Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
63459a8df0f41865faece72883c64e7d0d3112beb146d5956818ee320337d3e0.exe
Resource
win7-20230824-en
Target
63459a8df0f41865faece72883c64e7d0d3112beb146d5956818ee320337d3e0
Size
1.5MB
MD5
5af9000035529c0752cafe65bc258931
SHA1
31cd2c0abf818daa6913c39a5f8f000dda25a60e
SHA256
63459a8df0f41865faece72883c64e7d0d3112beb146d5956818ee320337d3e0
SHA512
6bf6505248e7643b7b397dddeb28cf216a3c7a1e63e76d945ecbf259b29bd4281d0b806aebad7c9ec52a6048042ab97a005cd0799e3653c66c78f52779f088a1
SSDEEP
24576:gZCMMVyjwdkRLrjoT8Sb17pl5i+H39vSjJR7jUbQtEKGeObLKxc7Jn4t1sdZaUQZ:g3jwmRLwT8u7i+N6j46GFbLcmq1sXU
resource | yara_rule |
---|---|
sample | vmprotect |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateEventW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
BeginDeferWindowPos
GetWindowExtEx
GetFileTitleA
DocumentPropertiesA
RegQueryValueA
DragFinish
ord17
PathFindExtensionA
ord8
CLSIDFromProgID
SysAllocString
FindMimeFromData
HttpQueryInfoW
�5TߟD��x���#t�k��dO�("c����V����Ԥ.-.�Pۈ�S]�r�3d�œ�,�q�8u���n�E�}�p��E���ҐzL�} �=�$ê�O��P��e���H�A�`To/�(�2�g<H�Q��t�W�]�f�+�~dh�#���|}U�qh�4@ծ��x��!�&�~l��}���}y�ҮP\(:�p��;�G)j�^�~�ƈ�#I,����Uk* �t��~�Z�#X���Q�K��l>'�>�q��5�3�C^ZiS�y=G����d$%�Xk��Y�C�txl�h�'4P�t� ���)�l&��U���Hʵ� �ij��<�a�!�t�~^5�^��� ���N��;�u�Yi���.\6S=9]L�ɯ�:YR(��ӯ�A0�ؐA� (�b?ԁư�)�,Q�nd�!����1��@+� Y�@���L�;���O�{r�z�\y�.��N�.�~Ȩ��ү&D���v?���ԧB��Pn"՝�C���]�\E��s���Rg��0�|7w&Q�,+���v�����|��uT��a�9j��C1� a����5M' �7�����)��6hi7�{c����0{��D<ԴZ��B��kc��T�A�~ \��,x�/ǿ����� ���ې#bh 4XJ�ʖ�@�S�Y۪�/�=��-&�d�<f��CuLKV=u{�z�-���dLGsÙ�9s`ƻ�9���l�5�]�M�zM�>�c�ΠK{�Ð"ze��*2S�BE�c� �v�B6����v�I�вE��`rܐP�����w��i�)F3�}�cU�1����C<��_.;�������Ə�b.vp����i99�_�z�ҿ���-79W���Ǜ/��PS-��6N��L���J���h�۫6̎.�*:��.�Ij��j�[餍\؇hZm��y��VS�Y����FM"�����Z� �c��+��1�� �T��~�� 1h3� X-w�q�8^;= I�7�C��?��R���':G9�D�\���`��u�:o�od�iYߞ4풃��3=��q�_�1 F�>C)6y��Zc�����gK��ZNߢ�V�FV�<9s�c���%�-�g�_=˾��M;��L��@�?n.0�*�-�O%ʒ��F����b���gӡ����^;���:�����a����ϢGh�<)��<����y���PWMU}�c�d���0�6]� &�CM�1t�s2@>�4�Yݲ�-���7x�@��a���.���6�p$������l����-7���]&��������.�$�����D ���rpV���k�� .���Ǔ�o�@�VuxL���8f��L��]�(��x~�-/p�m�9�ҢF��eCF�ǹH�,����O�]����̪7ѣI;���Z�������g�w�q� XSgJ�K��@��%O��CHk���.��n;��7��H ���'��O��?��9o}+�Vʪ��]���iL=����'kuE�:�|��`������d�tMl��f�l,93�����"���^3#�B�m^�s��ӥF�J#�//�?��p,�$�&Ђ3���otR�9����a �ϲvj�ة�"����hÇ�%��N�kh�t:8`HO~��gIci˧Ȭ�/��=o{�BP�ZҦQA�uxp^������Y~������|��~�!<�]�$�=V�"K��J#�5���<���~�9g�R��p����N�q��G+��U-�'"W �k��7.�D�w�Vk� �s0�ntS�G��%ZS������֒����T�[�L�y� ��2u\��fp�@�'����w�� 6ryϭ���=�����[Z|Q�}\]�ؠ?�a�Ljk ����w56b��W��'R\Z>�(���:�Y�E��ó�UEɕ�x5%��n>�'E{u8�l(�g.&�%V�6��\�yřu��Uv��Г���:v��x!��G���̍R`,IX?��e3����%����j:���u�yew3¯FF��7 ������������߸�2��^��I�����JgVl����Q�{���y{J�x٨�ل���8VFe'�<������V2��G��ū�,,�O4:ȃ�U�WJ;uQ�����|˼'P�F)6�B�:�9�0� �v�n��� �AT�_�����"���DNV;���\��d�{Kٳ����=kd�O�� ?*č��Mf��酐�3Qy�o�!A�����-��R.�4�eT6 �������]r�\є�2�m�v���k���V�j]�+����E:�G�Vč]�r�m�����0N$���!JhY�*d��Бd(��U�����٠t%!c:7gCWX.��PB�Y���I�&��8[FM�(穽����?�� �LJd�I�#� �����B߽��uV��?�ݟ�t�ޠ����pE}�'Fl��e�LU�Z�@�45�`��d�B���`���jΈ��{ᙕF��!o��Y���t<��D��@��^�)�z��!I������&&���]~��n�Zj���Ѷb�0M:#���r�eE��������YS]n_�P��$��6�[�!+�^��馚 �0�9�m�A��l��W�Y:�m���\�b�f*Ze��iC��rlC_5��̿� �b�R B��t=� �d���b��g5���_9�T�R����,c�+N��y��cغ�'�ͬHoU�^\6fzG(<������;<�f�D�fz��c�Y4���r���,'�� 2)PK5 �<���Ջ)��X�Q�TBjĦ!�.#�����9�P�`�͋�)��o/F�x$7ᒞʱV�K�l���D�O5�I��)���j���5I~�#Z��Q���ܽ#aM����9h�h,���r����^�Y'h����1�[K��T9B9K�PjD\>v��ʫ F�_�am@���&2m2�����&�M�h@t��[����PX�I���@ǝ������.0n%7Q�nZIe��c���ߏ1��� S�*n �"^�z\����y�y(���1�͕�n�ō^S�� T �[O�-H�����o��`�5���By� \�X��.�Z����������`O�s �D���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ