Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
VMProtect.exe
Resource
win7-20231215-en
Target
VMProtect.exe
Size
22.4MB
MD5
c7f3f260e3d99a9db927624504d87f27
SHA1
8c2d60bfef641317630534fac8887f30505a2148
SHA256
6bd55db87891350e05715c0af647817cc26e5cf59f8664bbfbd514d430a51722
SHA512
4a70edd18ab913608f92d4c5a4545169e11705fd5c78450756f9db724890ebb862dfb03853d52f612069aa9b1004f232b66b865b6e9f3ae50438c135eacd5152
SSDEEP
393216:9yjMMZcC7VCSBn253w4KdGYhSRJ5AGhjL75fl7YKO+U3rn/a/MkCy6cWIKAPc:9yjMMZsSMRNKPIf+GlLF2+yrnCUkWGk
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PlaySoundW
ImmGetDefaultIMEWnd
glBindTexture
gethostname
SetEvent
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
ReleaseCapture
CharUpperBuffW
SetWorldTransform
CopySid
SHGetFolderPathW
OleGetClipboard
GetErrorInfo
EnumProcessModules
S)�n���ü��F�dsÙH`Vxm��y�њv����<\b��P��<��h��8+F�e�5N��%�Z��X�T�Δ�:'�!8�)H���o4����s�މs�Z�y@���n��9����1��^��f�Rke��|� �I�̉�3t(:7;�{o��Ɔ�4Oؒoӭ��sn/:ȍ�[�@�{�&��nG8,����P����s��'!fK~�KD��z��>0����Fd�vʕ��'�}�af�R! A6m��q�5��-�!�у]�I��j�o��*�P�~�UƋ�} �R#���]�'z�q4!e�_�;��ZG�ܧv�$�������ec�7y\��cg��8H��:u]�v-�o�X���uw�.�yߗ����G'��y���)z؎]�S���Y�Z�A'uk������<_W���8~�Nb�W3�l`�?8���m��� ;5�QW`iEX�WڣQܡi��`�����c�֡:������#�&��g�P��]2Q���m���>�0� ���<v�D��)��o{J7�����_[�-��_VB�-�L����'�o�u�;�yAl�<�&tO���<��w�y��uc�2 �������J�O�y#�_>�;��@Nm����Va1��c�"����{��?��Q�E� _�Vh���L��>T��O���� =h��YR��Bu��E;Ǽ�0����/}�w�@ANZI"<(]�7ⶆ�<��ٕ�����/�� i���'(�����C����LS�{�����'�m�0��A���LA�4��f���y�H9?�=1�:�������̧���������l�N�~�c<D��G�c��0l���X��UR� Ӝ�k�.�k�mC�����P:2����k�H�����S7�;�����ΑW����ɎG15��Ve�!�d��4ଇQ���L�.��-&)+�Aǀ�o����E�"� =�q�� �B,�X{�k�Sw�$U��;Q�ėM!z�K�4�fy��h���|5���S����_s1�筶ɘF�ن��_W��m��I�z�i�3g�e`��R�����y5 � �w��F}/�ƜV�H� UU���^�!oa�c��pGȔQN�]��� ;l�?�Tz�����bX��?�M�[�rB=����x��bʹ��M�!����U���G�v �� Y{2Ay�`6A��&��x�|��`���'����y{��=�|�ڱ�v��/6��>�篃i*���{V�3�(*�[7��ӭ�8��=����h M!�-�ɶ���Xsn�p霨��z&�A�B<��44����5�E�Fs^J7��^� 3�bY��r0�Ѐ�����&�YS�'<i�f��T�x���F�s�`�G(�rq�!{��$�|�fo�쇜��#���;ԭ��qPv�/O�w}0mjл2%���D� ���¹A]NC���u�ŋO멃���vD�� �o���-��l&��Ic�43�2d�O%�31�5��^i:�!$~ҼT2vf_��=%�{��zϘ_��A �b�'(�v���"������5+�<B��.��㔖ď��:�ݪ�3p<������<�>@���*�WEa�N}'�"��[���L�6O��������I�w���j�YY���OE�QLR�'�#=������ߜW���}���du寿��$Tl�p�}c��9�&f�D�/���B�̥�|z��쳱�8�'�f����xe��(��a ٷr�p���2���Z?d�荇�4kY�n0�1x��P�y� ��_2&�e-�a/ z)!-�j��h����.��4U%��&h~Q�Vh���}�l�Z�$�^X�<���@m�}"s��|E�&3�]���{ϹNC��اI_���R��'���Z���*�r��RJ3֜��]9K{�/`�a��X�ޓCH��X��ٌ �@���q TĨu�r�XO��;�bZ?��h"����=o�k$%��<SQ֦��� l�-��C���0ZP!��%e7Z��U+V����ѵ��m��M��,l8u�M������K�����-_*r7�}v���������}5��#�~|�[3S��šQ�J������;'�ݱ�1`�M��*��E�_��#�� ����z�d\��e.s����7'+,�>xFM�?��l2��ǃj�j���mJ�q:�څ�� �i�D�FT��%�iҡr� ޛ^A'�;)�����üP[`��ft�YH��.����h@��Sl�oګ�Y��C��Fdo ���7��!��v�+���/��k/��|�8��n����,�%!8�0xri�A��We"�<���5^ciIJ���c�w�4�Ip�y����G��IP���4�~.��Z�]�����>"?��>7���������fԐ���P�XI0��X�N͜ ���͔c����O:q}9R�j�M�C�3��e2 a��:�Zd��HV!����GA2��m�0f���upl?�֍z�2~��v�_Ν[l?�)m��˱k�.�ko>w��"���D5�r�fGn��piK|eZ�f% ���v�dO��y�<?����h�ַ�2���A,s �����KOD�_�^�j~G��(����pO�J9��hJ�%�f�橐>�pu��q�Kd�i�MK��љ&���� LĶ@��W�v����rh��a�0ג�g�W�m�B�J�O�st��7�Y@M_�X���i_�����ȵ�8�'��*)K��k+������;�`'����_&��\d�''^�̻�� ťq�g�z�/���^k�L�Rb�ZR�pk�� D����Wl�p����5����S� Hs��ĩL�D��4�a '������>� .�����*j3�T�J��p�T_D+������$!�_��y���m ��|�T�.H��6ZW�8�2B�2 )����h ?5)��l���V7� �������3��u�̭�'�� �H/�p��Cg�B��������R�3k���H��s,��)P�B����,\���/���Fuy�B5P���Ij�L��b�υ_���4Z 8�E��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ