Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageKeyEncipherment
KeyUsageDataEncipherment
Static task
static1
Behavioral task
behavioral1
Sample
fc57e8c0f678a051844ff9ffbc71898647725f5074d5f5b985c4f7f4bc0a51dd.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fc57e8c0f678a051844ff9ffbc71898647725f5074d5f5b985c4f7f4bc0a51dd.exe
Resource
win10v2004-20230703-en
Target
fc57e8c0f678a051844ff9ffbc71898647725f5074d5f5b985c4f7f4bc0a51dd
Size
237KB
MD5
3f7d9dcc1693bba642c9643defc090cc
SHA1
f042609c0e7032582d3f7cf8208e0bf6e9c5b1f2
SHA256
fc57e8c0f678a051844ff9ffbc71898647725f5074d5f5b985c4f7f4bc0a51dd
SHA512
936a9f5e5da7a56fea66cc7867ce6cb7acfda6cad43c8592c6aaf3f48af07afbb2877f04127287e4bf4bd865ff98cb4c07f541585bb47ff614bb13e39fd7bbfc
SSDEEP
3072:XqiX4i0qPtItWc+VNP6U0RMxzR+OETvSMO81iQhWiSoxL4SwgQzdfSZ:XNfc+VNiU7uufo21gQ0
ExtKeyUsageCodeSigning
KeyUsageKeyEncipherment
KeyUsageDataEncipherment
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
RtlAssert
RtlInitAnsiString
RtlInitUnicodeString
RtlAnsiStringToUnicodeString
RtlCompareUnicodeString
DbgPrint
ExAllocatePoolWithTag
ExFreePoolWithTag
MmGetSystemRoutineAddress
ZwCreateFile
ZwQueryInformationFile
ZwReadFile
ZwClose
MmIsAddressValid
ObReferenceObjectByName
IoDriverObjectType
RtlGetVersion
ExGetPreviousMode
KeExpandKernelStackAndCallout
PsGetCurrentThreadId
ObCreateObject
vswprintf_s
__C_specific_handler
DbgPrintEx
strcpy_s
RtlPcToFileHeader
RtlUnwindEx
ExQueryDepthSList
ExpInterlockedPopEntrySList
ExpInterlockedPushEntrySList
ObfDereferenceObject
MmUnmapViewInSystemSpace
RtlRaiseException
KeAcquireInStackQueuedSpinLock
KeReleaseInStackQueuedSpinLock
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
RtlInitializeGenericTableAvl
RtlInsertElementGenericTableAvl
RtlDeleteElementGenericTableAvl
RtlLookupElementGenericTableAvl
RtlGetElementGenericTableAvl
PsGetThreadId
PsGetThreadProcessId
IoGetStackLimits
IoGetCurrentProcess
ObReferenceObjectByHandle
ZwOpenSection
ZwQuerySection
PsInitialSystemProcess
MmSectionObjectType
RtlUnwind
RtlUnicodeToMultiByteN
RtlAnsiCharToUnicodeChar
KeBugCheckEx
vDbgPrintEx
RtlCopyUnicodeString
ExIsProcessorFeaturePresent
ExInitializeResourceLite
ExEnterCriticalRegionAndAcquireResourceExclusive
ExReleaseResourceAndLeaveCriticalRegion
ExDeleteResourceLite
vsprintf_s
MmMapViewInSystemSpace
_purecall
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass
WdfVersionBindClass
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ