Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
3baf3d0498490a3b273adcaaea79ee620147be7f1314c3e88e6119a9ef1eb840.exe
Resource
win7-20220901-en
Target
3baf3d0498490a3b273adcaaea79ee620147be7f1314c3e88e6119a9ef1eb840
Size
339KB
MD5
a3007784831351e815edc4736b582730
SHA1
98ceb462f1de9478f2ce3a1af818fc18b9871c14
SHA256
3baf3d0498490a3b273adcaaea79ee620147be7f1314c3e88e6119a9ef1eb840
SHA512
a804b3cc0fdd3de9eb722f8bb586f81b01c54089d2b1d0f6207d4c146632a933eeb68296464216084aed70b1e7cb505b2b7f00bbe67520d46ff63af1d1927be5
SSDEEP
6144:m7HphnZUdts7ZxNrkDeej1xusrOkzd8HrjQfbi8HHHxYhAe3dCN:qHPnZUdi7nN4Se1Td80fbhHneAe3dw
resource | yara_rule |
---|---|
sample | vmprotect |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnterCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
wsprintfW
GetTokenInformation
CoSetProxyBlanket
VariantClear
GetDIBits
GdiplusShutdown
PathFindFileNameW
expprochd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ