Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
24/08/2024, 01:52
240824-caj6la1fnp 7Behavioral task
behavioral1
Sample
VMProtect.exe
Resource
win7-20240705-en
Target
VMProtect.exe
Size
18.5MB
MD5
60b6cf4ee3461db5fc23edaa3a1bc242
SHA1
b54722c8aae48a09046aa9b22d28c9d5aa3f6ef8
SHA256
2764f505dccd92aa042d23f4e5de3016cdbf4bb52e1ba6043cdf83b59be01b5c
SHA512
8119f2e9c6b12960b3c445a1d92c6ae220247136951eddb4db7356d6b6f8fa0ef2fc0a5ecfcc28724939452f991606733b47ab0f4a34e6c136622e03a9d536cb
SSDEEP
393216:gPBrXw0fdCHkfgS3TX+xuE4EDxOfXaGtaBiVOElnxTY6BjK:SFXfdCHkBpEDQPaGoQVOElxTv8
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PlaySoundW
ImmGetDefaultIMEWnd
glBindTexture
gethostname
SetEvent
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetCapture
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
SetWorldTransform
CopySid
SHGetFolderPathW
OleGetClipboard
GetErrorInfo
GetModuleFileNameExW
WTSSendMessageW
º�8����o낋{l��:f���=r�5$�'VlI�mK�_rsb6L]���Ŋ�"3\W�,��-�K[�7�+]rX���L)�Y��73L� �8�����Ȋſ��S�ܜ)�Z�~:�T�Z��f�$�tF4�����Z6x�����~.p~E�4{��2��7t�Iɛ2}(�����^��������Z�ب@ܶ�I�3fY�k��m�/>��Ur�6�c#|z������K}�/��L����, VA�('"��V��H8�N�^&��%�R]����~R�s�r}����#����C�mG�P(a]��@H<�������T8Y>��Yk�O���eY'&�y��YcN#��5���d��.������|��� '�~�I��������7�lpwy���A�/h�.L���«svs M3R,���Ax�I�*�����S��Pf����6�=���>�w�������&���z�2! :�JLƨ�]ȨC/2%0"�~�����!@��b�����Yqv}Y!kТh�L�[�Ϛw_Nb��o%��j��u��F�����¹/}�W!��&'�^��n�:��9�߫�� �B��1%s'�^=ւ�a�hZ�|@�_x�뵦)V&��4���t�g�c�����n s2�W:�L,#�]�OS_C�CfT�߸�&1�CLP�!O���vH!2����B��[�Z��`�; ���B���4M������S1��y���5�(%�m<%��5�B�-���g+�{��3���������TC�zWB�l�\G�/�Q�������*A�0��1�l���!D /�P�\4"�7�c���p�,T��Q<��k���yd=�¾��B�Op�nj-�7s�h����_�6�|�_ޯ�-��M�+���͇�������8�y@�:�w!��0����b P���ip���D�qP&��\)�x*���[k��pT����bW ��0��L��h[���æOw%H>ѯ������9��$(���z�ZW �ZlO� �!����/&U"D��T�����j��+:�$U\Кp��w0<xF��~u"�ym.�w3��0v�)��;깨�|�\v#6��l�tcSF����!Θ���Vw�i��� 6��IZ��G? ��I��Ϩ&6[T*CI�N�ӏ��p�!�����:F=��c��YMq9��� /�!�8JT�Ҷ�x8Z�~{6���UZ�����/�j�X�?�@;�L��`56Q�����->��*��!�f�r%e��GD.H�Ě��rc��7�fˇ��GS�6�%8����q�>9����4c����,RЇ�E����s�I� ^ނk��� ��ꤎ^�z|�g6q���37��dy�Ї��g�g-y� `I4|��M�{8��1�m�*Jx���x���A8���=���u�pB�o�zDpG������}i� �_�g�N�X�d�}*�� T� lR0i���fl�Q�)4��9�7�E�*���e8Z{N�����gG"`�=�u?|R��~�I,�Ӆ�K�����5���H�T�{���$ wR�ge ��4W4>���_�\ncC1�Ts��v���m��4�x�ع4�y�J���F��_��]'jB�,p��� *�Sc�W���b���V�LJ��B���i����c�)�7�u������̍�'��[�l`�$����� �L'�[):<��n\��$V���1j{�\�z���E E��,�yg���6�9��gE��~�'�y�}3�z�NI�yz�H�I���PD�k|r�ͯ+}����.�Y2�����`�3���w�D7�|��B����B�C��JʕO��p��@(��� R��.!��LLpt�v-�9EO`6��g����\��U�Y�����r���mD~@oM���������Rn���;SRӒ�H��aĿ��ѓӠ��[�?�����u!��aE ���T!h/�{��PQh4�#l}�+�m⧌QÈ�V��M�:����?����w��)�M}(�Z���n�7�{��h�"���]3�Z{�_�N!�a1[$�z1�+���5n1ˍA��w�%����AΝ�20]O�v!*#Wx[#�,�(�BZ//�͂'�s��A�T{ރ�=z|��<�ch��1ڜSSV�u�Cw���m{�2A2L*^Sd���~�g:���K<Ư;����7l#ū�KKB�ZF���~'?x��J�o)����yh?��JR ��?)O��I4;��|�;MF`�n1$��4�k�����,%���`W�D�ť_i�(������E�\g?O��I�mh�\��1n��C�(���H���]n�X�tS|D���7bY�G���-Q�����J��z���.��N�Mj?�U����aM]��P�{}�֢� ���F�O}�[����1E��9@��B"�!K�����D���������z����ڧ���4���-��R�v5�����%���86�,��@�)x�7������<H&��oP,v9��ۛIc�&����勖��>[��+�>G$��;�u�Y��_ԩ��v������Ϸ��5t"���p�J=�����)��v�g��w�dqE�"ڸ@��j�٬�S�H���Pz3�z�z���>�����{ �i�34�G�(au_�*ڦ��� Y�ǡ�%��O�����a�G���bl ᾠ=\�&�5ۗ�g�a���W)k*'d.,/J�����+��Fw�E���w!.b����pMc�Y�$�z%]~����ה4QT�CX�:?~=އ�{����_٣�Z��[E�� �� _��R�I�J��_ke�岬<U�s���p�a�M^'3����%G3=�]I���6�/ﮍ�k� �rB !�1a��'�H$�fr�����&�~6�!#������EǼ��|�_���Ɛl<��sN��-n�����f������)�,�]_SfxxMdP�����Eꩽ1�� �V��H �E�s�-r �G�J �]�,��*y����S\�>�8(���1:{i��XA�#�r�� ��QA�����%�C�.�\
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ