Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
3bee84e62c5c7c4b07aae0f100dc41712206aac29eda2b53b4266d49724977ab.exe
Resource
win7-20241010-en
Target
3bee84e62c5c7c4b07aae0f100dc41712206aac29eda2b53b4266d49724977ab
Size
1.2MB
MD5
ff1fcd28348636683c077264bfb119ed
SHA1
7204d3d4262d4274c7c89e0a04b61a26dbaddedb
SHA256
3bee84e62c5c7c4b07aae0f100dc41712206aac29eda2b53b4266d49724977ab
SHA512
be53544b1665903e18f0d50a301acf8bee6f44ae9b8a67c9418a90fabcaad3038165ccf5f7f4024beb90fae9f828f2bcd8d36f11b145d9fef9976b7ce663c89c
SSDEEP
24576:9WnukjaDKSnYBzaJbjSoGF9LzpELx3N/nHwhHK28URjX+L:MnTjaD/9v6Vcx9HwNhuL
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
midiStreamOut
socket
RasHangUpA
GetFileSize
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
WinHelpA
MessageBoxA
GetViewportExtEx
OpenPrinterA
RegQueryValueExA
SHGetSpecialFolderPathA
CLSIDFromProgID
VariantChangeType
ImageList_Add
InternetCanonicalizeUrlA
ChooseColorA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ