Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
a41b3742fd4c0dfbb58bf94e1387780b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a41b3742fd4c0dfbb58bf94e1387780b.exe
Resource
win10v2004-20240221-en
Target
a41b3742fd4c0dfbb58bf94e1387780b
Size
551KB
MD5
a41b3742fd4c0dfbb58bf94e1387780b
SHA1
0f91d59f898576c0e34433d7f05a34aaf95ae89e
SHA256
73f8149ecdd7753ded4864c5b39c77e5eb04c5aed3b82eb1e9bd9c3604d047c8
SHA512
ec765bec77ef6f59a28bfeb9d7a4d23662850c84f31468936012c979746bdf88542b697b958eedda71dfbccdf7c3f909dc0a776fff6670274ef838c1d3a09d1b
SSDEEP
6144:LJLV9xwdaHLKB8bx+bM1TI2vAirrsmwQbYm5HQi+Kn/XWO3h1OVMN6bVVmbFLa:LJViaHLK3oU8Nj5HQi+Y/XWsNkDmBa
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IsValidLocale
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
ShowWindow
MessageBoxA
RegCloseKey
ShellExecuteW
CoCreateGuid
HTMLayoutInsertElement
GetAdaptersInfo
InternetConnectW
ImageList_GetIconSize
ħU�h��+����a�ڦP��zu��yV��O�?���]� z�$�>( t6"/eL�ڞߊ��� �ش��^��G1%!~��i���l/�Q5�FNů���,���̅��|@uz��=ܨ�q�����(Ʋ�G'dY]Ѐ�lo�i��W���IJ�m�������� �T4!,hIZ�)r��J?���ˌ{'�jB<b���fm���L�r�M�Z1K7k�(6��/z�s�X���v��3���`.��=p�ۇBhD4�L2�ṼY��ȫ��_)�g������iEʤ\b���g����]㜏�<����]�^�i�]y[(5c�&O�&KA���B�FR9��ŕ]�Tm|��.OtQ�<al� �\h�,!0h�yP�s'˩���������ة`_�8<e������)&֍R�J=C}���u�+�q?eo���NuV��x��Ǫu�z���zud� ȡF�Ǹ3�5 �%�߆�#tɚ]���ES�Dv��m3��^�r��^��6�H},�f|�n��W������������lڥ #m�҈N���D�SL� ��}+��_��惖C�|O�(A`�����J���>���˽ܿd?D�*���k�a->"/�����\�.(� ���ڡ��y��/�:N�EDw�[���T��a�.�h ��Z]a���Ļ{�c��ׯ�Z��C�.o���e�دNusPҙ+n�Ĩ���ѩ����I��^ze�;n'�$��Qk^��b4Yp���J��T'.~���NN�kB�r���y���@(cӛ���aݑ�N��*x,M�v_A���A�����w;1�ujT�@��MKc��pF�zЏs\�X�#q��V��-��z��m �� ����[�!�$�|�Qp�2y�4��8���~C풸�0K���:BI�va����bў��^��K�e[sT���q����b_�PGS�O;Ϥ��%��և�v�����̧7�3�|gQH���͜%�Uy��Sq�ʸN��ب6��L�5�Ή����@����X�ZB�c���*o�p�.��j��G��yC���J��H���\'1 h����@fk����JH�[)3-���}�� �o���7#fA��^�d���8$�s\ƣ��|yV�>UT=P���VK�� �Z�IN��_[�'�ξ��s�7��W�$��#���@���[���\W_��\-�ї"G�����y{L��U�|O/p��Q�1cE�:B:��?���ب�����(O�iS���s�`�ĵ��1!F�*����ʢ�'14 ��J�����Wo��E�/�a�+2E_�c����E��fcf/��Z�����_��,�]:0y+4�f���h��@�p7�z�������VWi%N�_�Iv�-|�<�MV8������,��� :hU�^�ʁx]��찌X�_����H�|��� �ʒΌ�3>�_q͖���֊l̋���ÿ�䤑��Lm����U��a�� �l��ڄO��rt�1げ�OV����\<L��/@�s7�\{?�PS�: Ĭ�V�f#y�;o���|�b����"���v��fP�+0�o��P�{��y�p*�Sw� �/��*�����������)ݡ"���zMJͅ�<y��~(��Q�?v湜�Gvu�k.��$d���'�w~�(����Z� 5������&܅�������oK�=�V«�6�Ԇ�������2������6�����U+��\i�����H��!�4%�����"vЬ�`@%D�3�W3���O! Y�;hw�<�����!Oti:���{���8�Т00Ƿ,˛�T�<ưZ���\�n�M^tƽ%9�0~�J��-,j{p�= 7QQg�_;60���a�ĠAS���l�Zu�y (<af�5��?c�M�]i-���VE{��g�ҦM4y��+J�?�� �DsG��D��5�N{x�%D<;�W_F�j�'���Ena���:�g|��O'] 4�|Ԙ.N�*V{[ڸY��gmed����ռ������Ikue�(>XũV&��nwm#���LU�!<nrd]DUjU�&暂����B�b_J��4��FqY�}��=$��V���{h����՟_��U��c�A��r�W5���JqVy��_���}�A����]e�dUVt�[;n�B�ov���y�� �>x{�wY�7��=�`��{c�Ykd5x)�I�|��C�� �i˗�y����,�" ���Ӡ��Ӏ��X��Eq�]����?t�J E7λUl�- ���־��*��\}i���l,/�e��IL��(�[�A�ҧ#?�����:���`�S�#�̈́ƶ~��R���i��s���m:�fi���1�ˢy�)JB �r��g K�b��xWS��q�G&cD�7���!<&d��=X�Sr�����#]("��ٕ}*�ٛT�3L ��#�l�DŻ�s�fܥ�F������/m��в���"��^��%}>�x��=P������i�l%���ؠ��m5���� ]���`ҟCt>�0��p��<'����'=�7������ߠ�����3�h��g1�Z̊b���l�ձ�W�>�K��Mi�{g����o#��iL�=�H-���*��Ԣ]�q�"��-���;�����uT�Kq�t���Ͻ��@��#.^�bE�;+ȡK��r�N>*�5&�(�dv�z�Py���cYՎ۾\���SC��T�!(����+�|�4�Ajnr�ԑQ�P�� �W��zC�2S�Pc��h��������r�Nuü�Ɖ#�W�a�(�8���nj�ƶJh���s�aM'�d?�/�8ݺ��H>����F@%���*̙�]���{�ww��p��8���:&��݉�P�.�]�B�v�O66�/�f��hKas��O|*�����+��u��H�u�5b ���;�����9��ڦ�Rn%�!�V�Q\,.K;�GF�V������Yw�:Ou��U� ��T������go�?D�Xgy��2 -q��LW H�N���m1�<�v�H���>?��f^[8:S *��B����{lT�DLB�,+ �V�]�*�I��_���;�h#�j�6�i�2&�������o�n��s�_0��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE