Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
180bf6d2980e40fe38a36c49e3f62be0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
180bf6d2980e40fe38a36c49e3f62be0.exe
Resource
win10v2004-20231215-en
Target
180bf6d2980e40fe38a36c49e3f62be0
Size
12.3MB
MD5
180bf6d2980e40fe38a36c49e3f62be0
SHA1
8181a107a21197790e2d748d05db75bdb1563ccb
SHA256
0ef8967b204478ff5d492a8fdbc74281b56dd612dd40108da4ff17ff2ec024b1
SHA512
5408e3d791dd4f4ac1f0a7ef7c2b018ddfb71d33100af3dd74b8904ce32161d549fc49164bf7757bf3f6ad1db42c99c5f95d08cdda665a8c4b7d18ed535eeafb
SSDEEP
196608:FRpWOS394ICuHJCuZpOaI3zHgz1Ny0XGP394lDkid9glEVMNUeow05I:FR4OAQuHJY3zAxNy0L96rx
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
midiStreamOut
WSACleanup
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetWindowRgn
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
GetViewportExtEx
OpenPrinterA
RegQueryValueExA
ShellExecuteA
CLSIDFromString
LoadTypeLi
ord17
ChooseColorA
WTSSendMessageW
��*��kuR� .��� ��5P���|� `rv��B��^��qt�{��������ܻ0T���cz6q�AT�����>M�U�s�V����8#�v�:��3=�iw��a��p����L�&��\���c=���? ��!BS ^�P��,���|���,�`� 4 I�����!G��p{G��g������Ov�k���k�� �ש�J�g��;��78�d��l~��@?�d{�n�?4[��n��6$�Ѝ�i���\ZQ�m���N����1���;DN5�cn�W��(��!7u�f�@a��.��W��7�(�9�p[�8�W@���R��0��go� ��o=�>J�/{=1�ٱ�+���h�Q"�}�`"��,�����`��!ԇ�^�2^��y <X�vچ�ʒ������S���q��$�@���_�b����A�>ME��O������Ш_� s��Qß�M�=_���k�] + ?ŷ��*�����F��C�4�� ��j�u���C�K1oh��I�R�QVz�<���s�_�4��Y��Q}�6�>Tn����L���>�|8ԁ��Xˏ<�� u�B9�2��<�4@kzb_!ö́!7j�����x9����#;pa�~�*r���~�=�<Q��ۍ�{q�H1�7>�����r2L]�f��I2!ݸ,��4%=�<˧��wN���e ������L�����n�5��6K�Ī%�cI��"W�syS��X������k�4�f�H�â�,Ȁi���x2@|�9L�w�Tsܰ��_�UoSv���.p��J��T���'�~>��?�U�Ӛ|�.�s�^�v]ζ��_/���g����iW����R�;n�b���>r%�q~,�b$ظ���Ղ�yi-1c�{E۰ͳ��/:V����D�Ud����&殕�,����Go�����7<��y��z�27��a�%�Slj�W�K�>��@P�3�_bfA�2Bڅ{�L� q�|�Tp�u7)c��!*Z=��B�*ᮞ|rꀮ�P��IPC�No'k�9�����?��Cݱ���[5��Q�C�#Z�v"n�'��"[�A��H?�蚵��x��+r��Z.��U���^ j�X\�6�"+�!h�V"��ERw��3ې˚;�U���w#K��CQ�p��nx��یw��RM8�����};&<��Xg�����K�L��3�����zp�����~��z�k��y���U����8��kxerM����Ewx����ض�����O�):H�;�mnY��}��s*�8�qX�Zk'�&�vB��lAZTN��8mJ��������j�� �8�>T5�q|�^֗�\�&x � ~.�����| J{<;���<-2�����k������� ���6$.?�DB��}��N]��q�ZDCj/����j����պ��as�^~H���� O�H��7��FOm��S��E�]���̾�%����Hࡎ�lԆ�ī�D��z�ۚ�j�F� >X��l��|����'�Z����7��M��� �<�5Ƈ����~s���m��B �_����O�H�����B�A�4}$� QEF�-m���>�wɤ��Y��L��?\�I�5�9 Y��S�� �K�T���V��z�aJs�M?4����F95YRP�1�]L�{�Xn��+�������`lϔ��� $Ŏ�q[*q�o��D�2��Oҍ������]p�%\*�Ȝ,pY�w1�A�-�l�X(���wތp���o䬞�>.���}����1\I�8����l\ �J|�܈(�����\%bS��L��-��Ov�o>���� �sM$7����c$�����dOt��.�'V_�%�3�"׆$C�����=d���D7J����"c��g�Z�_yŤK� �b���:o���+5a�x� d����C��6ʬM��0��� 8�}֚h�cZo�.^^j���J�1�~�r�a���!ֈ�dA���MQ�j�1hB��N�4q4�\Nj����5��㾙��c;�ԙ��\�*"�&�d�ZJ� 6�˾��)������ u��qk�����Ħ����Y2�p\H�R��_��d%E��6�*�r�o;X⣓+Y=�U��`�V� �x�� t�y����<�� �Cy��w�����3�l���<pް�&}����M�Ӑ|���g՜����G��+(7���eͥ�j��q���*2I��$T6�7�Db+���/����ʬВӉ��z~C�$�f��_���uf>�K��u��U��3Y0ߙ"q��� ��TlCq���N����� �:�~N�G��q�q�yP$�#j�?�5��'�eN�`��j J|�F~��~�I���0]�Խ>��A `�F}����Z�nI�郀�����"S..1JTR��i�f d|���0��"XlQ��</b�cO(l_AE\��L�*�mw��98ۂXNA^���XD��:��.U��콆 J"���#Bi{?�� ����� �(�G�#�����"3���N�(�:�l6��.-��h~8!���A��-j�[܁���)��z��B'�2+u:�����ਚ Ű����L8�n8+o��v�:(�w�=c[�|ޥ�e��]Aue�Rt�����&qa�ۜ�"n��y��p��5�+��!�[9o�R���=�ޞR��M�)�+R�Ə�3#/���5D�>�ʽ�i�nn3F%���I��#@�0c��"��k�h,ezJk�g����6TJ�!s,=�o�Y�&`}�!���{W�@�~�bQ�� s���v�����v �&�[��D�U��#������V,�`��+�~Niy\��Wk�&��}ա���Z[���7�|s>���7�=�"��� �{�����5�4�Hm��Q�g�oػ^�&�^:r�Jcx9[M��3{�sv�=I#Ք]��u8gո�٤���s���l��i�;/݀o=m���D������Fq=��(IjN ���|����#����s��'��]���;y<F �qwe�`�#��a^��; �9�Ӥ������ ��"Rk,��m��շ�δo�z�q^
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ