e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
Behavioral task
behavioral1
Sample
2f7ff892f6eafb9a681c3b0aeee7274d122c41b92484134125b86e048d923668.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2f7ff892f6eafb9a681c3b0aeee7274d122c41b92484134125b86e048d923668.exe
Resource
win10v2004-20230915-en
Target
2f7ff892f6eafb9a681c3b0aeee7274d122c41b92484134125b86e048d923668
Size
14.2MB
MD5
f8834bad287770e5c93c91ce803b7a1a
SHA1
7a1235c3051b9a1de1cd73689bfc2d7f575981c9
SHA256
2f7ff892f6eafb9a681c3b0aeee7274d122c41b92484134125b86e048d923668
SHA512
d5a640d28bc3a1a6d0854d9eb44e6bc191208bf722076d25b4254d95e8099e7302d06be84842060da5a885ef156accd13b0193b4d7889efd37d676e0c73d94da
SSDEEP
393216:bNlCKsGVY4iSCZzS9h21rurpvlxHZU4pM26B:bj9VY4U89EUxXa0M
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
2f7ff892f6eafb9a681c3b0aeee7274d122c41b92484134125b86e048d923668 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DrawDibDraw
AVIStreamInfoA
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetSysColorBrush
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
SaveDC
midiStreamRestart
ClosePrinter
GetFileTitleA
RegCreateKeyExA
Shell_NotifyIconA
CoRegisterMessageFilter
VariantCopy
_TrackMouseEvent
ord8
socket
WTSSendMessageW
e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ