Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
rmid.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rmid.exe
Resource
win10v2004-20230220-en
Target
rmid.exe
Size
20KB
MD5
6200fd77a0d12e7bd520cee9b1af723b
SHA1
ece93c41512f7707da9746d3007464d7c6a10e60
SHA256
975af45a899f40e255a1ed26a3a6869f03a25958a3847c8360739bbeb6011d0d
SHA512
f8ba88ddfb06ec04cc6685bf9573b9029c865772c3b477c545323c77e57fe7b36a016e20ed65893557d4a5eba8d870f3f0cbad8920cc63119a86b38fff5907b4
SSDEEP
384:Rjk+VCAP6UWpTGZlCBbF+4XXef7DG7YGhDgf2h+:RnV9P89GZ2F1+f7DG71hUf2h+
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=Oracle America\, Inc.,OU=Software Engineering,O=Oracle America\, Inc.,L=Redwood City,ST=California,C=US,1.2.840.113549.1.9.1=#0c14706b6961646d5f7573406f7261636c652e636f6d
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
JLI_GetStdArgc
JLI_GetStdArgs
JLI_Launch
JLI_MemAlloc
JLI_CmdToArgs
RtlCaptureContext
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
IsProcessorFeaturePresent
IsDebuggerPresent
GetCommandLineA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlVirtualUnwind
RtlLookupFunctionEntry
__C_specific_handler
memset
__p__commode
_set_fmode
__acrt_iob_func
__stdio_common_vfprintf
__p___argv
_crt_atexit
_seh_filter_exe
_set_app_type
__p___argc
_configure_narrow_argv
terminate
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_narrow_environment
_register_onexit_function
_initialize_onexit_table
getenv
__setusermatherr
_configthreadlocale
_set_new_mode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ