e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
Behavioral task
behavioral1
Sample
e8098ae1a3649758f196a84cade92d9cf51c84744724a808a3d6221f5b1c2675.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e8098ae1a3649758f196a84cade92d9cf51c84744724a808a3d6221f5b1c2675.exe
Resource
win10v2004-20230915-en
Target
e8098ae1a3649758f196a84cade92d9cf51c84744724a808a3d6221f5b1c2675
Size
15.0MB
MD5
66fbf2e9c0be9845fc7ab8cb1783299b
SHA1
cd1c4688a0d4b22a61b1c2b82df83fd68f5dbf6a
SHA256
e8098ae1a3649758f196a84cade92d9cf51c84744724a808a3d6221f5b1c2675
SHA512
9d25c4126c877a3b82c91228147c5b3179022f7aac98b5b4862a68a9f70929a350e77ae62f4b9a013b71939cb834a5d38bdd169c984d207cc6c8bb2cfff7db17
SSDEEP
393216:O0YHBZ7eLGDcroFaaXmf1Gy0LD71l/loo:OTej7XYdjtoo
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
e8098ae1a3649758f196a84cade92d9cf51c84744724a808a3d6221f5b1c2675 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
DrawDibDraw
AVIStreamInfoA
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetDesktopWindow
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
RestoreDC
midiStreamRestart
GradientFill
ClosePrinter
GetFileTitleA
RegCreateKeyExA
DragQueryFileA
CLSIDFromProgID
SafeArrayGetLBound
ImageList_GetImageInfo
WSACleanup
ord29
WTSSendMessageW
e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ