e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
Behavioral task
behavioral1
Sample
90f09ac12d5e14c7f4e628ec54bfd0deae6e834319f76ebd6aeebc1aeea8a4f7.exe
Resource
win7-20240704-en
Target
90f09ac12d5e14c7f4e628ec54bfd0deae6e834319f76ebd6aeebc1aeea8a4f7
Size
11.1MB
MD5
9c36c67b956b099c1bd889ff7076d35e
SHA1
bf41a32612a0db3c92d029417d1450acc72945c1
SHA256
90f09ac12d5e14c7f4e628ec54bfd0deae6e834319f76ebd6aeebc1aeea8a4f7
SHA512
e09e4959468aeaf5f78891b4f831957dde9b083f4cb8e464da4faed9781853a04b7bc749f9eabecfc425bdd5a62d534d50d5731303625c1a53287649a437bfae
SSDEEP
196608:UgzCroNwQVJlLzLrVdEpv1D9kZ0NC1/QslZZ8jqfGH5+Y6Gh+H:UwKQJ/VktD91I/9lT8jqfGH5+hGYH
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
90f09ac12d5e14c7f4e628ec54bfd0deae6e834319f76ebd6aeebc1aeea8a4f7 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
midiStreamOut
bind
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
PeekMessageA
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
ExtTextOutA
OpenPrinterA
RegQueryValueExA
Shell_NotifyIconA
CLSIDFromProgID
SafeArrayGetUBound
ImageList_ReplaceIcon
ChooseFontA
WTSSendMessageW
e2ee_CacheClear
e2ee_CacheDecr
e2ee_CacheDelete
e2ee_CacheExists
e2ee_CacheGet
e2ee_CacheGetMulti
e2ee_CacheGetMultiText
e2ee_CacheGetText
e2ee_CacheIncr
e2ee_CacheSet
e2ee_CacheSetExpire
e2ee_CacheSetText
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ