Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
4837d5813349105952a0da767afc70985e9bf7d23ca515a35d58015b08d5402c.exe
Resource
win7-20240708-en
Target
4837d5813349105952a0da767afc70985e9bf7d23ca515a35d58015b08d5402c
Size
1.2MB
MD5
22842c5bbf91de709b29488f643fdce0
SHA1
d6747cb440191fd9012b7333a73bc4b425139816
SHA256
4837d5813349105952a0da767afc70985e9bf7d23ca515a35d58015b08d5402c
SHA512
3163326a855ea9268bfec34d662039ad1943e4982da539d543294bdb303183dafd981e4481af4ef8b527a0faec14378408b20b33f21df012191407f500ebb489
SSDEEP
24576:9WnukjaDKSnYBzaJbjSoGF9LzpELx3N/nHwhHK28URjX+E:MnTjaD/9v6Vcx9HwNhuE
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
midiStreamOut
socket
RasHangUpA
GetFileSize
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
WinHelpA
MessageBoxA
GetViewportExtEx
OpenPrinterA
RegQueryValueExA
SHGetSpecialFolderPathA
CLSIDFromProgID
VariantChangeType
ImageList_Add
InternetCanonicalizeUrlA
ChooseColorA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ