Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
DiskGenius_x64.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
DiskGenius_x64.exe
Resource
win10v2004-20230915-en
Target
DiskGenius_x64.exe
Size
12.2MB
MD5
0c0f29dbf6daefbad52fbbaca64264a2
SHA1
5eda2617adc5380f0df0d88e150baaeb24c7d697
SHA256
32a0477d4a37542a97a7a550d5bc55888f60bbef3f6a0c93f43bca3b51590a50
SHA512
35fe32822fddc0701cd846081cbb278c112701c2486130225640edbf27dcc4a969e7fc749bf91b1e2350e28c47fd1e933149a87b0a928597e7c3e2476287e8c6
SSDEEP
196608:2/04eUDhm9FIsg+TBcnWv7Yf5fhHkAQQ6Rh3vu05OKyV8yj6h0ov8qEUWJKG2nk3:v4FYPcmW5H0LJ52GyjS0zqxHcpC1v9u
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
VerQueryValueW
timeBeginPeriod
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
UnionRect
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
GetClipBox
TransparentBlt
GetOpenFileNameW
OpenPrinterW
OpenServiceW
SHGetDesktopFolder
ImageList_Draw
PathIsUNCW
IsThemeBackgroundPartiallyTransparent
CoCreateGuid
SysAllocStringLen
OleUIBusyW
SetSuspendState
InternetAttemptConnect
htonl
CreateStdAccessibleObject
GdipDrawImageRectI
ImmGetOpenStatus
SetupDiGetClassDevsW
WTSSendMessageW
�B7��r|��吼%�1���6ff������_>vs]S�Z�1����͞O3����!Ʈh���)4� H�+c¥��Ó�5ݗ�F��Ѻ�8������@a1�s� �E &>�XJL&{3����!u�-�@-�(��c I�����oΣ�}jc�C� k&Yb,E��~PM�Np\��S��R������9}� 4컯%�Q�5�Ë(wk� ��$s2��sߌK(�H��&�s��X��(�WG�U�>v9ӣ��n�S��p�m6μ�����䓬b�8�X���St9l�sm�I/%�s��gG�BH��vӬ��r�Ŝ$c��[�m���(D���o��H7eM�������ǃ�h��y.*�\� ���tu��7�j�\�=<E����kw��0�'�x�"}�;�����P�a�s�T���^dAqՔ���.�9���'(�'4�δ�=۠���ґ 3�RW��m���sp�����Yr��ܩ�寍HP{N �M�M���q����i���S�+vm�uwLO�����G����#y�Tm+��g�E��u�Ȇ��#|�������-�'��E3-��N��<�_WA�ڿ�e�dz$L9�gd���'%e��}�'����)(o�L�"Mj�t�����tt��h=�GJ$�Y�Aޙ��_�$�Ь�-�=Y�N��q�����KW�)�m.m���}�C:J�aB�u���t�h�z�NX�!Z�i1�7�ʁ±lw�Tl�������X����q��[=�J�7������ |*�}�O�o��,���&�N�T���W��jY�_�f�p����w�(��ֵ��J�3#O�e����$wלt��^ ���j�'�F6��G�1ҽy�+�nwA�f���k�E�-�=lƧx�I��X�Ŏ�%�~�S0��pA����: LH1>������R0������lF!��of�W�ct� ���rD��f�3;��6>J�(nݭ��2]�Aͥ5�0��R���o<�5K�c�O��A|[G{��FM�W�~�P�_Q��eA�����j����2�l�x.R�r�Y��"�#A�{��s�>q ��� ��� M�����N���`aN�z��_��]�"B�o�y��dž��u�и�L]�'X����6Em�6�$I�.7��߂�CW��������%�n}(��hګNG�=#�pq�0���?(i���P�K�.on �rU������]MH�ϡF��G�����kn��5G@�����=L�������B� A�MÔ�J�3�Ȗ^^�hj���8�*[��f� ,\���#�VXo1�o.��d0�51a_����8_��P��Y�����P��n=A�N����L�4�T;�u��HAo�^+����_���Q���r6y���N.>��Ƃ�M���� �gC��/������Y/��X��O�{��O�0��� �y�wo`u�nr��i ��"X���'SJ�������o�3��G�.Ebg�p�R��ß��9�.=����O���Y��s�*F̻r]X>�hH����&Jg�:1 �_� BP�g�Çʏ=�,�Y��v!-9G��`�d���]w���K��C����m�6�e�;c+�A��,;��%<]/)��!cq8��N~�zr�e&i�J�.F=�083�K��#���B/y�ۖ���n �V�N�0Za2���/�b_F���ʆH����O�)� 3V����o�$)�@L��7��L ��r��=T\At�W��݉VcnH[W=����`�,t���t̮�>��OaTUIS`ZxhIŎ��N�!�ma[���Z����8��[v�;X�2R=�9���5����3eF'JU�:^��w#=T ����ك�_���/�Y��`���l����=ʢ�)H;����`�J�h� �� dLJكs���գ��)�@�h��^I�C�'r{z� V�'�������F|*�'�F{��9��>��,��%�m���Ø��K�!�DF�չSW?E��Aq�n��/���1���]�SJ����ب>:h`�]�,������1ИmFbٖ6�'#����op����< �hw�ƱPf�Y�~���%A,�z��W�D�1[)���pb6I���&���m��3smaVbc�����ɡ'8�(!MN� La��%I����ɂE���N܃�zf�3�T ��B����&A۬�뇡�������B� �1��^�����ɹ��� 4��}�s�L�������9�$�E��,oP|<�IOk�6�.��h��&`�BR���Ŗ��{y�������5N��g���s�v����kB���R��g�(��M ���Sp�اR�)ϐ����f�!�Ӎ�t*�˷��[,��∨F���`a����j<\�@���D�1��;�,����9�WΨ��ܒ��qԀѢ؝%&�ɰ�f�p����)w��j�}|1����R��9�����sk=ݨ�r��4���qY҉h�b0G�Tn {�@S�!��=:V� ����I���|J��>��!���<P*���N����R���<w����f:$At.uE{�����݈�L�CD���濎t��[B��Ԙr�����>� 7� tHUEF�;�����~������)���eCh"g�&���-���0�h������ ߕ(ձ�7��aU�z���w��㔌V0if�ZZY�5um?2K���w/o���]��Sa��#�%:�zt/�\)�g�m)�-EZ�����sWX�P������7�n�:�9ꔄ%�G[KK�8���Q���F�7�pN���8[���(C�PmJ`�H���!��Ɓ*�Ⴞ�"sȌ�:n�� ^X[��\+A�Rùm��韮���m�^���(���X ��we\�fs�}�j��M%��ב��oq�eq���S�_'��E\����I����t�M�:���I(4���0��&Yo�����~)����Ѕs�:[e`���,T�Ah}�ª�tl-� ��q�ߤW����Q��T���?��nx�9���Y��p�g@�|�wU�6I�cSD�6{���S{�9���u�( ���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ