Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
fea90aa0d2f7db26cf5c95b6b561e010a4aab9af7dfab89e8fa58e0b93b957f0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fea90aa0d2f7db26cf5c95b6b561e010a4aab9af7dfab89e8fa58e0b93b957f0.exe
Resource
win10v2004-20221111-en
Target
fea90aa0d2f7db26cf5c95b6b561e010a4aab9af7dfab89e8fa58e0b93b957f0
Size
907KB
MD5
3a2b63625c8862931ea83ff11b5abdcf
SHA1
a5c02926be0c3bbc7de38094e15b6016f44b9db0
SHA256
fea90aa0d2f7db26cf5c95b6b561e010a4aab9af7dfab89e8fa58e0b93b957f0
SHA512
bddf58ca57f103d79ab2cf7a86f62557e941cfb82889a5c6b4c6bf7ead835b74f633287ba8fe6ac65d36a6b36dbf1213d1c46bf21b5bb376d758afe309ca33c7
SSDEEP
24576:IlHxz7GCocgyvVZVYkt94P3LXb7WsT2Zmz:yRW6gyrGB3jvWsT2Zk
Processes:
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetModuleHandleA
LoadLibraryA
GetProcAddress
VirtualProtect
GetModuleFileNameA
ExitProcess
MessageBoxA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ