size 1.4MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 7e7eaa8aebc4026be3b56b965b0d8947
SHA256 aac11d3ff8661e14a6d7073e44f0d6ccabc436856af5faf10e761c57e8b42f71
CRC32 1BB92FB7
ssdeep 24576:qK8dbhH8s48SH3nc3zaBzz1pr+kAUXs8g/xEndP:qj5j/gXYWZz1gXU8rw
PDB Path C:\agent\_work\123\s\exe\x64\Release\procexp64.pdb
Yara
  • IsPE64 - (no description)
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • Admin_Tool_IN_Zero - Admin Tool Sysinternals
  • Malicious_Packer_Zero - Malicious Packer
  • Win32_Trojan_Emotet_2_Zero - Win32 Trojan Emotet
  • UPX_Zero - UPX packed file
  • Generic_Malware_Zero - Generic Malware
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\agent\_work\123\s\exe\x64\Release\procexp64.pdb
Time & API Arguments Status Return Repeated

GlobalMemoryStatusEx

 1 1 0
resource name BINRES
Time & API Arguments Status Return Repeated

__exception__

 stacktrace: 
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860
0x743bf860

exception.symbol:
exception.exception_code: 0xc0000005
exception.address: 0x743bf860
registers.r14: 0
registers.r15: 393544
registers.rcx: 393544
registers.rsi: 1
registers.r10: 0
registers.rbx: 0
registers.rsp: 3009448
registers.r11: 0
registers.r8: 1
registers.r9: 0
registers.rdx: 32767
registers.r12: 0
registers.rbp: 7977232
registers.rdi: 0
registers.rax: 3009552
registers.r13: 32767
1 0 0