Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
8614f85ba523358af7a5de81583c8dfffc9dcf609a06aab771831d55fe0df761.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8614f85ba523358af7a5de81583c8dfffc9dcf609a06aab771831d55fe0df761.exe
Resource
win10v2004-20231215-en
Target
8614f85ba523358af7a5de81583c8dfffc9dcf609a06aab771831d55fe0df761.exe.zip
Size
11.8MB
MD5
8b83e77e636f1fafc417efd3d373bde8
SHA1
2879b0f35a9083202b3f2d53fb4afc20894240f1
SHA256
4b5804ef2be63d74945f21056f5fa3f3437ca36c0d893fe6f5143ceb1854386f
SHA512
43c24b2b9cd7638d57add09bf3f312ce2671654696d711b81e84b3fbbf5a97de2c9f9e702179e585b093e68da6e2e1b8a7c98d15afa96efc1b1d9636e2808983
SSDEEP
196608:rZFX4Fr+yoc9SF1Wm317oFg10lwLYHct5gXuJMmki/qZ8GrKumT3CPiGuKCPy0Vj:rbY+yH9SWgoyilJE5FJcmGuJmNuLPkLa
resource | yara_rule |
---|---|
static1/unpack001/8614f85ba523358af7a5de81583c8dfffc9dcf609a06aab771831d55fe0df761.exe | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
VerQueryValueW
timeBeginPeriod
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
TrackMouseEvent
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
CreateHatchBrush
AlphaBlend
GetOpenFileNameW
DocumentPropertiesW
OpenServiceW
SHGetDesktopFolder
ImageList_Draw
StrToIntExW
OpenThemeData
CoInitialize
VarBstrFromDate
OleUIBusyW
SetSuspendState
GdipDrawImageRectI
InternetReadFile
CreateStdAccessibleObject
ImmReleaseContext
SetupDiGetClassDevsW
WNetGetConnectionW
WTSSendMessageW
7B�������ኌ�1y +n�4��=�E�����j�>7ua��8hn����7_{��N[�s�� �:��"�g�D'��:�;\TT^���g�i��b5ܒ����Ql�L �9�qh�[��p�8�>Zo�q����m�\��];[>�{.���g���ͬ.�+B��l���A[�s�:�w���~�f^������:��&�)�#�A!`}��tX�n�%��[.s�)X������Q?|�ʪ; ��GQ#������?�:�!�z� �$��"���x��ۈ�����Gj�3�zyH������(�^�^#�5�K`�����y�V2c���J��9��Sܗb�U�:�������Ud��ER\ ׃�u�c�iAL����L#��E��>�T�L�.��Mb���"����1���}�ț���v���kD|�Z�ƾF[��7�̧}O�<5By&��S�����b�Ҹ����y�3[)U��n�D0��8$v���E�w��{�z�������/'��U��̿�]7�;5�Erl�~��u A�uCѺ�Dc�E����cY�D��nٺ�"�6��ۥ�l����������U7��� ���=y��${m�}�_���xM-e�3��d�R��9�*f��-�sB� Y���:�.�cz�!��tZ~H]�d�ʝ�q��]�j�hc����_mČ��d��%H�\�!P�������ɍ<v '��G{�cՀ*�t �39��k"$�����@ ��$���r�]NM3B7���tf�����(���K�8U\��F�vH�aP�8��~M�w�����b�/�L(������ګ@X��, r$�솭�l���E#dO�vC�E� � �����l��pa�~�'3�-CT�n�[��:��O?����������L�δ�����ֺ�s,�����i���*�o���d醞��nti��[0��&���*b��ъ�,����4��rDu���9R�Ay�w������>4(Dc[�0UV��>Ĕ��E۸?�ճ[�N_�b�?�!�#�c��(H��g0&骐>\}y8�z��%����c��:g�@�qΘ����-���J�:�ϾNm�k�$�p�=:9�!D0r�1 L�W�m%� s=|`��qNվ���;�I z������lc+ۧ������I����S��DFB��i�"ȩ>�Bhc6����2A0(v��K�?��q�J�E�E�(F���b�y9�"�=j��d��E� M\��=^��2���d3u��ƚ�ڭq^��.�tAp�t���7>WUIO��k/�i!=�>[�ON�3^�V�.�@_��a�;���O��9e�z��rQpz�\���c�F�Y�hI���函�����a��O�a���ق��2���u1=��]�̏(O���q��`>���/��>�'����_�t��çҔ��;4Kl�^ͣ¡<�?�����=.��Z�A:`�8�`X� t:��������iI$���O����)f�t���낡�aY�y��eK��>0.����ݰ��.�1�z&Nf�~enaTf?e��`7^��?-1��)0xT�AdcF��. b=I��4R�J�^�G~=�,<�55�~�e*$W��˒ٟ� �V|?*`�vM0�ް!�Y!p`7L]�h)~63�)��8�Y�H�fѠ�w��!��"U�6�<ka�ßM���~M:8�v2�_~�"d�OR%��TuaM]Oj������TId�bd�C��������M��^ʢl���ߝ�����J�0��g\\M?����%��y�R��^�5A(���HT�P=���5>3*r�Z�uda�>�[j��]����u�m��,�ȐOq���wU�N:��/������$S'���G����������UV%Y��t`Z�N��Wg�����Ѧ�����m�ۆ�h)ɳ��nJGv9��oI�c�D�~��z;,����5 ��n)�S,uɭ�F# mWPI��gݯ��1H��tK�:*@#=N�'<b�"����Ng�����IS:����l0nR�<�����������S�&vQ95̭�X������s�����^\MZ�)�mH����$�l����1i?��Ĥ���U���`zC�=�6ڄ�!+����+�:ߪ�v���H�`��5��c��k�ڒM��Z5�j�w�������$�C�Rp��Vs��jK�ɲ�b�����Y5�����! �B��ۙ7vj�l�"�U~`�; Ԝ��S�m0U�y��F3Il��ݕ��9�I����� ��>�Qe��x��m�*�P�L�qm������Qn0-�L�����@ퟄb�\��.7q�w�� ��M������`�|�;3$'C����`${���u��/y�Z�3�`X�����Y�Q�]�� ��7x���{�?�#��IRٴ|�t�b��)��5��;����lV���I:���Pw/Nh�9�vX�ǖ�x�"��Ї���4~� �� f� �ѩ����9v|ea��]���#��?q3�i w�gc��d���O`��;��ص���/�0�d�^ 1n��� Nm�7pd���Pߎp����x�,k��l7Lg���R�-�/D�p�"eu)���@�l�E��P��L;aMae�;��?�ew�\������U��������3��=�~�[�)8J�x�w��Fq���Y&�*��&�?7�����a���o{��ۤ�%pb7�ܞ�i{.I����d��ux���|&�Q�IA�����ꁠu���L�"SX=8z:������>*�F�e-�@����N(��9Gn�/t��J�fk�s���$��=��\L�2�s!�YQq����?�<�q@�Ft��cu���4�y� �F]���a̗�Gs"ղ�g1H+��$ClE��B�J�,�;R�TV�/�s{��O��3�^�����-%B����@�c�)[iD}�Z�u�q`>ȇ���s�������(P����@���d��$w�+���O�z��w{{�$^Þ̥T����;�N���R)�����O� Kx9p#�V�0��4ӺN6��N./E#���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ