e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
Behavioral task
behavioral1
Sample
JC_721bcd427a3217dc0fbb9888bd9b58af106717f56ae0b3258c96ad228bbece7e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
JC_721bcd427a3217dc0fbb9888bd9b58af106717f56ae0b3258c96ad228bbece7e.exe
Resource
win10v2004-20230831-en
Target
JC_721bcd427a3217dc0fbb9888bd9b58af106717f56ae0b3258c96ad228bbece7e
Size
12.3MB
MD5
bb84a2b081b9843e025daa59ecfb9a61
SHA1
0d82f5de333fd62a091b6485f64734934a1f3e40
SHA256
721bcd427a3217dc0fbb9888bd9b58af106717f56ae0b3258c96ad228bbece7e
SHA512
a5e7343976bf5e11477d6cf167b3011dc6d5db0b5247e053ed9dc0e303be97d5449db197a2576ec0216eb8d453530d1ccc717d672801498530073054fcce5f0f
SSDEEP
393216:Nah6fEHxLqzKb3t0fNjCKtIz4osNQlQxAE:S6f5zKmZC0JhNQaO
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
JC_721bcd427a3217dc0fbb9888bd9b58af106717f56ae0b3258c96ad228bbece7e |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PlaySoundA
inet_ntoa
DrawDibDraw
AVIStreamInfoA
RasGetConnectStatusA
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
MapWindowPoints
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
GetBkColor
GradientFill
ClosePrinter
GetOpenFileNameW
RegCreateKeyExA
SHGetSpecialFolderPathA
CLSIDFromProgID
VariantClear
ImageList_Create
ord29
InternetReadFile
WTSSendMessageW
e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ