Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
LeCrud64.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
LeCrud64.exe
Resource
win10v2004-20230220-en
Target
LeCrud64.sys
Size
15KB
MD5
1f2109002a0a8ca2ee7457e933069847
SHA1
b78ff33cefbc1972202e61d930945c9c094e2d09
SHA256
b17f258a00c7c4339a4a79817e3ed0ebe8c2cf96829e286117994b6f1f106837
SHA512
9b70f5c8311797d100e2f83b7249c1f89bf0e40302e3c72d8fb04fe616e887a4451451758af21a1fa72c900bf1f9fc196c893fce2b89c825edbca33daaf4b2b9
SSDEEP
192:2Xmn8HcxCC9l0HhaKW9d2gRxBy8axBAfJkqXgf1t8NPRhuGKFIiwBjtlAq:gO0Hh5WgZxEJkz6RdiOUq
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
ExAllocatePoolWithTag
IoDeleteSymbolicLink
ExFreePoolWithTag
strncmp
RtlInitUnicodeString
IoDeleteDevice
MmFreeContiguousMemory
MmUnmapIoSpace
MmBuildMdlForNonPagedPool
IoFreeMdl
MmGetPhysicalAddress
MmMapIoSpace
IofCompleteRequest
MmProbeAndLockPages
MmUnlockPages
IoCreateSymbolicLink
IoCreateDevice
IoAllocateMdl
MmAllocateContiguousMemory
KeBugCheckEx
__C_specific_handler
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ