Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
7f6081c6bbaabaeb8e53babe7af6673c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7f6081c6bbaabaeb8e53babe7af6673c.exe
Resource
win10v2004-20231215-en
Target
7f6081c6bbaabaeb8e53babe7af6673c
Size
6.4MB
MD5
7f6081c6bbaabaeb8e53babe7af6673c
SHA1
7776161f69e8ece4c4096f459b923d32cd082cab
SHA256
696918d3a2d17bc6e7408fae6cd5e1f908bd9937ce7dffad6c8303dbd745af89
SHA512
9b46b1b4085c1b0212d5efd6d707c0b67814ccc0aec8b962170353144852a1fe8a42e89a7a1cadfb8d3a8624c43c767f59a8d5ac8b19c2ab5b008eebf8edcf32
SSDEEP
196608:/QuFhOMtolSDMaQMs9fT4euCab/SQJX+6pe0e:7FhTolSDM0uLgFaQJX+J
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetWindowRgn
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
ExtTextOutW
AlphaBlend
ClosePrinter
RegQueryValueExW
DragFinish
PathFindFileNameW
CloseThemeData
OleLockRunning
SysFreeString
CreateStdAccessibleObject
GdipSetInterpolationMode
ImmReleaseContext
PlaySoundW
WTSSendMessageW
ۙ��?\�d�,C"DV�ה��"�Q:S�km`�;��vu� ��70��W3g�I�m�TC��D�� �U;�;`�=v���Ni�Ą��֖���E�?���jB��Z� ��K�^=�^'���I����F�/9�&�������uZ6���8�cK���8do�cϊ�� ��;m����_������Uo�oT�,��<0�^�d�(˩ʩ!�<D#���+�v�B`�/�����]p��@X�6�\s����+���k�hs�-�;�%�Ea3�τ`5��5d\(����mv.�P����X�I����}a�+3���lkC��� �� R����{�ŵ�����# ��/шfj��a��6���-�S�9 �@��5��/PV>��Y����9����w#3-R�E�'ir�M�����u�u����z����b���<ZU�J�>����R���)���=����_� �ƅ��"xF�g����T� �*��d��L~#�3����}� )�d`���V�?�T9-0�E�.^O�T)q>�A@Ï�G���<��ŐA-6��{��6�����D�t;Ꮄ��[PաˎH�� ^�.=�TV�z��_.��^},���+;�(x�N�����+��^3+c��k�) �qm���ɗ_S� �!������&DeC#6�LP=���^Dx"��W�Maz��Ń�fQeMJ�0D�e�_x��h"��9��o��m�Z۔�����ý�Þ|��s�z"�A|h�d�A"6.I�F�[C�Ȗ��`Vc����2��RF��f����n���A��,�G��j�4:t���8��0=2~՟y��� ��iul7�f�t��u�E��;��e `2��PyZ��[�%w�8Yr�O��&DZ�$�H��{�d�+Ѫ6�s��2Q9�lXz��kE�M�i��M��`�_�!su���l�Ի\Yഃ�ﲔ]�ی8�E�1���� �zQ�� �D?.RS��O�Mevt�1�$7���C��߱����.\��x�~���wT�B���˳3��rÍ�b�6D!�k��|V}�m��_�>v?O\�k���> �-��o p��b�$4r'M����rf^�NV����MܞE���z�%0��D���tK1�����/fs����6��U�[]e���� tW\�0;LNy�ʚ>)k��:<EΊ��_Gr��)W�3�E��h ����`f��8��sL? ���T�?�-F��A�?e�`�4�3����]��C�w���v,���˲�Ia��q�m�y�X�(拶�hz��f���"S1����%����&U��uw곕 5ӗ�<���\:��+�Q\��54=�����"~�@�{1]�����/ �D�� ���t����a 3Y�+j������:~U�����ܚJLv�_��G���:s�8�euz!x��e[�4w�|4=��:�}�~hZ��-��A��\0>�E��d#L�h@{W_���/�h��p��FB���F{ ���/$G��ZK:A�U��hSu7Ѫ�Dɿ<����U�l(`�5�{g��T�n�;~CJ$vC*y�V�;�zB��F�E2�o�t���m���&G�Jk>vz�[:ݪ�<�ݻ����ϔl�"�:��V���9���t�7���'���Rf .=��גRs��7�u9{�/4P,:b�r ���0�_�<;1�6\��2�:� c�z�^�B�Z>m;������U���l%BZ�tHH}���*�J��)�h�1��57��"��Z#�{E�u3��Ü���m.�u(�DV��i J��fg�,,��Sn���Md@3P1���N��ZY�.�IFDt��WJ�z&�6 �W!ZV�x�=��@�u.{yUoP�pg�'�/:D������7�Zo:-Ŝ��|��@�����67��n`��C%�ٶ!�84�X��>����a�(x�5��VV�3�T��c���I�SL�#���[@��I��� ��L�L�6ܐ1?ίT�J��*�g�|u���z�t1��=�r[��_�l3�^���=��I�����Ka�д2(�kiw2p;�<f�M^XH����\N��CG��E ��iW��}]F5j��MH�e/]�����L*�`��K[�&1Zm~A�V�d1ִ�Q��N��|�yҮS}7�l��BGX���k��9gXA ���9O2ǎ��VV�q�ƺvpb��r�vi8u�l=�nPrٔ<���y���¥��8��Wm�.�Ha�?(�f��(J�P�}��n�*�|�<�:ٽ��!��B�w:�n�W�p�����{T����}��n����Llc37__u7K����|�rD�U�mdf�0�S۱�C������.�/�l�0+��<E'�/��o$(�<����F�o��N��绹o��G)��~>02�dr�G�!�Sx��+ �\��]ԩ>2чυ�%Q.�:�a���^�<{�g+v���s�UcUI����Q7���m�w �3���jV`�h�¿�S��U���@�vX�ӡ��n~�>����;�6��1��_�RH���C���Y���?�@:�.=.�fk�� ӧ���;+��,+�p�鯸�h:�5���}T��ۛ�M\��#���U�������F���j�sF��>���%_�� �ZeNF���$w�?Q\�0�uϊTF�\��e7�s�N�\�>�lĂ'R8�qt��,����Ǚ��coz��lQ> �����+ߧ����+Υ������{��}����+�U�o��|�&b+[`�G�����No��y�&J�#���[����.�*.��Aޟ2��T�/�����M8-`@�<)��W�i��L��2'��^��څ�t��d���|�����UN����ݯ�4�Еh�Y]eo ��<��-0��ov�y�0�n�'��X��p�� ?�Җf�/N�ڏ()���� �Kl���6�� ]X�&���eN�SO>1�@^����ؽ9���D* b���x������`�B_⠹,1�G-{gP���������> lWxjۥǐ�2�����bw��퀿T@�AW�� �ٗ��E���T�R]d���t|�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ