Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
955ddad262d43a92f0cdd25742267ce47cb03e353d694ba9a183386261b07bd2.exe
Resource
win7-20230831-en
Target
955ddad262d43a92f0cdd25742267ce47cb03e353d694ba9a183386261b07bd2
Size
353KB
MD5
152570e9a124d35e1a75626459be02ea
SHA1
c535efee7cb3be459464aacc90329cd5b130f160
SHA256
955ddad262d43a92f0cdd25742267ce47cb03e353d694ba9a183386261b07bd2
SHA512
47e7a4d1c962c160f261192eb8064e7579a9b15938c905219f5b048365d1a0c3eb5c0cc85016b6e96af25ad79ae11a430c3440580e054cb003111bb890332d0b
SSDEEP
6144:8vJAH77Jr2rcYVtOGx8yfrbyTs/38v4h5wXvhIaG89PC0UR:8BG5YVvxfyT+bhqZIaGa6zR
resource | yara_rule |
---|---|
sample | vmprotect |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetDesktopWindow
RegQueryValueExW
CoUninitialize
VariantClear
CreateCompatibleDC
GdipFree
PathFileExistsW
expprochd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ