Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
08b6cf680fb7eed782bba1517ab693ac.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08b6cf680fb7eed782bba1517ab693ac.exe
Resource
win10v2004-20231215-en
Target
08b6cf680fb7eed782bba1517ab693ac
Size
12.3MB
MD5
08b6cf680fb7eed782bba1517ab693ac
SHA1
d799696b5ba2d6c94c473bb19800ef52fd228535
SHA256
1e225215d671f0c35692262e9503598d938bfb67ddaba804f71eef9b8e424d7d
SHA512
eb3f40fd137686c15b9b0e04e9919cc44bdc9b9849ae79cc6ac84627dbe29b9733e0abeacbe2690ecd03bc92c543d43316ed53e496a7e64659c6a53a7a3db71a
SSDEEP
196608:/ze5Zg14CPBdzKmZ/D3tpPnMoKCUml0uIR0szcvDJX2HMdGRc3m9vdGQc8y43RF6:/a5SnzKmNtNppUmll01mDl2eSIQhyP
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
midiStreamOut
WSACleanup
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetWindowRgn
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
GetViewportExtEx
OpenPrinterA
RegQueryValueExA
ShellExecuteA
CLSIDFromString
LoadTypeLi
ord17
ChooseColorA
WTSSendMessageW
�a~� ��Y���'���/e[��ՠ��=o��1X6�1���.�g��F���������`w������7�/^Q�uc����"x�_�U26���*'ZG�Y.N�PD&�N��"�Է�6��Q^E���b�#��g���\�q~��� �Mw��4l��J���hp jR���)��dޭP���RE�`*t`���}�N�DMD&� ��l+-��j� ��f���γ���}���[�'ݸ>�� �߈M�MJ�G�!�b=|��$��r��T��y9}�p���������Є)_��1Da�$oxc���}����%W5�Ug����gE��?:��/� ���b ܹ�d�]|�[��mBa���H�Ñ�}[al�t,����D9�̰�G�|i�'�8"d�H��j���2��� Af��?m����V*tN��a��-��u�N���D�0��+�����;"3�����izIf�e�S9� `ED*M��L������#�\�'���a�S��fA�ض�ʌ�IG�������@cQ��.�V^$�%��tln�N˖��,|;�����$2����>j���JZ�ȝ��k\�0fb�`���iKJA�JT�dFV��� �bw�n�#�:��I�d�v&W��^�p�U/$� ��g@��� ��QSb�WkŴ�y[~�u~S�.�(`��@a �R��Oܠ�v ��D]����<pIt�?�@��hJ+E~� l^�Y����C�;>2^u��)���i�ƫ��8�="K#���:X˜)OYh�����NJ���\{�B�)�f�$�5��R�E� �U����s�oZ�Z�����&Ha,['�HE�ũ���r~�*>7V��2���:��;����w.u�ϯ~�'-r�d7�i���ʊ���م���(����n��?���F[�y�Vk0R��ߴ_���H_y���ӓ�ג��GRm;�����DU�Ad�Ѱ�B��u��� �T�R�p�^�8<��������XX(|ҷ��lr��4ґ6Fq���te��q��t�g��-�+[*.��%�#�����p��yu�V݈�٪ L��eu���c;/�#f>�!���h��霾*}{��-��F1z鮀ok�� �"��V��e�a��� {����X@PT_#`'c���\��/ݵ�.����n�/̴̝��7Oe����"��%�M uy��#�\琬��1�[���g���r:��y��j5\��r����+�@H�,g����h60�:6v���@�j���zm@ H�C�LU:��rz�m��M�8�c�S ��d��#�6�����B�����Z��4q+9ic]g�f눦ٯ�q��m�n"�ڴ�kbG(\���K�c��o+[;̻� �a^c}�o�Y*�+����m,�Kcy d��C��N��7�q��>%��X�י�=/�)le�J�3� (�o���Qy�e�� ,��+ y��,١%�6e`,bW<^���h�������+Z���p@:L��f�R��;lGړ3Ik���!�8��rS�[+����1]d�Nۀ�Z��1F�3j�+F@Ī�O�-��dFǪqJoմr�������9�L/�ʗ�]i �$G����C��U4~���i ���N���v_�dT�V�OI��Sڰ$~]�Ĺ��*g��/�'�;:a���a��ų���2J(�1�6��ʇ� ���yk��lv� �t�i���� �W��U�#N99#u��l�y2�,�I��BZO1!U�',y���'�W�m1@J�q/���H#y���Aزq rܾ+��g���)HB�����|X���5 ��zf�f����5 ���Axl�`H�̃��t�\0�͢Q�cu)9 ��@&���"!��n/P�h`L�xq���� VV���/���q8�7寢�̎~n��)���y:��@��c����>�v%�%�&���wp��Rps>M���D��}��q��_M�TWf@���Z��$�J�YF����tS�������D�=v�,� �gC��X��x��4g�m��$������ ��ݾ0���|՝'�;5�d�������X���C/p71␌�nmQicE�ƞ�Pea; a�s� i�;1�b�-5H��2;t�G�r�Z^k���1$G!���YM������R����{�:�/S�[�q.��J�� �G4�`�0�Ѫ�����Y,���/e�1��0��ۯw�B[�&Y�v>z�p~WA_���>pz����)����LJK�P̝,8���s�S������g-�\��橏;���iw�=O���Ū���F��_r= ���{���&��-�li�v����D��2M���LO�V��D�������p��8�K����[����4ӽ4���:���u`�=�� kri�xK���q2�U3<���cC�8��6�,D4��]'���} ����m��9�SeN��@q����H� �xJ�SL��,����3qdm:��%맨n��ڑ�.~�̙��2����+w��Az���%#?"2 ���6���B�]�O�p�:�k�?:W���;�����T��,f���P�v���j���l�ߝE^��������l��mۛ�m��d����RF���۫�7F� ��q�,�S��љC~>� 0!�ֲ�5���ݦL���B/ 4"^FuH��Z$����?��c�)��:s�4%e:��4.ƚpD��,_2�L�������}�Goٟ(n�IA������������z�&$�'Z÷v�P�]F��(�ӺA괽����L�o��х�!���?(�n5��@o�-1^#� N�-�|��×N/k�����x�:�4p�|��Cv���UOP�%�T��珸#�;�Ϋ!�k�����=�6G�����#2�iN�>(_n�b�ќ����@]���ö�����3-����8h���+�.Sk�:K!�4�1U)j@�28�##�m� �G�]�L��W+�p+�p��p ;7�y��;�kfQ�sH]e;��Y�)k����lG�[`_+V�@㳦��q~�NMr>�6�U���&S�iUz$�p�Ң.�)�+
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ