e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
Behavioral task
behavioral1
Sample
53fff9337c461ac70fd7cf955e28ed5491d510c8c0751ffc5399a9afe5fb1c92.exe
Resource
win10-20230621-en
Target
53fff9337c461ac70fd7cf955e28ed5491d510c8c0751ffc5399a9afe5fb1c92
Size
3.9MB
MD5
0f960403760090619b597c4ffd500b66
SHA1
7b3fcd7f5e759d0cfb81ac6b8a4061e49a63596f
SHA256
53fff9337c461ac70fd7cf955e28ed5491d510c8c0751ffc5399a9afe5fb1c92
SHA512
bdb2be2d0cbbd8d25e0041fd3f931b06bceb1f9801328d3f4c48a368517684c2d366925564bb1a8365b0677c8ffc55660a37d6816dddf735c0509bb0e6923d82
SSDEEP
49152:eC/pVUOajTbpPHiHvVEgHztu+thX44ifGJtSqeQLgza6BDm5TN+IMUu9+d1cL+N:xBuh18VzArOSqeDalc6dF
Processes:
resource | yara_rule |
---|---|
sample | family_blackmoon |
Checks for missing Authenticode signature.
Processes:
resource |
---|
53fff9337c461ac70fd7cf955e28ed5491d510c8c0751ffc5399a9afe5fb1c92 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
ReadConsoleInputA
LCMapStringA
LoadLibraryA
FreeLibrary
GetStartupInfoA
CopyFileA
GetPrivateProfileStringA
WritePrivateProfileStringA
DeleteFileA
CreateFileA
GetFileSize
ReadFile
WriteFile
SetFilePointer
GlobalLock
GlobalUnlock
GetUserDefaultLCID
GetModuleFileNameA
Sleep
ReadConsoleA
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
VirtualProtect
FlushInstructionCache
VirtualFree
QueryPerformanceCounter
QueryPerformanceFrequency
GetThreadTimes
OpenThread
lstrcpyn
ExitThread
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
lstrcmpiA
ExitProcess
VirtualAlloc
TlsSetValue
TlsGetValue
TlsAlloc
Module32Next
Module32First
VirtualQuery
SetEnvironmentVariableA
GetEnvironmentVariableA
TerminateThread
GetExitCodeThread
GetCurrentThread
CreateThread
lstrlenA
GlobalFree
RtlMoveMemory
GlobalAlloc
TerminateProcess
OpenProcess
GetCurrentProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
DeleteCriticalSection
WaitForSingleObject
CreateProcessA
GetLocalTime
GetProcessHeap
GetLocaleInfoA
FileTimeToSystemTime
FileTimeToLocalFileTime
CloseHandle
GetFileTime
CreateFileW
FindClose
FindFirstFileW
CreateDirectoryW
IsBadCodePtr
IsBadReadPtr
MultiByteToWideChar
LocalFree
LocalAlloc
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
GetTimeFormatA
GetDateFormatA
WideCharToMultiByte
lstrlenW
GetTickCount
GetCurrentProcessId
SetConsoleMode
GetConsoleMode
GetStdHandle
InitializeCriticalSection
InterlockedExchange
CompareStringW
CompareStringA
GetFileAttributesA
GetLastError
GetVersionExA
GetTempPathA
lstrcpyA
SetLastError
lstrcatA
SizeofResource
LockResource
LoadResource
FindResourceA
GetTimeZoneInformation
GetVersion
GetCurrentDirectoryA
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
SetErrorMode
lstrcpynA
lstrcmpA
GlobalDeleteAtom
InterlockedIncrement
InterlockedDecrement
FlushFileBuffers
SetEndOfFile
GlobalHandle
TlsFree
GlobalReAlloc
LocalReAlloc
GlobalFlags
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
GetCPInfo
GetOEMCP
RtlUnwind
GetSystemTime
RaiseException
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
IsBadWritePtr
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
SetStdHandle
GetExitCodeProcess
PathIsDirectoryW
bind
inet_ntoa
WSACleanup
gethostbyname
listen
sendto
inet_addr
gethostname
closesocket
connect
htons
socket
getsockname
recvfrom
htonl
ntohs
getpeername
send
WSAStartup
recv
select
__WSAFDIsSet
accept
PostQuitMessage
EnableWindow
IsWindowEnabled
GetLastActivePopup
SetWindowsHookExA
CallNextHookEx
GetKeyState
GetNextDlgTabItem
GetFocus
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
ClientToScreen
TabbedTextOutA
DrawTextA
GrayStringA
UnhookWindowsHookEx
DestroyWindow
LoadStringA
GetDlgCtrlID
GetMenuItemCount
SetFocus
GetWindowPlacement
IsIconic
RegisterWindowMessageA
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
GetMenuItemID
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
DestroyMenu
GetWindowTextW
GetSystemMenu
EnableMenuItem
GetWindowRect
RedrawWindow
SetWindowTextA
FlashWindowEx
PostMessageA
CharLowerA
WaitForInputIdle
SetWindowPos
SetForegroundWindow
IsWindow
SystemParametersInfoA
GetDC
ReleaseDC
PtInRect
GetWindowLongA
wvsprintfA
MessageBoxA
GetDesktopWindow
GetWindow
wsprintfA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
SendMessageA
GetSystemMetrics
GetWindowTextLengthW
GetClassNameA
GetParent
GetWindowThreadProcessId
IsWindowVisible
FindWindowExA
GetWindowTextA
SetWindowLongA
GetSubMenu
GetDlgItem
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
OffsetViewportOrgEx
ScaleViewportExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
GetObjectA
RestoreDC
SaveDC
CreateBitmap
SetViewportExtEx
DeleteObject
GetDeviceCaps
SelectObject
DeleteDC
CryptAcquireContextA
CryptCreateHash
CryptReleaseContext
CryptHashData
CryptDestroyHash
CryptGetHashParam
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleRun
CoSetProxyBlanket
CoUninitialize
CoInitialize
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantInit
RegisterTypeLi
VariantCopy
SafeArrayCreate
SysAllocString
VariantClear
SafeArrayDestroy
SystemTimeToVariantTime
SysFreeString
VariantTimeToSystemTime
VarR8FromCy
VarR8FromBool
VariantChangeType
LoadTypeLi
LHashValOfNameSys
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpen
WinHttpCrackUrl
WinHttpSetCredentials
WinHttpConnect
WinHttpCheckPlatform
WinHttpQueryHeaders
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpAddRequestHeaders
WinHttpSendRequest
OpenPrinterA
ClosePrinter
DocumentPropertiesA
ord17
e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ