Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
05091399dbd9ee47d657e1a8786f243be1efe941ebd829fadcb04dd4e166cf8b.dll
Resource
win7-20240704-en
Target
05091399dbd9ee47d657e1a8786f243be1efe941ebd829fadcb04dd4e166cf8b
Size
189KB
MD5
31a37d11bc1557033d45cd1edb4f03c1
SHA1
4135708dbd1e5a7b9339905ff8d088c58e42b9ac
SHA256
05091399dbd9ee47d657e1a8786f243be1efe941ebd829fadcb04dd4e166cf8b
SHA512
394857236a752f3a7323a802491b52dac1a5b98b0e1a96d2c48ada88976b27a0adee3b4ab0f9fee3fe96aedab9218f9a9734e18a5237c231f91c9b8727428642
SSDEEP
3072:V/XijCb2M0ODhHmg45kI6psBAmYuo+qn8IuZ57wO+3MAO7Tf7aNHUonlxAI5:V/XACb2M0ehHmgFpsSmI5A57FAwf2NHn
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UuidToStringA
ord6375
??1type_info@@UAE@XZ
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
wsprintfA
CoUninitialize
??_Dfstream@@QAEXXZ
�E�S��8O�HS�-;[���M��A�)�yn���Ϥ��u��u�5�Z��J=j�Q.��,�N���w����Ȣ� K��n /�w�=5�9[��ʫY�&fϚv��pƉ`�����ٮ�E{� ����Y���r�Ll�/o�N��;<�:7j A��F��T�Y�UuH�m���|���Ǝ��Wەqޤ=ސF��yj{ڰ�m��� H@;+� ]���%%�"(.�����gWa�Q��,�-2 �ks�8锉ߝ;G�f���^]2�saXCׅ $ԕ�2 O V1� V؞҂��� ���=S�g="�C�d�ޗ:�IH�\�b���θ>����jY�{ ͓o%Ij7�#�����%�cO8%h��� $��:95�/��*5.L�!�Z$��K(d�G�j��E�1�B���R9�� M�|˛;07���!��N�>����o�P=�+{�*�ԢN6W ���) It��Rͭ}��˲�bT�n4�B�:y�ݫ��8�l������Kt$o�.���EW"��!n���W��6�<j{VЀ���1h��a��4�����*���c#E�t����r�b>�b{?�fM=��x�\��^W%���$͚t_�WPu������j���`���E�D�إ'��L��he��8���I�ۨB�m �cS�oStk����X��mۚS�����j^�T�Ę����>{��o�d���غl"}��NKO ��?�0�y�a]��R�7���D[�R�b��o�A�#q`[�fP$��Na5o�I$�k��Om�C����h��G������hH�}� A�]I}���g����Sҷ��~Iʪ�yh��~���d�4ݞ(��J�0��q͔N,4E+0%J:�w��\�h�(�Ox� �h��-o����+�k��W yAԏ�ܝ6E��&f���n.�;9�% *��Wd�����)���ڼ4Ns��ν�����Y�,��@ʠ�qa&1Ś8�T����#E�5=����F����� C��w���q�����7�[���L���I�6jŹlu}������i�"���B'�L0�u����.���QP1I�mȱ�b�p��7>+�tL��v�-��Pc�)a�"�*�5��E^�����R\�,8g���0[6���f�;�����xO�E��w`��C�1��wt����g�C���XW�0�x� d�_�B�w��tGS�B(^� ��Ra�E� �H��K_����@4;1�e��$��2<0��/u�'�6��ÿ�j�UOՈ� ��M��M���˹ᱢ�&���ν�~~.�jSK_���H�z�*1V�K7����~�����e��4�+J��aLYހ�C�P�t��7DK�]u�J��v���o�6��(�ǧ�W ������r4�����0N{��nE$���"�����H�"�j������ � �[��6@J[f%�� ���&��Nz��X.6�B� ��+��t���nW=�Y� �f_[P��&�������_'�նÊ�g� �B�'p�;kgg��E�Ӏ�{' >.�ӟGq6�EW]}�c�����rF�r_r]4-DL&��%L**oP�n����E� �jA�!�-�����(���@��|�O)��W���*3������e�gA�� ��� �����ϼ�ΖiG�Kv��|��_����ԃ��?�n��g������Yמ����;Tm� w6V�a�j����&N;�{[T� 1Xۯ�e�;��31sՈ�YK{ʮ�쫢(uw��}�����#�Dc��5t|>�X��C1�q���؞�x��?�rj���'�2���V8�Td/Jc�m)%I�"W�ٓ��kl��������( �O�?xѹ�Lv�D���O�s%��dz�8��QNR�bك�EX�����?��y;7"Ɛ�U(��h��R`�S���%�T�_"�d���d��P�%QG5���`K��{a�)6����&2��hhS\i_�:�a=�R@�92��4ԓqE-2�@$-0JW�<y���o���r������Vݹ�cy�IWm:*�R*3��9�%+ ��X�VZǩe�֓�.fiY}�Eg��?��o�G��y3Ӷ���E5C��� �t(vߤ�n檁g���Gl� ᓿ@2.�� �n!8/��PB��6�v�y��$�.���=�Y�������y4�CEE"��g���@*�q�����U�L��,���`�&�IQ��D����P��I��ܨ���Lb( �r}����(w�|�y�0$�u�ۢ������ZL��Kg��<hs�E|/�r��ӭ���,� ꘃ\Q����闷�Vg��K`�g�zv�ħ��~��u������ !�囄t"!�T��i[��gÉA�K���0�Frj���`e��J�Cγ�W�m�5soiL��f��2y��?z��� @���7@��D���+���?P�z���ٗ�\p��Ζ�id����m����I Oi�LGw2��H\2v��&�K�@C�s?t5d��r�v9��C$��� �|ɢ��z0��o��\[���SY�t�c���}��!Nj�����>LYQ[�qum͗O5�,���Վu����s�+�W���i[Q�C��W.��?SC�W�0�ܖQd���ĵ����(+��):���3j�� �"���3�J�E���x����d"b@K���G�:Ho�˒�@�sc���aT����O�We��hqs�����2��rrj��4�m�겯�:��s����+�^���xc���r�g痒z�h�� O01�����&Zc�� �1?{��<s���rXDu;�W���Wx�n�3�u�ꡆ����|7�t��nI��`������£4���̿���z���4)�2M77�=�B_�(�xS��wy@�ߥOѳ|�\����"�#�����"x����gY���J�tw�g�&Z^��KD�w%��V��<BH�i�*�r��n�^Rۤ>A�p�e i�\~�9� �P6#&��k?���Cu�^w;`.n0{�(�H���A"��pC�#t��������뷉?�֪�@OMU�"��e���XȾ#��D2���6lļw�[#P!��N��f5�&�_"��S�)^
M1
M3
M7
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ