Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
DiskGenius.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
DiskGenius.exe
Resource
win10v2004-20230703-en
Target
DiskGenius.exe
Size
12.2MB
MD5
5fc96c65a989567f391c32892180ab31
SHA1
2f8611540575d8ee676fb6d2e24c909a35cab270
SHA256
c863ad80e694197f23a35bd0b2696b8d2e23b44a51fa48212903c0b2f63db87e
SHA512
4bdcf2970e94a8ad615cafa4e0232362c099296bbb819752cd6c22d1b3d4339f86b0671276652dc1b4f1c295534281a25691da26aa25833841aa76047e08cb6e
SSDEEP
196608:is7P0KhSSIfoT5xkZFXGRb9e1cVIMn3xquipkE3PePFB0nj4A2QyrWuyR:iMhSS4oT5i5Gx9e1wIMn3RQpmPs9uCJR
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
VerQueryValueW
timeBeginPeriod
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
UnionRect
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
GetObjectType
AlphaBlend
GetOpenFileNameW
OpenPrinterW
OpenServiceW
SHGetDesktopFolder
ImageList_Draw
PathIsUNCW
IsThemeBackgroundPartiallyTransparent
CoCreateGuid
SysAllocStringLen
OleUIBusyW
SetSuspendState
InternetAttemptConnect
htonl
LresultFromObject
GdipDrawImageRectI
ImmGetOpenStatus
SetupDiGetClassDevsW
WNetGetConnectionW
WTSSendMessageW
q���pv�S+�Ȁ��b�g.~)��fn�l~�M{�!̀g����QŸ$�bzM�SL�dIy}� 9v.�0hy�Lҋ�����.:�X��.� �5F�&Y�W ��p�g��9=b���ncN!S��)��'��]�̷��gj{H�a��H4A�����Kc�n�}�JH��u�Ak(W���X��x�i�`�R�9�$/9�~�+����_�<�M_�t˲(�>W�Z���c�,�Q��}���K��6t��q��=j��HD'Ss����O�`T���mi`�k��^��P�L7+iv�p��и>V���!����d���2���8�'�k}ou������8Ntbr�Χ��62F�O�Fv�I�R�� 0���|)�P����Ѭ����&���D�g�Cf@�0-H#�'����%k�%�kfrn{%�L�'|�i��ѥ��x�G�~�����푞�Ǧ�^���@_���7v�s���p0����E m~v�N�X?�%����R����%4h����f�:bЛ��|X��F{4{��^���7(2��T��rw�ۙ ��y%�f�5%,n� �n�uC!M"= �<L�d�_�2�ľjgÁ�����X�.�[�c�I��B F�=�ھ傒�g:p��@m�`rz��)ħ�i��<k�����3�`��\O��,��ر�UP�Ƿc�����n6�!�:ЭL4�)c��qJj+uՅ#�ʛ�1 ��Q�0`���L�����q���hG���dvd���+�d4V��#��^rp��ˣ<��� ��M�/�WA�Z�/Vvu,n��$���o�8 �� Y{���`��A�Ӫ��G���^�l$Ӎ��TtВ_8�akw��[��P���k�#l�pAE�ɱ��|vY���g�-նyc+3|��J�V�����ְ/�wj�R�I��C��ːwc�t�(��9L���)f�|p<������L�EG+��%��y�?�md��p+��?�>�PY��X�Z�$Lf��͒aoU�p�#��Si/p�m�ƃ���* �g����%� ��h� �aU/�>I8opW� ���V>�di�Q#���0.���6���&���B�T��G����_���! ���J(+�\��������'2��b�ˈ���`K�X�*��3���@2��J7c����7�E�wȷ��N���p���+��X �aD_���2"B����� �G$�7&��z�����fC��Ts�VK��s��g��1M������ Ϻ"��s�C��1-���t�_W" �p�0v�0����6k;�!:C;$��*c�h�E-;����ݫ-�)��%D���yG~u��f-��_�u���9�ڱN�@6:9&�RǪ��{�PK���ua1�>uX�VElW�[��gD�{X�τ���f��f�}9�D���!_`�%�WN-D :��EO�財�F����GON�e�-Jri�{/�������&B���������4e���.�Flij�&:7j�ΎAM���V���C��͋?sw�ܝk!e�֕�h᠍|4�ٶ2��5=2,��}�`θ�J���dY���&�S�O��9�n.���H�e{�8�C1���lNn�_4��%p ��������]�9U�{gQ��������fV��������I!r����HF��_1����I-� 4\$�~3��-�q 41�� �WfL���2�lg;W[$��ڡ��9ݰ�>q���_?f!&�Hβ�O�*�M������M�,�Ly8lh�Q�nh�H�5P Td6�^ a�7���)���kee�Ŋ��=4�T�pT�O��]|���h��q�C�(,�볻����V�_)��=.h�BQ��3]�K�lj`[�#@�·�ƕ��� �G�G�5Ff4�9�m���=f" ��c-]�TB� ��)� c��}�3�NQ��դ�K^vB�.���Ñ�4'�j�����a�[:�ã�7M������\q-*}�ԁ����q����@͓^q=U��t���d°�+�Ր>OA5u7� ;������U7 ��yw����E�Aoq*ck�h.@�Sk�u����ą����A���|Մ��N������5@0�txm,~וU�IdnQ8�3���� g��[4WP2u�3�_r_�_u���T���9L�EJ��lM�X+�hl��X�N�>I#&�`p{w+��&y�+�oV����GK�����^ֈ�Dq�_�<W�Q� � }��/_E�<�mIU���d�������6s=�}I�N���Z ,�����W��X3�%c���UW�5i��]�:�<wt3a���*SB(D���rmp7/q�H:��~��$'�,+e��6|w(�����i?�����Ϯ�n�8#L�^����ݟP멵�z膊��I��ج�P�"��M�v�.{B�İ���� BaNw�xt���QרG9:'_1�C���da�O�=б�b$��I�$Jjvk�]]2����B�E��A�즵�q����b�����A1@�=�9B���@�� �m��G5{����%���]Q�2����\^ez��C��Bo��B�����I}(�VsWo��Y��J�Pw����/�/1_�5����5�+��i�#9�o��G��.}�����,L�� ������.8Ul��uPT@�_P��@�~��'"����,U�V�P��2�1Qxrv���#���Ɂ�ܸ(��@���ڟ����CEX+K?��ƀ�-����¦�Db�M�>%�?�� �X�{�b��7䕋)K=�i���N�f-�j5O��k���F�Q�.u)�M1��B~7�Q��T�a8���C����3�[��b4'�eaa�P6*� f�oaXa3��N:�ڭ#��q���p���y8.���<��<Ƹ��bu��+|��ȣ��9 �n���;�����=bѲ����v+�C� zV�f�ۣ|/���/o{�x2F���$��7��F�^�+�ʞ�}`����Q��L1/��\'��*�njAX��]z�2�͏�����>��|m7\�*��"�<�cwe��h�����d����e�����,6���}1��?�/g����R�`��(֖�c���tW]���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ