Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
129e16af92b8bd328e046d6764ec1233e7185d8321a5da92e1194950c210ed14.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
129e16af92b8bd328e046d6764ec1233e7185d8321a5da92e1194950c210ed14.exe
Resource
win10v2004-20221111-en
Target
129e16af92b8bd328e046d6764ec1233e7185d8321a5da92e1194950c210ed14
Size
24KB
MD5
303357a74e737595dc7728cb12e2210e
SHA1
1233818f2ec6181790330ff6d767a8d148f5903f
SHA256
129e16af92b8bd328e046d6764ec1233e7185d8321a5da92e1194950c210ed14
SHA512
e7166c8740875ff5c5053b0a2c7b2d058d4b5d5160898418900901979a2c901dfab0ad92fa58aee9840b6eaacb03c3c53cacc096bbbfbabe4f64ef818246d1fd
SSDEEP
384:CCXSEGt/skBUnmTYuyAzT5Ncz8YLHizUHeMDS9Lx:BWn5Tu86HiT
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_stricmp
RtlInitUnicodeString
RtlCreateSecurityDescriptor
RtlValidSecurityDescriptor
RtlSetDaclSecurityDescriptor
RtlGetVersion
KeInitializeEvent
KeWaitForSingleObject
ExAllocatePoolWithTag
ExFreePoolWithTag
IoBuildDeviceIoControlRequest
IofCallDriver
IoGetDeviceObjectPointer
ObfDereferenceObject
ZwLoadDriver
ZwUnloadDriver
ZwClose
ZwCreateKey
ZwSetValueKey
RtlCreateAcl
RtlAddAccessAllowedAce
RtlSetOwnerSecurityDescriptor
SeExports
KeBugCheckEx
strchr
DbgPrintEx
IoGetCurrentProcess
_vsnprintf
atoi
strncmp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ