e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
Behavioral task
behavioral1
Sample
812896479e7bab5a8d0722082b443140a4c509e9a7d7c54fc8a791889222bb6f.exe
Resource
win7-20231129-en
Target
812896479e7bab5a8d0722082b443140a4c509e9a7d7c54fc8a791889222bb6f
Size
9.7MB
MD5
df001339cece4f98b447a0017f20037d
SHA1
11f7294afaf3ccdf17b9cad314ebafdb213b9960
SHA256
812896479e7bab5a8d0722082b443140a4c509e9a7d7c54fc8a791889222bb6f
SHA512
d71212b33848126acd6224c944c405a9d4d2d5d88ac405067b40a3e2d01ebc086aabb90d1e200b46f4c9b4fb401fb2e386bab26ab84cc1ce7ab84cc75c712137
SSDEEP
196608:38rwcLzQvcmzwnj0NwD0mAJWHfg/RDe+Ye4d/e2xlKA0Erf:3LqzQRcj7Aqfg/Be1e4d20SEr
Processes:
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
Processes:
resource |
---|
812896479e7bab5a8d0722082b443140a4c509e9a7d7c54fc8a791889222bb6f |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ