Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
dbf71ba0962907fb15f592fecdd99b63b486603d658ab3525c7f5984aa78eb02.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dbf71ba0962907fb15f592fecdd99b63b486603d658ab3525c7f5984aa78eb02.exe
Resource
win10v2004-20221111-en
Target
dbf71ba0962907fb15f592fecdd99b63b486603d658ab3525c7f5984aa78eb02
Size
308KB
MD5
79d6bd8371fed2ee95defca40be1664b
SHA1
266de9b4ad0a7dc09480f1886474d11e79995aeb
SHA256
dbf71ba0962907fb15f592fecdd99b63b486603d658ab3525c7f5984aa78eb02
SHA512
72030cfd7b070b79b64e3f320abddcb250d48593842b806dfdc6b506aa867a85a9bc2035ecc2cdbbaa61a514db0222120c75ea969e46aa537c5e0ba30ea0f76a
SSDEEP
6144:Hmq9dHkUxNrWvlSBsGGNII0fj+hewYPm1UGy4gPDnQYY36Do2I9N6X:HHHk0Nr5BsGI0b+h3HtQPrQYAYoXA
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
MmUnlockPages
IoFreeMdl
RtlCopyMemoryNonTemporal
KeLowerIrql
KfRaiseIrql
KeSetEvent
ProbeForRead
ProbeForWrite
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
MmAllocatePagesForMdlEx
MmFreePagesFromMdl
MmMapIoSpace
MmUnmapIoSpace
IoAllocateMdl
ObReferenceObjectByHandle
ObfDereferenceObject
PsGetCurrentProcessId
__C_specific_handler
ExEventObjectType
RtlGetVersion
RtlCmDecodeMemIoResource
MmAllocateContiguousMemory
MmFreeContiguousMemory
IoGetDeviceProperty
MmGetPhysicalAddress
PsSetCreateProcessNotifyRoutine
KeInitializeDpc
KeInsertQueueDpc
KeRemoveQueueDpc
KeFlushQueuedDpcs
KeInitializeEvent
KeInitializeTimer
KeCancelTimer
KeSetTimer
KeSetTimerEx
KeAcquireInStackQueuedSpinLock
KeReleaseInStackQueuedSpinLock
ExAcquireFastMutex
ExReleaseFastMutex
MmBuildMdlForNonPagedPool
MmUnmapLockedPages
IoOpenDeviceRegistryKey
ExFreePoolWithTag
ZwSetValueKey
RtlInitUnicodeString
MmGetSystemRoutineAddress
VerSetConditionMask
RtlVerifyVersionInfo
IofCompleteRequest
IoCreateDevice
IoDeleteDevice
IoGetCurrentProcess
RtlEqualSid
SeQueryInformationToken
PsReferencePrimaryToken
PsDereferencePrimaryToken
PsDereferenceImpersonationToken
PsReferenceImpersonationToken
MmHighestUserAddress
SeExports
KeWaitForSingleObject
PsCreateSystemThread
PsTerminateSystemThread
RtlIntegerToUnicodeString
RtlCopyUnicodeString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
ZwQueryValueKey
_vsnprintf
KeBugCheckEx
IofCallDriver
IoGetDeviceObjectPointer
IoBuildDeviceIoControlRequest
ZwLoadDriver
ZwUnloadDriver
KeDelayExecutionThread
strncmp
ZwClose
ExAllocatePoolWithTag
DbgPrintEx
_stricmp
atoi
strchr
RtlRaiseException
KeQueryPerformanceCounter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ