e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
Behavioral task
behavioral1
Sample
ecb8bf031be80c4c28af9d97dfef2d069cd1f4f86b1aba58acf7323b99cd8c75.exe
Resource
win7-20240903-en
Target
ecb8bf031be80c4c28af9d97dfef2d069cd1f4f86b1aba58acf7323b99cd8c75
Size
14.1MB
MD5
17e2048130ac712be7875393cf7aa216
SHA1
c47ca7fa01db6017d276d06b7539d5b908fd2bc7
SHA256
ecb8bf031be80c4c28af9d97dfef2d069cd1f4f86b1aba58acf7323b99cd8c75
SHA512
78319ec7df784cf03a9aaf1e22a48b8b2fc95ae1f525f81612efdd03ecb07d5d04799a3cc0d87bcac882b4a603091e2b6e3b1e73b3164cad64c53220ee53e383
SSDEEP
393216:U1BDv7Q4PsNb/wiAoh3y+D2ylMh4aFY77d6r:3chiAoh3hD1lQ4ae7R
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
ecb8bf031be80c4c28af9d97dfef2d069cd1f4f86b1aba58acf7323b99cd8c75 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
midiStreamOut
bind
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
PeekMessageA
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
ExtTextOutA
OpenPrinterA
RegQueryValueExA
Shell_NotifyIconA
CLSIDFromProgID
SafeArrayGetUBound
ImageList_ReplaceIcon
ChooseFontA
WTSSendMessageW
e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ