Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
VMProtect.exe
Resource
win10v2004-20240802-en
Target
VMProtect.exe
Size
21.2MB
MD5
f18a72e22c2516fac4716c951bf0d3e4
SHA1
b40b7042d449fe8c42872455a335ea69507df9aa
SHA256
ed52c0528c245d9bb8281a0ed23b68ca32ccabf2756df6838f4816d13bfbdcc2
SHA512
d12afc1eafea15e88bd6038f620734fe4ed75893c569ba69fb4c432e552e6275c47cff5f97a2def49c04f9212b545eb9c16d5b6fed39672dec097590a04fa768
SSDEEP
393216:hu2c7SHWOzel+vSEcVAXB2a253zxogfAzTXXjXwP4qOJ8/h45U:h99dzmQSNIBE3VAHXry4qOJch4K
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PlaySoundW
ImmGetDefaultIMEWnd
glBindTexture
gethostname
SetEvent
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
ReleaseCapture
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
SetWorldTransform
CopySid
CommandLineToArgvW
OleGetClipboard
GetErrorInfo
EnumProcessModules
WTSSendMessageW
�]+���ut$L8�{�u����m)Qc��Q��/&7K�^R9n����'��r^��Z+6U�'d���������s6o�߽]�8%��"���G;7���Vh��5�~1���,���MU(> �J�)�_⽐�K��&�H�Ut5��M��f����4� 2`�|�Ƀ?�~Z���݁s�:I�:|o0��e>���n��Lǚ#c��L[C�ˉ=�2�{{��U�rw���Ss�|��*Ⱥ`�\1WS�����}=S���N�g�z��.���H~o�\��M�����iB��w]�d�O�\+���;k�홗��o�~��=�m�T; �A���0��z���ƪQ�'�!(N������O�� ,�'��nj���T��/��C��hmy���� ��� T�R������.Q*����0�����.W5ɬa%�ઑ�x$����>�T������v�w=��0)��1�%�Y�%�z�����j�u�d%q���9���QC�1��rju�8=Gj�]����1���3��j��Yڨ>�080�(�kfEp�t#Z��qB~�$@�a.�p?F��oi,�o=��A�<��M�h��6i���� �P�-�q{:E]��겤���I)��{t83ǟ���~ƢO#���4�Q|�Iz堯j��ˢOT�%jF����j�q? (ظdj8x*��^�X�oa3��� �D9|5x��z{%9e�Z��(u|<R`�a��尺D��w�13m�}<�6�/�(ƥ��h���]�Bqzx�l�G~<I�>�4j�G �!���������1����_��rB:g�n�A1�4�DT�>d�}'^�ک�� A����ʯ �z�4����u�V?�����`�56j(�Е���9�����ڗ�.uJ!T'���Ú�;p��ktR��[W�84f�����m5dOM�0�ES��@�zۇ����A�6*�]H��� ]>�zC��U�a�@�H���w ���o6���r�]Iu�s�olӘ;�:H���-�F��* ��~�VO��"k�X�Q�.����$NoI�(��2O:���&V��k�cLk���(��.k_M�tA�n�Zq]v��x�ܭu4�i��+��3J8 �Oc�y(v d2��7Էxv��u-=/Lȝ��S`���Vq�?TQ��y�U���d�@N\�2����f�w�^�p=��@�O6��[�F�ԙ����W3��6���)69�q����=K��u�����?t�sj����3Ȁ�[N� �`�7����S�Q���� �&�n,$���"�f�UGS�R�Q�IH��OX$�C�����M���nVX��&��I��O��k���:���Js_� ���Qp�C���h���=noz�WԻЭ�N��ҞX_�R�]7�E3*��`F �2��j��m�&� _7�����b4��Uv�E1��2=~��\�ץ"���S��������7�k�|���!ع������j�u���ĭ�7*�x'uv������$��O�hm�8X�a�H-��0d��CH �7�d7�����`� �Y�k_�~�l�oؕ��e�e�a��� ��g���U�Q����9p@�XeDX�V�e��v����g�GDU�DW8�A���b]Ƒ�ЅCc�N�����i������./7�ڦ/C�|U{��jb�j���[��'W��8ږD��]��8N��CnSݎN�ώk��Cv��d�����2J����n ]0���Wt�;j�q�Q���L��MR�t4 �RE ����RB 8�t94\����{EKۑ� /��ʅڂ%�c�Cv�% թ���r2T�]� $A�^��t�7� F���<������X�)�Q Kk�8��M� ���S�iB���y~��r*\'����B?�4)]�V�Q�)�r}���G>mgSX5N�튉��[�u��Ӥ`/G2d}��e�zaA'�:�C��ҍ{_�s�� ��n,R���Q����ԅ��kl��V��ֿ<�߶�qI��,��/T���M���<8���!.F3���L_�bTx��;�/mM���n��z�Q��NO��t}���`0o�yǷmDu���)|�{��t1�d���gO`���I3�}?����]��l.h ��\����ro� 6��.������f�����I�C��^��7�$7���� P��C�A�,h�}(."/��|�w��x&\���䭒���o0^����쐝A�9�,�P�*4��R��ϞЋ����\M�=C�s^8��U��#��. ,+ÉJ7l�ނڽ�C�� �7)��H�I 6-Bl��o?��[m���j�~�����q�ћU��@��)+xtD�U��X��y�#`�lA {��`�7��&����]k淘l'����Џ1��!t����e�g�~�{�u6Q;�!��P�wR<2�D\8?���a���%w$6�S\'S$�c��9��({��>�s5��o��,\�*���;�n�VoM�?�����W���Q2�J�.n��h�D}}l:���^��|A���Q�1y����N4��fϫ�K�������A�v+յIC��~�,&̧�DЗ$9���Ҋ[7^�F�t��U@~B_�L����>:���<��QA=/��*���/b3�簲(�)�wn1�G��?l{�����W�2��^M;���w��c�.�\��e�ƿ����F�u����'!�� @+�Q�0�*@_7Fl?@;���U��}r�-)a8]H*E�]�NAq��YwN��> �Yˁ�u�pI��U�� #���h�e��w�$;zM�`�� Yop_=�A!��~Ck�:au~���}� z�{nߝ������l���W=7iRA�������ϊ���f��Zn� �d�ޞ�{����|n��T,nR�?*�p��㑮ɭ���i\�<!ifηñĊ+ֵ*3E�J�u �.�������W�$7/o>Y��ڽ��\(�����ڐ� Ff�>�*<�"�1���SL�(5�bK�y����D�E�{�S�X;�\�C?�����3h3�U��6�j1�_�|��o;x�33Ļk%�#8���ȍ���54��=g
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ