Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
45caf02d12068b27be25c7cbed386ab5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
45caf02d12068b27be25c7cbed386ab5.exe
Resource
win10v2004-20231222-en
Target
45caf02d12068b27be25c7cbed386ab5
Size
12.3MB
MD5
45caf02d12068b27be25c7cbed386ab5
SHA1
df86b323c2713fd7f16ad03b3dccc3ee86210a4b
SHA256
9994ebc93fbe241d8aeb1177fd26e8755bf3eb0dde45dba4a3d9ddfd971678ea
SHA512
73f69e13389672f44d9da1a2c34ca6d84a8070b3cc71b663baa246723020fa8267f6321f9b8efa008065d874a08f4205739a53eac7a3cc00c65495d5f5050624
SSDEEP
196608:bINVEE08qqiLXcpJQngyeghbOUHUR3rRsVwNPPPlLtnS71zrMyeU12q+5f:b18qqiLcEngG0R7RsWNPXl5nS71EyWB
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
midiStreamOut
WSACleanup
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetWindowRgn
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
GetViewportExtEx
OpenPrinterA
RegQueryValueExA
ShellExecuteA
CLSIDFromString
LoadTypeLi
ord17
ChooseColorA
WTSSendMessageW
XGt��g�?�M�^���Z9�����0H��L�%d�����r ��oV?�M�t���W�8�ۭQ11��|�B�Gs��V�`�oUg��1K_")g� ���ٖ�:�Og���V����7��+��sBE��4,�f5 �PQ/f���*�JI��#s+���0-$lX((CӢ���Y[��7#pZU�@��\C����x�\(@J`lq1mL,.�W�+91G��q/3��m�K���SM ��Ǜ��LV � �"m�S�z�T9�G��%��h5�$�z4ISn�ycj�_���{�#/q����(��a�T��.M�L��� �~��]�i����ɇ�����F[�V*��0��k���1�ߵ�xYA����"����/��-�~7��jZ|�k}�|=L} �=z�����]�0.�c�n����鐏�K�_��p�H��V4�?�]:�N�7��b�� uI%Q{y4��H���ɟW� WZ�BS���pC�-�������co m*�z!�L#7���*�������y��Y��}4OdV߸Gc�r�b������~�'��3�� ��I ������/�ET6j�(�ȃ. �^s������|XSꪬ���d~DM}���H�3Q:��=p�� AO�"�"?�P-�d�^}<)�U�2�:�����|)Y�9�A�!�|����[�%��p7��.�^��V[�[%<�֫#HD%��N �k;�Պ$!%�t�\��K�vW�����W�Ȑ�ڰS�_i����5ť~G~B��hbN�(������i[iU�X�n�X:U����B��ӇzDq���ѸB:����F�����Ɇ"b�G{�7�m��עC�ˮP�"]WmI!ǻ���/�|�(���Y�5�ՏNH��� �`r�Z@�5��R��B���F��)D3�}�J� :�apW �����x��:��#!�o%�������o�����oZ���;�0��x�b�yM�n�.x��#" ��4��ɘ�aj]�2B���yi���͒Hh�����|�s��r�-7J�~+C�8�(0T:�p��T<w&�6�-,���TcE:�2� RφgLX|��Ǘ��ד�Pp���>nLR���YJ�A�)�2d��m���æ=r��Ԃj]�N���g'߲�QcJ���5|�Μ~<�nj��� �ԩ�PڙX��� U�51��LT���G4��: �䳋y��&�,�軕� #� �i�b�7�����RۆQzR"�.��@7}����t�T�Ļq\�KMN@'�L�~�����K�l���=\Ϙ�Y�VQ�;"%��^���J~lj�w�5H�p�P'�� ����l��D��~0�u��e?�=}�� ª��#/�.{%��˪�xI{�Z뤯�\�W�L��!�;\mj���J�4��Q��ЙlBL*��x���0��o�!��L��?���lMj�>��!�;��!{E���x+�ޯ-�p�x���� ���K-����'�>�1��9�/4����f�����ЬG��r+��5=����.�@�U�K\��\��C�Oӓ.}X�������c�l[��������Q#��8��ԇ���&y���4���Ɠ�Oi�E���Ϟ�B��D*X�ӥ��m�;g�B��/U�7�}��:+1�E �=3�J�f��Ҩ_ӱ���*�m�ߟ�n��@��I�.�f��t�P�����1I|:��|T���~6�Z�no�Wx_�Q��N�/r����_ć.�P,�]O\�=[��?�x�3�U���Ӹ4)!Lu�s�K�E���?�g�#b��LC`��`��W\h�3*���L{��!Ƒ$p�~�at��3������H=F;�>�6��o��`f.7�a�?�=��G�2xm�1�f� Ha~ڸVY]�`Zr�� ���>�_��s>yL{� �����ʸ��J��/���҃��ˣ s���jI��,�T1�VL��#��� _�q6�q�R^����p�Ҕ��f�����υ�8�"����S����We篜9�/c�@����}d��%B���|t����,������6�כw�p�l>����I�+SP �Ad�]����>���xA3f���ł"+߁�� ;� P-Cd �)_Q�l ��k���K;7�e[���������NJ;c�YJs�գ��ew��<��:'=�����iUՁ��2�\�`=�wB0m �����g��u�'�P{Y��M���g�>��-��������a�h'f��{�g� �O����=m���^��$�<�>���7x�G�0��m7> T�ݷR�A����e��;��������Ɉfy� 珔d,�eqӻ,�әA��z£�!<�ғ����k5B�x�)f�u�p��_ζ���������-5S<�Y.UkW]7�?j��1؛4d�OO�����Gg:�0�W:Y�5(��=�� ��M����IJ�h>�N1D0,�p}n��_.]�b�����i�QD��^Bb_VM+�F���a�z̍�Y��m'����;1�\�����m,�c�� �|Ŋ%��b�����:��?{�aj"��nDI_�-�s�F7�ՄcA�9x�����W:�i}�� (ς�$��^J-��;Gl���j�l���-�%�B�B�7���v�����m�]��D��q�aA�@҆����Y���*�ֲ�Ho�X�&0���}���G�3b��7l>��r�E��Iś�E�܁sz��3���1zVVtw���w��v�s1�ߧds������4���3Z��J�9��ӹ5@c5-�Q��2�j$������x���8�����m@���W��g裂r4��28B�E�i?4d�� �V�ìB�3���M��*�B9���W��:]�P';�mw�����窱�2;���/�pe�q5T����I23=�-?�Q�]��8�xU���\8�F����*r�1�Y��ړmĄN�����#�?V����] ��j��VII��o��yg#]t��$�-�՛�іr������d�~�������߃�l\��o����k���C<��e_dE.���F(7:{� 2�$ޏ6J��O^
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ