Skip to content

Unimplemented API call at 0x104014: ExitProcess #53

@attilamester

Description

@attilamester

While running on a sample (sha provided), encountered this error.
No result was written to the disk.
Output:

$ unipacker f011ba0a6de7dde6db6345f75e23abdab80683e5a510ea4be325ef2c5f45d05d.exe 
Warning: Ignoring XDG_SESSION_TYPE=wayland on Gnome. Use QT_QPA_PLATFORM=wayland to run on Wayland anyway.
Next up: Sample: [PEtite] f011ba0a6de7dde6db6345f75e23abdab80683e5a510ea4be325ef2c5f45d05d.exe
Emulation starting at 0x40c9d0
Message Box (ERROR): This file has been tampered with and
MAY BE INFECTED BY A VIRUS!
Unimplemented API call at 0x104014: ExitProcess, first 6 stack items: ['0x40c9d0', '0x80000', '0x80000', '0x201000', '0xffffeff7', '0x439000']
Error: Invalid instruction (UC_ERR_INSN_INVALID)

Emulation of f011ba0a6de7dde6db6345f75e23abdab80683e5a510ea4be325ef2c5f45d05d.exe finished.
--- Saved to ./unpacked_f011ba0a6de7dde6db6345f75e23abdab80683e5a510ea4be325ef2c5f45d05d.exe ---

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions