Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
VMProtect.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
VMProtect.exe
Resource
win10v2004-20240802-en
Target
VMProtect.exe
Size
20.0MB
MD5
3774e9ba30a09287289c6a131821651d
SHA1
bbc1cfef4d7755fba83994849176a7fcb8c886ae
SHA256
3c94c8e6ca6ea0b6f1276448be8e14ecc1c7fca8018cf5ae050f65631aa2d8d1
SHA512
81e116d703fb34d2dc2a33b4a03d5427e44ef5c7ab8bee3b395483de6f444235a7dd2dcf5834ca21a6c837f9bd5ef38d66ba65f0dddcfa424d565461ac16ebc2
SSDEEP
393216:D9819KZxcPEv69tkVAUU6N8sBf5osxr2w+ZR6ngzTP9kEWigrc:DQKZxxi9KVsY6sxr2w+pTP9pWikc
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PlaySoundW
ImmGetDefaultIMEWnd
glBindTexture
gethostname
SetEvent
FlsSetValue
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
ReleaseCapture
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
SetWorldTransform
CopySid
CommandLineToArgvW
OleGetClipboard
GetErrorInfo
EnumProcessModules
WTSSendMessageW
�-�In�?�4{V��]��f�nؕK���p MÄ3��Hm*��ox35�2���b��uy�f�t�v��Ga�@���/��&��R�a��G<��@uGY:�5�Q,x��m��e%LpC"SY�I���ZD$�@�*�K��6J���?g �nƐf����"�D3�)���c��}�L+���I��/�Z��qB:�%�:�ܲ4���ÉkPiޫ.Q�5��ժ�Љ<5%�3��Ly1�0��m�C��%�����������JV$C�z���G�Ҡ��L(�R6l������.>�L/���ѷ:�E;��2����Hk��#ٯ�U����� |�I�2\��-�dk�>�p$�Y�-90C�|O-�"S����N��0c��a��!�"a���4)���<e&���N��;,�D(����<��-�*_���끉��PD�O��[x�<:x*��B�fn �$�~�W?�d�'�K����i�wp� E��⾜s�J���}�ذ-�o�|������vh����qV/��X�o�E.2�#�bxc 6 &yy�[�VNQEv:�Ԩ�Qu;ed���_�)bX�lj�����lgDF�cйuha?����@�M��p"����ܴ�s��WF�ƍ=�����GiKo��J����q� �R�l}V0�Z�c���`M�����݇F^�&WTW�-PQ�q�!�f���`�O��>U2:�7���-����@�s��<�6���%^$���� 2~�!/�·?�+$���{���#3��)L���r��X���e�oS�ma<��%��Mg�� s�H���Uɺ[�R4j�Lj������ʕQT:����� ��s��jD�)�y�f,�DZC�!�뎮�Lg VdG�s����庐v��w�CݙO���豪��w���.��/�����$��m����T�zgM���ʭ����XX���|߶�75��G��� 4�91�'ν���(An�p����t��X��j{�8����~,���z<��L�*�;�a�I���^�{��5�̵��^�����X[����_a��,�u�gbNv�jA�߿���'�����@�u;����U�)����ǚ�7��<� F��fSFG�������6xCP�}�ꚞ���|��6A-�*{#��S����[$Df�������t��ţSx��|*����7[��3P��Ʈw��Ԣ�Zp�3�#��������9Fج�'n�~#��o�U~�P=p�͞�A+���lJ���dDѬ*}r�`�Q� � �o����ߺ��et�e�[� U��]7tx�L����L�i�!P e�}�;X�~wg��{m �?H����u� �NzV_k�М��l�f�Q��a����\���G�:O*��u)Q%?�~7��W���rǥ��aB'�K���F���{n��t�a$���S�?��"Y����5�:a>ay�+2�y���� @����~���sX�D��/K<wJ�bσxPҳ�l� ���wP��Dt���c�������<�����S36Dq�0��%���uީ��W �Al�(<����`_�>䘗酽�N��8��6�x���_#5�c�ԡ�ԁH �EɊ��f��L�z�as��wC=�A��� �,o9J&�$��F�O�A��s�{�c���1���@h$/���)��09�� =��wUƷ��Є]2.��9���Ț2¼�#e�ڷ�z�lD��)��M9��i���D �?逘(x$2g4�������)2C��5�|*R����"�`����d�85����}!��_?�8���C��&!�J]^��F����zP�쮻ٵ$q7�9-��������/9LCI�Q���{£�krށ�$.h�s��m���(*��/����V�ʐ�����9������H?�2>����s' 3&�������*�/v�j�K��_�"��� ���!���&`pϰj��Y��큰��]���>�l'LS�W�}3�����Hm���O�����gѵeMe��|��fe�}���q>W$�f����M�m����<f���u��Ȩ$��ev�t(I:���u�٢=�Z�8HH~S�(��dF���lPM�+��]��n������~T�#�U#5 � �n�n忤W/Gd�!I��g!!�vc]<N$h;Y0�'C ������@= ��Y*f�vAE�Z�Έ��#�-h�B ��'E��w�O�X��v'/�=��ts�:Y���Lc�c����Jkf�{��4������A�vg���#:��%`8r�������0�d�C}��9 `�e6x+)&�����2�8 ���� [=�� 3��V�ϥ��03�.~�(�$dR8��`����ǒ�y��Ӂ��ot��U�ٷ�|=���ӻ5�wA����ky2#`���I�J}C)��|��ϩF�� M�أ�.T�U�&�RaZ��D��d]�yT3�� H��[�� t/�vkϵ,i����̧��թkʸv��[��v�A�"� ������^�L�ŋ2|9����̄Ϩ�� q߱� 9���5}.����8әN�qA��m+��a�����m%���DD"�� Q����q���������>�� u遯���_qh�B�8�� ؎��cչ�`��v��|�%t^R�fc��5)dԂ�\��ȫ���S�cEI�=&|Hb�)�_J�m��9�&iU[镨 ��FCtqZ�m��V듨���Y;���r*��BF�0���J��|څN���ca?�/gر�`��5�����Q�#/]�5mBÑ|1*ܐcow���YOI�0�8���u�~����"�7#��М85%c�x��W>ק��|�m�X��#��玖U`���������^��d���?�i���I��)�L�vMj�[�Cqt]Fǰ��F/���븏�� �f��š�����^�C�~��gk���˙]��l��x'�����l�w�iAa��5�c�>���3�������$Q�k����\�����,6�X6:���D�U5Tu����#�5�r,���8��e7��lBH�K
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ