Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
DiskGenius.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
DiskGenius.exe
Resource
win10v2004-20230703-en
Target
DiskGenius.exe
Size
11.9MB
MD5
430bd821abc618489bee9b02c68b2a41
SHA1
e9ea3c51318450de817ff3fc0f5d97bc413517dd
SHA256
dff5a5c77e474bce4dfa8ca9247fc11dbc6c780fd128aa906fecf5b92a763f5d
SHA512
8ca4c71b4e6dfe2b0e7772340331c9a8bfc3b2681fab5f138d3729265365c80a73ef0202983d10567f1406add08d3e984a3c71d857e99bd09648a37a9330c1f3
SSDEEP
196608:NfuC1KipC3cnNVml6Z1jn6rmograDk9g7AjZ/8N043Sr8RM5kAP0maDAbK:N2CM5kUl6Z1i8gk3GSwRxQOWK
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueW
timeBeginPeriod
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
LockWindowUpdate
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
FrameRgn
TransparentBlt
GetOpenFileNameW
ClosePrinter
RegQueryInfoKeyW
SHGetDesktopFolder
ImageList_Draw
PathIsUNCW
IsThemeBackgroundPartiallyTransparent
CoInitializeEx
SysAllocStringLen
OleUIBusyW
URLDownloadToFileW
SetSuspendState
InternetCloseHandle
WSAStartup
CreateStdAccessibleObject
GdipSetInterpolationMode
ImmGetOpenStatus
SetupDiGetClassDevsW
GetNetworkParams
WTSSendMessageW
�R�#� m�}_��Ix�u?�������S���Z*u���������=B�,���@�뻠��`�_�(S]#^1h���xx�Ã������.2�$]��q����Ӱ��0�4��<S���� tb�J.#Xmi`/�����㬞o>"�ͲJ�R�}������"�G Qw�%��r��^��ק�i��4�m���iR%�Ja][������ww�Q���bӍ�%�V�%Ւ�H�]x��#����e-I�y͂��zJr���W��@�aÇ��>�w��5�6�ІM�d?M��?����2Ir��.�V�kG�c,e���*;�5�#y�LK[�#�����9:������/2x�D� Bt7�J[�s;p����nxF�6�-"O@?{@>��/E�W_y_�7�Ը�c���3F�l�����Z)q\��&Z6����f�S�C�B흢�U�/�e��?�%]�T���j[�3[s�m�"��n��:-ygķkT�h���~��������`�.\G� `���`i���uK��I_�y��k�H���ʄ�d�|ǘ�)3[M�r[�2)XZ�w������V�5����V��*�:�)���\����qzHٖ���I_^��6��o*jɼ�d(ga����T0Ƃ͎�T:�&)_��peɗ0� ����<�t\�l��_��ta�m�\4Masĥ ����!����h���3p�ط(����<aЍ��k>�D4h��1�@Z�Aå�'L��6�����,x��WP*�6R<�A��SE�esT�{���%D���lʐX��GԴq�� M_�R�#�#��0��ÿu�)ñ��*^�L/�$]J5�G���臓� �*�T�щ�o��h|,J�� o�P�����A�ԡ�e?�*�K��K���;Mf��s���N �a��(�x|�o�>�D,dPKˬ�\�dgQ��O�zQ��\O 7����.�j�W`�I������B�M#=bîh�*rj�@|V��Ic�!�%�����}OH &Q��{�λށ�����:F�6#�* �ޟ��`'�A9 �+]��5G����f��E���<�M��s}Ӯ���riNf��K_3��u7�#K�W�I���Zzv`�"���Q�����9��O����~岺(O]~����l�� ��ց�狩���B�U�{�r4(�3SD~ZG� �Y���+�/|�z��I�~�z�и,��J�ȩ�����"Gs�M�,�c�:�Oyp�&{u�������V�9y�y�M�Ϫr7�������>����`ŶDl����/�.��A �?���?R�k�)̦k���� x������,��������5�@t8�3+�I��^8i�Ԫ�yC�&���?� ̓l㕉Lηv���>�D7+m=�*60T��]���]�S'�4w#��Hw^���<��(/N����C�u�c�d��D��Y� ����6:��"�52���G�r�d,���i@�ZZҸ�R��4]�̼\�k���փ�Z�7E�ur6aΊ���X�Tl�8>��"%ݶ���R�9m���H��B-�'��3�!1@���B僑l�����H��y��AH4�ZqI>�8s97o /�ꃞ��HsN���X��٘-��aX����WR#���?t+W��Sr�G}��`����̅�.U�-T���Q���E�� \��:�*�I��ax�cؼ%̏�n��Lt���:y#����=w4���/=��]����)?��Fk�T�6`M��~�{�sH[k�㢑6���Յ@P��I%�m�C捜����w���fT�;���3}JPkuY�ѭs暅�X�=�|����UO�2Е1,ݼ��T�e|K�P8e�cpH�6Wk��u���/BbO��(-��?E)O�Bg��Qf�m��u�dc��?���'u�}��%B@���uj��n�q����3���?R�7��n*���d>3�ќ�m����e��5�yR�w���r��O�1t�}R�%��IIA���gy"r~ʢ�dz#�z`E6�%��_N��d�T��hP�b�Z����@��0��� X$�Sh>� ^j��p�j2���'����<��e��ұxX�#�kw.��bBJ�bO'�^�t�j�4k���~����ܦX�-T��U�x�0�E0�k�o/N�E �|��rS�,m���WN��]�N�f��Y�m����ߥ��4���$`��-[G[(�<��h�b����b��4.���)���F���n��F��uK!�aQ�L�� �j�X�6����>����/C��d.Tb�=�~���(��nK�����`��|E "lJ4s��ul\m�!�$��B�H8n��HL�pՈ�Ai��׆ 9��)1� i Ù�?�8�ȣ�t���*��B�\�|���=�q6�)wvh�Ts�2c��oә�h-��1��2g�?#��g�~e X���tɁ��O�iM�ǡLF�g9#��$;�=.�-�c����0��Q_�#���P��t �g !�x��E]�<��%h��7�<k)�n�6�~�ǟ�idH��:�xP��#��Ni�z���0�����];�\ ���Q��X+����D֏�Bh�� �W*#�d��{.?�ߘ��vK�DO�>�>�]�j#7l�S��g���I`3��~e署���>&���d��T%�������b����dW��A�x�<#���7=Ϸ�ٱFW5��Z��T7j7_�s�����J�I�ᖸ���k(��B�����tG���Ԑ� �K? ��C?!��{����ǓcT��:)m�db ��$ 1�;�_O�F*���)Ա��P���V��n#���]@hq<:%�O�`mF�J\��d��(9+���ӎ8��?��v3+��>� ��l�G�ʼn���ZW��?��)�i����8,��[S�C���\`����V8�0�����,t�@T��&��i�{׃j(���;<��ќ����������~�8�}$��>g��I��{�ֳ����C>�A�ή('���R��#Q�.�*����͞���_9Fd���0���i}��lc�n�`S��MHi��Mڴ����9s�ѕ�0Y
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ