Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
111.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
111.exe
Resource
win10v2004-20230220-en
Target
111.exe
Size
14KB
MD5
093cee3b45f0954dce6cb891f6a920f7
SHA1
379ff9236f0f72963920232f4a0782911a6bd7f7
SHA256
8c614cf476f871274aa06153224e8f7354bf5e23e6853358591bf35a381fb75b
SHA512
e59dd27845e17ed18da79097fcce7c03922d9fe300814a12554f18a7094dddd7351c36ca3978058ffdcbd493a837431f7fa27110097f75da89e3d1d7894bfbb8
SSDEEP
192:19Bgq7dIqqXU9piHf0etqlKdaK01r8Y+vpEjtlAur9ZCspE+TMDQrmV:19Bgq7dINXU/iHf03K0a+UHeMDj
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DbgPrint
IoGetLowerDeviceObject
RtlCompareUnicodeString
RtlInitUnicodeString
ObfDereferenceObject
IoDeleteDevice
IoDeleteSymbolicLink
ObfReferenceObject
IoGetDeviceObjectPointer
memset
IoFreeIrp
KeSetEvent
IoFreeMdl
MmUnlockPages
ExFreePoolWithTag
KeWaitForSingleObject
IofCallDriver
KeInitializeEvent
IoBuildAsynchronousFsdRequest
IofCompleteRequest
MmMapLockedPagesSpecifyCache
IoGetAttachedDeviceReference
RtlUnicodeStringToInteger
ExAllocatePoolWithTag
memcpy
ObDereferenceObjectDeferDelete
IoBuildDeviceIoControlRequest
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
KeBugCheckEx
RtlAnsiCharToUnicodeChar
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ