Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
293cd2cec9e2f53925b4f2e80d94d88ef9cc5088840f4214729431aa4b330e7dN.dll
Resource
win7-20240903-en
Target
293cd2cec9e2f53925b4f2e80d94d88ef9cc5088840f4214729431aa4b330e7dN
Size
5.9MB
MD5
96ea9c82d25474e563b38f2342027db0
SHA1
9deb67581540b12dc2a334a97a0ac5014a60d1f5
SHA256
293cd2cec9e2f53925b4f2e80d94d88ef9cc5088840f4214729431aa4b330e7d
SHA512
a611f597ed9772c6987cbf54aeb4e4b7cab8e1ab3effa7a22ac5a5a3599b601ea18afb94e56f6d1fbe35ab3e27565d26e91e5aea7e56bc6bb5a9fafcdb48566b
SSDEEP
98304:pg5RLxJEiJdq/PPWm4lWfPzxxkEYQybbaIyzHkwPukKCjsVl9Ej1lzZXrNY3td:u5RUPWm4ldECbmpvPOVVl9Ej1D7Gz
resource | yara_rule |
---|---|
sample | vmprotect |
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
CryptGetHashParam
VariantClear
StrStrIW
CertCloseStore
ImmAssociateContext
GetAdaptersInfo
WSACleanup
AlphaBlend
ExpandEnvironmentStringsForUserW
SetFocus
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
FillRgn
CoCreateInstance
GdipGetImageHeight
GetFileVersionInfoW
WTSSendMessageW
NP_GetEntryPoints
NP_GetMIMEDescription
NP_Initialize
NP_Shutdown
�]�\2� kNSxa�����|�^Ϻ��h�{���tu�gAȰ�1G{�y�e�� %�'��G�N�92��l�Q[�6���5jƢ���9U��6F��0�4>Y�nT'��k}H����C�<pw�5�D�S�L;A�}aRޭ�,�Y��T�����[I�����t�����Du�:IEv�@'�Ԭ��� ��N G�Ә�J8��,��_Ê;BqC=��O�z��J����9Y�}�VI��6G}!��ƻ<�����������g���"�ʛ���-���u$z9K7���h>��G�J8�~�V�K!�<�ڤa�ٴ�9O%GyS�q��.�/�O9��ժ�.y5�"v0�<�m����̦U�+���C��W�`O,0]Ʉ�JG����r��{��q�1>�{e�.�1�m;玆�.0+��4{�G���<�����I�1j���{\��~(u�Qx���&/t�zԀ�hW>q��E�[ӄ����(���܆�v{��V�&�=dN���xg�v��i��}���Xo�����|F�9�;YGe�3����$� OTL�#yʎ����Q� ¶s���C�pr��~����������o�����/�&Q�}_�O�,�Sͧ��4|^�dt�](4/P9lGP�|� L�?�q��F��n���zU��ߞ||���I�:�t��m�F�CAg�Ը��SYe�,e �r�I���g�)r. �qF]��g�0��LXT�}S��2r�h���>@����گ'߉��@��CNF{��%[���\�r�10L,Qiᦿ*�c}'�����Ӛ��Ӕ��N��>+��G(���E�n�TY1O)HH�j����EEXI����Yu6BO{ �'�}����9v�7�{���$���F��5���b�Ҫ=a[Gs�]9xq�E�X�h����T�����$a����+q�8kf+�A_��ӌ]�Ƿ�u���'�OŜW݅vn����;���p\1f�e*��J}pu��N|�H����6gw;L˝K�ƫD�w��¯�:�xI2Y�A�!�X4:.���������r�SF W!�I�m�C �7�X�CkN�f_��3�ncһ���v�<���p!��Ҋ���ʨ�T�-�( ��_e���A�B�}|WҰ�K[��k\�Q$b���:�����TN�$�%;�U .�)!g�N�&ՑQ��8mdy`̠y����l4=(��R��PLB-4��Òj�l�_��Q]z{��wT�꓄FO��L�9~�̑&�@Fr����%��dB5ߌ$O�`�C}5[|'ߟ\�O�|��I�D��P�i���V�\*��]��$M���Hr�U@���;i�'�Ҫ8�!�2K���P��-\��̩�u���J����ᬸ�<Ԩy��������ei�$� ���p[��^���@z®f�dJ?$v� ȼ1߉[�q��Giy��y��-�����8�U#�Di��������#�2�v�~?X�v� kTꀆg�yㇷQ�}9u]�{�W��� ~!ʄWC �?�K&s�^r�3��!p3�*>4�ݓT�M��Lq�ɦ=�,�6v�lWX����8q6���� {�;:�lؠ����_���0�_Q��I��Z��ч���|����Dqm@�H��S��5��E�}�x|�����/�����k����c�q2������^�q+���ae�ܗ���~�~�����ĥ��'Ǡv�Fc6ü�WA��F�i=�s*�/��>N}�e���+���0���[�t��Z��2tM�-�d�}��g-t�� iX��.��w��]I���A)�U�����p� �$�����l��W��5��w(QM9B��p'*�CN���ˆ��1��6��c�Dx*P�����4:�����v�����v3�v�QB�����P,��} 'XǶ�o� �6�6���][�˯���F�{`��$�݂�����7�!����P(���۶I1�V���!�����8">�q��&���D O;sj6:<���*³�e�]L�֧\�9�{��5�9X��Zmiu����ڶ���j�0��7���9g�<)00�AN+�+!�kWx����������*�.g�z����l�(hP��C�%�%��U�p468G��{7]�ڞ)j(�f�>�\��hK`�.�4�A�����#:+��#��*dd�D��j[�0�t#��ʰF���C�Y��.�}�5!��C��l�i�+�T�t��&]��N�O��~3.�c=)Z��w��1t �2�����%���p����KC@:LѪ]b@˹�IN��[�B��y�·���5�8��Y�4�g���YY��X�Y�m#Y%��79Fl>�A�� ��<�"zq�sD�_Jj��~srg��j�@�J`B�8c�]�R�� �B���7�����l=5Q♗���f�i-Od(��WK\?J�g��� ��/��F�ʛ d-��ś�Ј�(�� '��@����m9�5H�¯���������Yq�#�-�������w�W�������>���S�}b��W�ȅ���n�Ú?W8�m $�+�oz��P��� �]��z��+����g�Ќ"9�`�� tc�v��LC�z$����`� ��� ;�|��Y��T-;����nc�`p_/.CUx穟����]0 gp�o��t� g���*���������* }Wa�G�vy��-u�U���M�S_�qvhv�D�a���H�n:Wv��On@�#�̗��芣P��c�oT�*\��C�?���*����aN��C���HJ5���,��W��l�%VWs�_���-�ٵ&x����W��^�����a�Mq���8ۿ\^��<yŜЗ(^�z 5om�e ��6�f���,"��@�U˷";r�?=�Ѥ̈́к�3�fV� ����^nQR����YH� ��=J���oW����4R:�+Msm�em4����1������Wg��]� %<���L� %����"�п`+�����8��~����*.� #S�Ϋ���Ċ���,��E��B�3�r``�Eg>�Y�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ