Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
7ad2ec4e66c4fdec2a5a3164ffc78193.exe
Resource
win7-20231215-en
Target
7ad2ec4e66c4fdec2a5a3164ffc78193
Size
6.9MB
MD5
7ad2ec4e66c4fdec2a5a3164ffc78193
SHA1
f17dfcca9df8fba4ba86b3f2cbd0830b54837810
SHA256
b47a2a1189d1012c694ee2670bd629af6799ea34d484474d04c4f8b38f314596
SHA512
0a6d45cfd0e921dcf66ded0d3b14c6aac684556b590b7799715c1ae39c59d314ba85c8bb0f2de851bd8cac20067211986a64358ff432131267aac316dcc0ef64
SSDEEP
196608:/fUDvAbjPZmwK3nl/X2Uo63Z9slLSh4J:XUiVKhb5/MLSh
resource | yara_rule |
---|---|
sample | vmprotect |
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
WSAStartup
GetAdaptersAddresses
GetUserProfileDirectoryW
CertFreeCertificateContext
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetSystemMetrics
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
SHGetSpecialFolderPathA
OpenProcessToken
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
BCryptGenRandom
__current_exception_context
__CxxFrameHandler4
_crt_atexit
nan
_callnewh
strcmp
_wfopen
localeconv
getenv
_time64
atof
_byteswap_uint64
_mkdir
WTSSendMessageW
�CQvtԁ@����B n��H�|3��|&U�q+k�j�Q��ϴ)`���EX��a��'O�H 6�:zH@?���Q��h� �L��cj4��n��:� #�@���`�3e��9^����h�_9��IJ���!H�����s���r+��f�*���Ŏ!I=�J��b��D�J>�AW �M@9�������.�|%2�n�7�ژy��+��������1�뇋�g`����j�]�i�RA�~>r�^E7����g�sEh��6B�v��7��ɯ*?�CC�9N^vj�a^�m�i��+Knxsqm�zww�*C�����sG��{^[�M�,N�fF�p�?'䤽co�|PB����o)o?���)W��`ީ���#��RU��.��q�y���e�B�����+{m����0]�홐S"��}����f5�91Q4|UO��-�{uј�z��b ��͖��� &�~$JA�U��$��)�ȧ>%�� 0)��y��k@v�o�&ߺ�h���7�$���4F ,cd�VQ���:+-����]���$�C)��r��O����o�v=�D�)ɰ�_E t��c$ZAN�h�$�s)*���#��p�;4<Ӯ�@��I!��2�t<��Eʚ����*'�DuW�F9���~�̹�'�ࠀ ����� �2�_�"4?�U,���(�p�-�C!B�É�;S��h����_(�L�@�R&���Z�Ӟ\2r�y��q���'��,Nip�8�7�\r�nFW��b�m�D%�H�6j,�5�[k����A��Y2MC�:)�}w�P���gJ!��:�����X��h랹�9���8W�N�*�����9V<ʩ��6MehkK�k�Vd���7�}H��hJ O�� �z`I��̕K;8M0<�s���RO��A '��B�8N��?�<�x��~�̣H�_�}��Qs" ,f������)Q;Ny���J9�������&K�Y��#q��50@X�L��J��Q�*�HmD��螙�Ƶؕ��|J��Ȓ�U�!������M��=����?�j ��֕{�tmU@}L ly_�Y�6R`�B&�/�:1 ࢻ������mv�=<��\Q�Ջ�B�ܴ����!���+Av+������2���$/�d��D�d��?l�-�A/"GyX�PM���AoCF9G����3`pC !�+�����?V�ܰWS�/�b�!g��zF����)�a4��9 K�[���X�����H�@��$[��Q�#O��l�Fl�W�Y]5�������Y�FTt6��^�����2�b1#���"�=��yw'ln��7qb�6�1�������1���,���4do�c�ن>)��U���t�.���d�e_�z�r~�\�$"��{�l�P �ŕb��:ޭD�_���lC���"�q�� �6ì�k��6=��ӜfC͛��T�̔�a�J�>���}�_�b6o�:��v��&D��z��H7*�w�K��Ϻgľ+c��E��Ɯ�X#b�G��Ko2�e<�]z��d�����e�W�K�N,I�C�:��SH��؇����̇�&H#�3���n*liu���TAn��yҡ<��u%fB�V+W����T霗v!�Xi@��s��� Z�fRH�"���fN@rk�_�}A����ŕ���`�1�|ܘ I'�ҏF��<�����3�)���X�2���AXt.�R�uWK����(��L���� /�$��'�a��XH��ԓ���Q�^�kG�,�Y�y��k�#��u�b���!6R��œF�ۗ]�\\-�C���x�6&:�#4l_uZ�&1~�`ayڔ^.ł��=��Ȱ��������~�A�KڄV/��\f�5°(/���ǟ�T1&�f��#��u��A���.�BGǓ���^�u"�x܂yqh@�R��}s�f�\��q���p��s�������V�k�Q$��M��h�V�� �?,�a�rJ�A���mDZ���&|s�l����Ȳo��w��Q�d[�C�/q��+u���sq:a�"�|%l�y�@��eI���$����XpŤ�FԈ`��v7P��!��3��3���TF�$ 3�g�/c�����Ǣ2A5�٪K)�{u��4od{`HC%���E� �b��� a�����@�GW�I�:����.��2e�5���S�H~�?�F�ƙov�=��/�s���z����x�?�`�d62���+<��!B7SG,�Z �z6���yy�'��8����%ɤ�������X��\#�K��g�E'��yh���jTK&ؽHw�]&'�3�"�q!H���O:gg����i!<�)& �$�܈T;�/ӏ�mT���L�}�c����� 7��ii�?�"��z�`�k��=4�e�T��p�D�e^۩4�Y^I������!v�9���wC�_�Bp�G]>��������oq��D����PR�nxԶ��w�ʑ���n�AS�+�w ��Zu�Ȳ�s�\v������}h�)}xE�� �R� ����W�(��.��G�?����*z��?�b�E�?;�Uiao��E��:<)��A��G%��^��ۄ�"u� iyi��q/`h������ġ��{m�Sw3�P��\?�-Ĝ|�)�o�!����4Hxd�����AxS���̏�#�g��n�ÜVO��U��Z�!ͬT�y��G�~�,��`V)�[���#���<����%W/Y����3S�tف�=��Ͷ@�dgFP��I&K'�z���p�W=��i?���g������c2�ops_ۇ�Å"R�M+�8��t|������kLt�hW�� �e��.�S�l�1�9pi¾ng-�FM.P����y���k��������-�~{J7� �f~ו/��y|�T돂�*��,AI�C��5b�O-%���o��4�ܫV�\\������h=�=W1Ҵ��l0_M�b��@��,��3V�q'!e��i����d����vFt��a��D��dEf���C*���LM^�|� ��z��r72���X���zU��^�����Ź
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ