e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
Behavioral task
behavioral1
Sample
1a173fb4543966432817d625defca2db300a7c78544a283d42edee6957aa371e.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1a173fb4543966432817d625defca2db300a7c78544a283d42edee6957aa371e.exe
Resource
win10v2004-20230703-en
Target
1a173fb4543966432817d625defca2db300a7c78544a283d42edee6957aa371e
Size
13.2MB
MD5
b27d76bde3fe9d044ae85c90ae5c8396
SHA1
d4601a2872137ab899a9423c3f99f781f60dd43a
SHA256
1a173fb4543966432817d625defca2db300a7c78544a283d42edee6957aa371e
SHA512
789bf302004a3cadd05c09c95f9d71b6af3b6e6092f2eae3c63703aa48ead2f4d5e7f9a4052ff4683743caf270f01d1e33c2db41511483bbcb10d6dc84b7aa8b
SSDEEP
393216:RX2557vDbxzTmI0wEAbst9nTMsTRP+xdbA/S:J87yI05AbsvfTRG/SS
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
1a173fb4543966432817d625defca2db300a7c78544a283d42edee6957aa371e |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RasHangUpA
GetAdaptersInfo
midiStreamRestart
WSACleanup
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetDesktopWindow
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
GetViewportExtEx
OpenPrinterA
RegCloseKey
SHGetSpecialFolderPathA
OleRun
SafeArrayAccessData
ImageList_Destroy
InternetCanonicalizeUrlA
ChooseColorA
WTSSendMessageW
e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ