Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
19d598634b34761cfc66ba1076b61ce2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
19d598634b34761cfc66ba1076b61ce2.exe
Resource
win10v2004-20231222-en
Target
19d598634b34761cfc66ba1076b61ce2
Size
12.3MB
MD5
19d598634b34761cfc66ba1076b61ce2
SHA1
3219b294dd26fc4b6f3aa9dc1309d1839c97461f
SHA256
88552d236c1582fbf1d989c598d3a1e05b447e65dbd5829f4b1fd3d2af1aeb50
SHA512
5c1a7670d4cb2e9ed90d13b4ba4b2ce3119e680240e20eb071f7d4efa29adc381373896f8c2e9842515c6ec654f57c886639c67dba2cb3ab865c2042e058c6d8
SSDEEP
393216:kLo8g3cLkYI65sZKeQMB2L14B0bxpaS3lwaxBrm9Dw:kwMQYajIGwxpapIB8c
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
midiStreamOut
WSACleanup
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetWindowRgn
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
GetViewportExtEx
OpenPrinterA
RegQueryValueExA
ShellExecuteA
CLSIDFromString
LoadTypeLi
ord17
ChooseColorA
WTSSendMessageW
-��� �AEF��?�^S&��QS���Mf,Ɇ�wq��jzB���oN��q���W�N[�������J�t�D�r�� ����V�f���%� E��ZL��h���ek��Қ������16���ȡS�����Rm G�P�tw�7�n�d'X����ӿ@� �#n7ꨨzخ��Dx.�H^3q��EH�1}��l�hD�w�\Q�6���>�ʿU)��� w��#�έ��zp7��$��Riw�VNW��@&,y�]�<n�,\Ac�4&LQi;�"���X|I�_�,T��j[e�q����I?��4اj0!�������M���l&�D��N; ���*Ǔ�����X!���1ـI�@x1 ɀ�H��`�Q��fy�}�+��48���J�{v�JO��@�4���̨s��zgfOu��9�����/�Zjj����[�@=�"7���n�F�� B8��{�R����E:n��� �r��aHE�� k}4���';����P_/������5��O�%�z���h[�L��7H1�ӥkoz��u���������椒3/��8��w,�j�t��fjFg39�r��D��Vd���deML�����h3��3�R�����=#W��r����)�9g�A�q8�%fI���r*e{�y�q/\c �5-�r�/Bls�A7��¥(��Bи�� �E�e�1h�Wp?���Fo���"�Ny�+HҰbiF����=yI$�'�2#^�#k�$1������%��ψ;�f^�.�¦�o��ԇ�:����b� ;ٴ�hd̆%4":��Z��O���� Z|���/Hj�O5ό��fqS ?Was���JqV3�ְ|������T{ժ6��{Q W�"=��Ն�aڳA�{(��y�=P�|��K߇��A9�N��lt�z�;�H�M�������6��M���3���n��%ý�R,����P%(���E��G�'����ֻ��"�f��&kՠ;qb�c�^�rwo�L�0�f��=F�I�����KJ�Ɇ.h��.�1ň(�͞�K����#Tf���Y��($�J��ˍG�W�j͓����q��� ��^��)�B��6E����L��01�M����\_���[����u��5���~�tU�R;��#.Y������ZuWWY��v<(@b�*T�\�����G�3S ����d/��� {�<I5�3�)�� �ל��֕GV#�EwQi�q�l�K'�;���Ʊ�}B�hz��� }{@��>���tPj�]�O�U1?h���`�r�R0�%�!G�X���ɓf�3FKQƿ�o� t4��k5�+���A:�o=�'�;�(rT��h���פ��OGg�Audebx/�ƌUh~�x:Q�|�@�g��蘞z��Ќc���y��hR��j��2cvR�Ӿ�mx⊏��忍��$m�����G�9lf��b�07Ȋ� �x1��M�P�c��"��f���_-��m1��{/�D��bD�����Ղ7�Ϛ�~�B[�}��E�Sl��\�m9��U�lr��R9xJ��/�i�����/+�0~�ѝk?^��Gn�?w U�2�@ЅO\m�Ѷ`b�D٧�����%C>O�O���*'d��BS�+��~�e�g�ݨ@�q��w�@y�d=��P���~�Tq&|��Qn�l*f�%�d@�ǽ��B�F�e�S��,���4q�G�B:W 0%��_ ��:��dQ���i ��R���G������*&� {��L���7[_?dJ�+4��MaL>����)��wA�ҍ�3���]�G-��u~es��Q7��{���k�����o�Bj�# 8PyJ�dq<~�A�a�'� ����A7[R:�������Fh/���)]h�C�a�L��8�^N����{hC^8�Q�� �"�6�~�2�+��|Pq��iѝ�5?��L-�b���Q&��͝6JXW�\ܶQ�7��>�2�i㈄�~[*O���͗;".%j���ˇ�\�2?y��S�q�~�[$ #y�z;d��7���Dgb��\�S���0����)f[z�.ս������$>�:1�-s(��;Wc�-'��S�� ��(�lz�� E� �wi���g�V����YW��^��%[�ƾkH"����wC$\��t��VQ����a�U����u��d�R�E�P��t4E�Z�P�٫ C�|�>��N�%;�F��?m,S���!�C���� �w��\���K¹@&v;��zX���=�A�a�����U@7 -�RK�ܧ��֘C<Wf��#J7���|3�m����a���w�U9��֨�ͫ7�FW�d�+L4�0n�@�|���x�Z�G�e�] o��l��Ȭ�sƖ�i~��gCa��N�^�9D�тM:��RŞ$��ϝ����&!�OJT�T�g�^�'r_f{�ն��Z^K҉�X���Y\̶�f�v[��(����éi�GŬ����-�o��J�`�����3�QD�DL��C���H��"��g:;l��β4����:d��2�E�2�7{Ej�[h�D�kj��(ٚ�����uv�UC��#̅���DY�G� ��j��짡���-ߐG.p�ѭc������N�s�Q�0;p/z;1⨽'�2D.��_`��pT�:� ����z�� ��Ǎ(�����WIȵ<V A����M�F� �&Wt�o-@������/ a���މ{���#U���ߠ,��A���;'��+���os�K�a�Gy`�t��E7z�CQ_�F�z���C�8!i(����\�6�k���?p/p��Y�y���Om|:~D�u��[�5�F~��![�l��M;����y��m(p&;��ޫv�ĝ�|��QbO�`.��[3��ɍ�;#^����P�.�G�X�GB�r�\4�4XB��J�����G�(�������Տ�k�����{إw��őn(!C�pȰT��R��mK*>欞�J�~b�YT;t�$�Rj�� }��I���?N�=4����u���u��ۧM�J�� �f�Ҙ��o_��%e#���d��2zU�䚼��d�3C��5�}6�nł�ݵ���T�_DZX�O@Z��jv�1!�%
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ