Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
8b3365e1fe3a0b940f1fbd075a3c0cc7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8b3365e1fe3a0b940f1fbd075a3c0cc7.exe
Resource
win10v2004-20231215-en
Target
8b3365e1fe3a0b940f1fbd075a3c0cc7
Size
5.1MB
MD5
8b3365e1fe3a0b940f1fbd075a3c0cc7
SHA1
7d3659c80dd811d564aa86e3d14d0cae27b4c84d
SHA256
78d000e956e517b7ac492a482162b1967e80efa72a8a77023dae832c0cd3a554
SHA512
01ea3dc7e4e43c6fbb64184610d1bcb733b8db56da2189bc2712e5a3e7bfdc873b950f1b0145069063981038126bafad6babd365cc3611af164d40f3600f0bc8
SSDEEP
98304:FN8fdIXOm6fJIVpTR0Q/tMcYqV646hEab1x+JCod1E35TxIvRM:D8qyIVdRCcYqV6/Bx+4NJVIu
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetDC
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
DeleteObject
PathFindExtensionW
GdipSaveImageToFile
InternetWriteFile
WTSSendMessageW
�V��RrF�0��=�q����;�'|� y�l!�U��F��︒�D� K' �feAc{+������mH"&��Lh�hO�Vj鹔��#�&�U�'ugw�'�69�H%O�XD�"3s7�J�[X_������O�2�^�P{��V��#���a{+��JI����C�B�Ov� ���2�y;v�����|'Ԏ�n�,�.7��:�����<��+ftW���H(,� ή.�Å,������j������Ɋ�7v>���S�R�X���Fֹ�2E��i�Q�ߋ���@��7�sx��_�����A?�k��(+��o�P]m��>��YA�I�N�ȹN�"C�c�����y^3�I�web� ��l�ﴴ��5O���<a6�qņ�?�r��)сa �'�c�����Y�pf�o`*�b�s!u��b �A��O�Ɓ��Ή,��o���"Ц3�@T�����y���%bz#{���s�0Cn;�4t�F�3w�_T�0��n�P���3�SY�bF�fU>��X�YRC����:m����w��$�B���9pn���Q��h������+�*�:�V��|����� ��9��q����F�v�}����T�Ҹ��HK���|���ι$do�I�ވvG�-�c��`���,$���>mE��-�ė�:�� ���կ����O�Xz��H�ĸ�J)��-<�8 ��p���(+�?#>��;��֭�FVksi�u�s��\�6*�@���_c���qR�p'D�e��K����� b�����UGyA"&YOvMl�?�"�Ac��AiԤlQ��Y�[rF$B��-�n�c�(��61�7�,N �T�� ѝ5cw��1��M�՛��д����R�K��ݷ��V�T����FC�>N�e��D����o1���"�N�J�k���: �>�������1���o6�&-(F2�����L�V.,C�i����yޓ�7�O6�c��kb����&0,������R�I~Y��Kz�_�����]�,�w�W%����y'��LP���f���A ;��Ǜ4��CT��ɹ �Z�Q��3J[%���r����k���k���tX!�C%䣘n�f���Za�3[���V� ��3>X ��a�,�jQu��L�V�0�"����>�ъE��xí��������O�t]yO3���\)�K&���g���}t��l�����YrCh�2@11��L�j��.�[�k�&���6�����RWH���Xծ����d���$�xڧ!��^�mr�,D;�v0ň��;�������贞K�^$����[x�h�Py$���]�'ba#�<pG��������!���S����˼�:�N[4�P���\������iue��I$8��Q���͋�43:�a���0�a�%W-f80�j>%�3�Q�zysE���k��l��rT�F�JPW�(9��y�剝���|�cȭ�r����U��z��.[٧���PN��w����_d�y��G�W�6�� ��5,�~����+̥�O�^�N�����ј�&ut�.*EH��l�t�1�U!�ʎd����'s�z.�R ڸI���̰y��,Ž8g��>Z����� �����1�S𤘨���Y���r<��M�������PT�ɖ8&�0�T)��֎��b��P�%ߢ*��wG�"��4@�j,���p;�&]�u�(���rv�iX�!][-����Э�=�7�w� ��9y��+�d��(���N�L�!��+�s/fh:��l�T$6]5�p���_�<1�Y�xO9�Xh�+�4;���s��1A��Zbg*3C��=��D\�Mߗ6�_E�v�����D���>tQ�\!f�@�n?z�������S4&�˘퍣ք����@^�G��#��O?���'�zFZ,g�M~#�_m�^D��8Bqв�!0>�r��^S~�8ͬ���dr�D'U���>}k]�H��9`9BB4�G�:N; 7�m�������� ֊�� ��@v���J(�O]�R��s�aH�])���BoV���A�Tg�M�3�R�Rr�����e��{��[��3r_j�+V�g�� �M�(���w�(~�5A7p�1|�Oi�; f �K�V�V<v�Q����2o\�|^E?�*�����Y-@Ϳ��i���'�l�k�IX��E:r��{c��T������Qw_{I�Ls��4i 3�r 2b�bgcn��a'�=�Ԋ��0�K��}}�)��FԌ��u�U�Y��n�v��(��n.�����`4���au16��������� $G��EdbW*��~t�� �j5q�)@Yo��RMg��5�þ�$s��of<����fpH(T�����'�����#����<u�\L��d����x8��M���H���L�^��Gz�Ս0#��a���G� n+]0e��c��rL��%��;O��6b��@L9��֙��~s��!:xW��Һ΅�F�Z��;²��RV�����7�W�:&��~�b��c呬EU;3.��lC��&�����(�e�R�XG'�!���U�^R�5�k�X{�)��2L pŪ��<�+Ê�1WH���W�E�P�&d����'Bκ�M�9��r�E�;�mV!)5���٢� �W���A��k"�*�ytyd�u��wt�Bv�5���P>J�]q��k�E�����ݣJ�gMn��vG�w��ڻ��� �H���쓪�y�����͢�ބbŚ\��@����jB���m/�X)���Ok?��~�������\�Aj�#�zx��*���ayV�S�2)6��{����7�̏2��:�`�ť����ѭ�(&`V�1q�3�������zC�'Xd�ʦ���}/yuN��>��ӰR�tC(���A�7��YXcXd��斾d�� �NeqɰV ��3�j;��}6 ��_B ~"��ć����$�P��`�����!��C�b�l5�8dߦl>^��J�:��Rb�����[��,�#s��\e@�cg���\`�����A������w!=�ߦ���I
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ