Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
ef2bace0509cd2cf1d00ba7aae33818433d096378b8f5f491730c6cdb73f730a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ef2bace0509cd2cf1d00ba7aae33818433d096378b8f5f491730c6cdb73f730a.exe
Resource
win10v2004-20220901-en
Target
ef2bace0509cd2cf1d00ba7aae33818433d096378b8f5f491730c6cdb73f730a
Size
262KB
MD5
7cb3d033639601d7d58a7b13a35da4eb
SHA1
3049b9dfa1e9c9ca7954ad7e8e3cdfbe7190cd11
SHA256
ef2bace0509cd2cf1d00ba7aae33818433d096378b8f5f491730c6cdb73f730a
SHA512
6cff379c7b596f1812c799975c743c078c76170a92f6da3303745a51aec13b8addd6d70912af219d9b9027b481f7939574b243f862c38100ca20ba644329297b
SSDEEP
6144:Qx5T4xdRO3+toZME3PdQBmPDuluL5u4EN9bEz1ajjgXw:Qx58LRO3LtamLuEFEzyaj8g
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GlobalDeleteAtom
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetClassInfoA
MessageBoxA
GetFileTitleA
StartServiceCtrlDispatcherA
ord17
InternetReadFile
ScaleViewportExtEx
OpenPrinterA
m���@���)����1�=!u[�3G�|��}�풱� ��Ũ�my@�V�"����t�8�g�W?�d���^�?�*z�3��e��TG,�]��ݧذ�9h��2�9��N���S�3����1k�v�� ���4��q�*� �3 ���Mo랥�&�h���*�bs��<j;�+���u��Y10;�1���T�u(g��L��>%���:�T�����҇g�V��%e��Z�(�m�T�a1�R ��� ���&���a���2�b����-���@� PѰ�3��w2_��W��j�"��Hܛ��8��ퟐi�3�$n찞c ��Q1)���� U|�u#��8kg�s��f�71�E���feJaE{ G�Y%��4�G�H=t���P�j���r�ފ�*��Kl�MLf�Ub㼣O�[�$�e?�nҍ~wqO>�Il��\p-mӯ���N:���]�?��qőf���V�d%?f$a��H���@~�wS�G�c��ᕲ��� 9��a�E���Jf{�x�V�C���?�G�p_��͓�� }.ln��91�z'$Ϝ���{Dw�R9�@M��t0W�c�㤈��bin�ݑA8�i��&�0��=42��sDu/��o:�P2�[��gvj8�q*�ix1x9a��������i�rPx� �;�c�Q��F��Y5�� ��e�*0��C*�� ��[K�@|�wǐ�21M�D�^�^-��2�(j�QLVο���_\�N]+v��@�{�Y��Ǻ��6~��ݳ3��WG���[�� Zٔ�K�l���\���������J�k�_h�Q�\�G�%CN�@V'�Π̼2Je�-؉G��UD��/H)y����]?�ed�ͼ�aIoʡ�4}�cd-q�� ��;!����5$���{9�6B�]��O�U�>b��_϶���Bm �=�h!�Z��=U�};�֫��|��ՌJr|���ԫ����v�Ft�MR7���Ib*��W�W<%'��)ʏ� ����?�q�w:��&2��=�0x�d��5���\z�7I�&c�7+���S/G=���&��F�������+9�.���~9���ײ���}M���v�?��`4`�H�E� ������b���Bs�xAȻ��*;�ՙ�P�«D#�(pE�yS��Q��3�p��f� �;;r����sY����B �=5����/R��Au�n8�����)6-M/���BI���9M��.~���m4����d�D+57-|��e1�v��)��67��Q9���ч$�r3w�c��o�HpB���ǥ�U�<���WJ��*L�W౩' ������A:U؍��G�L$�8��2^u����`��<������M_�<e�� ��S�E�.�@��Yr;�%d"��;KΗQ;��l0���\�k|���N;::k�Hخ���w*����վк �N�bPu6�Ų��� �څ�Vx�(���3������k���!B<gͽ g��v��u[�\�ؕ�����S��]��B�]-P��(�����z�/�I�́j�fF!'o����KIf�s��%-�zwq����V \S�j����=g8/D�n�F)7���c���-�q�/��x'kc\�n�n���H}�G�.Y�%���g^���3�%3f�L&��!B�<osGerT`��Z2�.���c�Bm��kNJRN�`U� �sY[��T���o#+��\;L���/�Q��A�]$��/*��\��l�Q:�p���^F��w���y����Y�^���G��^%�mb�{�����[�D�զu#����փ�a�ct�m���"e�,���w_�Qha�#M�5x����&cD����A��c����.i�ugu��N=���E�߬�C����+�M@P)GP��n�^�B�)�V_��m�)��J�S �aٰ��0��D]�ƋkX�$����R|��MӋ&a��o=�3�����]��v=R���_ա��p� ����=h�J�lWlD.C2�.P9�(�As=a��|ѵ���3�2������=� ���S�1�Qᒻ�� ��V?��+��h���Q=�#0#$���4��N �� �%����l6%E�gLT��鯆d?��!bH�M��n��Q��]�=S�\!��f�],� Ai��YA$��r氫�!Z�|���$�.c�]��q�!Ԣ�V:PZ��>Q�jxg� ,� ���"�7��Y��4�-�}� �'n�ԡ�J�4���ȗ�)V�۶ R�t0�f����4��G$8�dطD�����ԋ���Ȣ�=%�5���on�k ���ļ��0sB�y��}ȭ��[�ߛ�>�N_�7�sI�GmO}�VEAg��K%N��r Z�1�v\�����Fesz������N���U��\-BKs�N(��MƐ����Ξ0Xf(�����)ܣ%���.�˝�����FF�\v-���K����O�AZ+qȸ��A���4>Dlk�=��l�r�csͦ��ƜѶ8|<�@�`��D&G�O�Z9�ݩ��R��l셂7����6�l�1�:�{��~������u2�J���)����N���X��U˹�垖>[�sh�/���(��џE�i���U�nR俱��C�L��o�64,��'�G����X��<���3����ʱ2b��C�8(�{� �Ku`��t1E��1]B�����H�`��|���:>O�Z�afl �X��v#]��ҧ����A \����`���l�.H���q�I��Pg�\l+�9 h�}H���aI:�{у;Z*�s<�!��B2nos~&xM�e������0S��Q�զ�n�<e��C/z�z�[1�E�=Ѐo-n,B*W�a�_M�����]��ڠ���(����D�i~}Xx�[zf��cҥT���������}�σ��#&-RY���7��!kRF.XO&��zB�]�qAci���o�iw���\�/����Ah&>�>�>�CS����{v]e�lz�6Ub�W�[;��W������DŭNZ����������RP�Ԓ���RsS �q��K�>km=n���8�qW����cb��w4x$¸y_s&��S���Y־e�G7%�h�s��Q�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ