Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
4e203158e34ac228a9d26fcd36ec8483fd9fd93ec5ff9472bfc324c7f74bd38e.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4e203158e34ac228a9d26fcd36ec8483fd9fd93ec5ff9472bfc324c7f74bd38e.exe
Resource
win10v2004-20230703-en
Target
4e203158e34ac228a9d26fcd36ec8483fd9fd93ec5ff9472bfc324c7f74bd38e
Size
15KB
MD5
291a873ba20de6adcf965e74f5469c4d
SHA1
7256fe2251ca066a11190ac93cafed27dee5b8c3
SHA256
4e203158e34ac228a9d26fcd36ec8483fd9fd93ec5ff9472bfc324c7f74bd38e
SHA512
66ca109e44e78375d8d6268a7cccf150a7da138886d534cd04afc939c342b79aae2d081273cec32aebc10a035ab7f1c5725addc3b39de45180e59c06a6ff6843
SSDEEP
192:Y6v5PUi0zBZhmd1D5eF6yYcHC03IT4eUWnsNXraBs6V+vOukjtlAur9ZCspE+TMT:Y2PUvzBzu1D5+6y5bHe1B/huMUHeMDf
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
atoi
RtlInitUnicodeString
ExAllocatePool
ExFreePoolWithTag
IoGetCurrentProcess
KeStackAttachProcess
KeUnstackDetachProcess
ObReferenceObjectByName
IoDriverObjectType
KeDelayExecutionThread
ExInitializePushLock
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
RtlGetVersion
ExAcquirePushLockExclusiveEx
ExReleasePushLockExclusiveEx
ZwClose
MmIsAddressValid
PsSetCreateProcessNotifyRoutineEx
PsGetProcessId
ZwTerminateProcess
ZwOpenProcess
__C_specific_handler
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ