Summary | ZeroBOX

66e2cce3eae78_Pink_0x000872A650EA3FB.exe

Generic Malware Malicious Library UPX PE64 PE File OS Processor Check
Category Machine Started Completed
FILE s1_win7_x6401 Sept. 13, 2024, 9:21 a.m. Sept. 13, 2024, 9:34 a.m.
Size 1.4MB
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 00465490b449aa57d0e1ac7cba51af72
SHA256 198cfb15fb19d39c268055e6162ad0c4145f6e4eb39ca0669717e689d2e25e8c
CRC32 F8260A16
ssdeep 24576:Hou10+rz8ZczgG/l34KLem5IOa5+agTWy0Mo:HX1Mc16NxaiZ
Yara
  • Malicious_Library_Zero - Malicious_Library
  • PE_Header_Zero - PE File Signature
  • IsPE64 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
No hosts contacted.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Time & API Arguments Status Return Repeated

__exception__

stacktrace:
66e2cce3eae78_pink_0x000872a650ea3fb+0x117f96 @ 0x13f317f96
66e2cce3eae78_pink_0x000872a650ea3fb+0x15336a @ 0x13f35336a
BaseThreadInitThunk+0xd CreateThread-0x53 kernel32+0x1652d @ 0x76c2652d
RtlUserThreadStart+0x21 strchr-0x3df ntdll+0x2c521 @ 0x76d5c521

exception.instruction_r: f3 aa 48 8b 84 24 90 70 00 00 8b 0d 6a 50 05 00
exception.symbol: 66e2cce3eae78_pink_0x000872a650ea3fb+0x117f96
exception.instruction: stosb byte ptr [rdi], al
exception.module: 66e2cce3eae78_Pink_0x000872A650EA3FB.exe
exception.exception_code: 0xc0000005
exception.offset: 1146774
exception.address: 0x13f317f96
registers.r14: 0
registers.r15: 0
registers.rcx: 336696
registers.rsi: 0
registers.r10: 0
registers.rbx: 0
registers.rsp: 2555456
registers.r11: 514
registers.r8: 2475320
registers.r9: 0
registers.rdx: 0
registers.r12: 0
registers.rbp: 0
registers.rdi: 0
registers.rax: 0
registers.r13: 0
1 0 0