Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
8d3dad525e091602a8e029eedf6a1f317c3835ea244b9facb05726c1971171f4.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
8d3dad525e091602a8e029eedf6a1f317c3835ea244b9facb05726c1971171f4.exe
Resource
win10v2004-20241007-en
Target
8d3dad525e091602a8e029eedf6a1f317c3835ea244b9facb05726c1971171f4
Size
1.3MB
MD5
cfb7191d1ecfc831b6d09fd6068c9881
SHA1
ee8c94822f5fcb6e08c15c146f7ad98c20a4d0f5
SHA256
8d3dad525e091602a8e029eedf6a1f317c3835ea244b9facb05726c1971171f4
SHA512
ab12f30b099c9511dd1aafc9dcdef701ad0398e979eb634d6d400650863ade7fdac6be87ae404e9aeb71bfdfb4da069111eecd08439e88775a28f78cfe3779c6
SSDEEP
24576:RSKxQcFexTC1ssHnMzc5yxc/LG104jUXQgRSx1Kyci8zUbMplSHDsSF1DxZ+0xYN:RZZ4xTChHnM45ykLGC4jyQgILKyciilr
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetVersionExA
GetVersion
GetModuleFileNameW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CreateWindowExA
GetROP2
midiOutReset
ClosePrinter
RegCreateKeyExA
Shell_NotifyIconA
CLSIDFromString
RegisterTypeLi
ImageList_Destroy
ioctlsocket
ChooseColorA
��[�X ��З7b�Ϻm%�gO�0��C�z��^q�-�(��k���z�����ۉ�^v�@ڗW)�m�e��y��#�+���q��Q�I�1����1�VI|��7�c/����̆cc�N�%���� �_A�j����s����جH�V`��� z����u1���� �lR�b(�۷�l�}]��u�ό��l�ctԫ�,A��1�}U��r�g��WZ&_�I�@�{QQ�c<2H�6?��:�د\�k����^�H�o '&NO��`ˤ���0|�M�'���I��|�n �}�p��aXÕL9?����j0o�J�������qh�^�� r2�-#�$����V+�r?q��A姄&�x!��8ܾ�� ./?Z�`!�Q$�����&X8��Z:}3�`�s�����b�V���~�,���+C��(l�s��q,�Vl��t(���s��³ٗK�jz�N�) u��[ �rٕ9���~�*�z���P�6�J�� 8��{���%�&�X���L�1�NU;�u#Н~2�/�Z��ny ��yz�����Թq�q��t�c��zN>�l3jV�f����/��4#C`���` ~�c�15����lʥ#����!q3�G�_�w���>2�j"���ǟqs?���?�5�:G��A�ޖ�������ES�b9q��I#��(x��ʉ� ~�YJC��a�T]vZ�ƹCTɥ��aj�:�4�Y�)�����:Ɉ�1��;�E_`��$I e<jy��k�,�j��H�]1� ��*�X�+P_M8���t �@#z8Lc,����/�����S��A�J���t��� � �6�S�RU"��K�Q�F�ZH������Yӻ�V#y�)wM�^�9��r<����%?3���&�Z;9�@��e�";��x���v�f���~1φ��fD�X"��X���Ľ_?ǩR�3�eG� }��x(S l{:�1��at@�����Z��D�����/�-�>Ȋy�Yi�����oos�9���%X Hb���];mu��x��n]����#jVt<����S�w���ڄ���۹x'K��t��`���&�4���J ��#-����t�����3��f �'�����;����e�n=C�;����!ڳ�?��\�(@Vy�)��O8�Y�^(�]�PW�� �b�$�O9�0Y�J�}4��#Y������1�4��d� wq�ek�/����{b�(dd�0�����#�����x��[�Ɖ �uݍ����Y���^��k���ۊ��N}4���+g��E����܂ *��@"���)*�[>X@d������"z0�BÖB���&��$ ��/���$y�RzxX$P�"�ZY�%������Y��ݬm_X���'�L)�F n�%���]���B����|��X��p��'n;m+�)+K]<ŹI58 ����D�����Ohs:��/�QwSMnt�p������|T�5ܗH�<4�ǵ�6������Cep�Q �R� ���@�/Ʈ��{-���a�h]�8r��9� h-օk��ku}@Ȋ�)�jW�Cg�z��������@/�U��"& ����W����,���Џ���j� u��\�̛vX�����:�F���Ξ&�0������&��'ܟ����U�V56�b�/.�p�P̋ڼv�;�;j2�.i�����5NF����9z����ТY`d~��_ҽx�����Ie��Χ�TJ��=��.V#�B]/eu]�mM���浮^����ty]������%!��}#ڞٸ��ZP���>��.J��G�%��B��!�LR�Y��$6�ݗo<�H�6*t�]��� �^������e�V#i;L��2�ǖ;5J�Ve��e<����q);�5?�RNl7�J�apy𛊴jl.�dQ5X�jX?��o_y���e�4��C�����y'���������l3���p sl���}���Za�����w .�)����C������##٥������?�9�,А�RͰ�J9?�����?a�i��.4r%0e������>n�y�����|>�N���U��� ���j������#���w��o�Z�g�Dq����,>���ib�`���ͮ}YYwl��M\^3�3z�����^�d^� 'b�mE���baC5D��T�T���o!�~S�b�;��[� 箥�(�I�K�* s��p�!�2)R �Z�ԆQ+M���J�~8����s"8C��d�Vg[���Q���E����#*?�I�?�B`�w�Hv5��[��9[��m?����/P'L��=�o���L@_���_�3R}������~AU��]`���H;�K�����*FQ�����]�!���B�Ì���L'�^��HW��, ��Nm����)�G��'RxK M_��w����cx�Ȅ��7a�Y�h�-_֛�����lja��;��QX.�?i�˹�-nC*vl�iJ#�&ң�-1��k3�lK�ߛ-E�M�pc��qc�N@���t7ǟ��n�o��V�ɲ��������5�o�Z��=�����}&�e��wc�+r~L�g/���L�D�M����dz��R�T&�ϣ��l�QΈ����zuu1�=)�Qͯ�������,"�u|\�f� ߰w��ل}��5�r�Z��Vey��T��Kpn�v\ �����n����3�rf�zpH�� T�.n����jB�L�D ��;�gN{��nRϾ��d`>�O��Uɲ�YG�g������'��6I��ӳ5eóМ�9%��j�e�橬98B�#�Y��F��8N�ӆ���%���1�U�l�4�t!6��e�b�va�QY�æ ��B��})a<O����.�����7��k�CC�Ƕ)�Ѽ]���5�t ��s�&��f����� w¸�>k���;ZYg��]G�)t���-���W8���gt-�����!�S��� 4_X H�c¥����A��:�l.m������)�,dmO�Ƚ%��yx^���_ ټ�Z��J<��H~w���!Y�N�L��}ٹ���E��HM�P-_�C�n��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ